www.nexus.globalquakemodel.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e5:01:26:d8:84:24:01:74:95:11:d5:08:fb:e0:87:2d:27 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.nexus.globalquakemodel.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e5:01:26:d8:84:24:01:74:95:11:d5:08:fb:e0:87:2d:27Serial Number (int): 339263050746921792372774725570459192470823
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: bc:15:8f:ef:da:ea:f0:6f:11:8c:3b:12:05:90:fd:5e:b5:0e:87:3b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 32:95:bb:a6:68:3d:11:a5:19:07:0b:bd:8f:aa:cb:d7:ad:6a:46:91
Fingerprint (sha256): 80:a8:70:f6:51:40:16:fe:fa:9b:70:90:4b:1b:66:18:ef:0f:ad:d9:96:c1:a4:21:60:e8:ac:7a:c5:38:8c:92
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.nexus.globalquakemodel.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.nexus.globalquakemodel.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nexus.globalquakemodel.org
www.nexus.globalquakemodel.org
www.nexus.globalquakemodel.org
Other certificates including the domain name globalquakemodel.org
(limited to 100 certificates)
ftp.openquake.org
ftp.openquake.org
globalquakemodel.org
www.globalquakemodel.org
www.nexus.globalquakemodel.org
old.globalquakemodel.org
ftp.openquake.org
www.gem.foundation
cloud-storage.globalquakemodel.org
www.nexus.globalquakemodel.org
storage-scw1.globalquakemodel.org
cloud-storage.globalquakemodel.org
globalquakemodel.org
ftp.openquake.org
old.globalquakemodel.org
globalquakemodel.org
nexus.globalquakemodel.org
ftp.openquake.org
old.globalquakemodel.org
www.nexus.globalquakemodel.org
www.nexus.globalquakemodel.org
globalquakemodel.org
old.globalquakemodel.org
old.globalquakemodel.org
cloud-storage.globalquakemodel.org
cloud-storage.globalquakemodel.org
ftp.openquake.org
old.globalquakemodel.org
old.globalquakemodel.org
old.globalquakemodel.org
globalquakemodel.org
www.nexus.globalquakemodel.org
www.nexus.globalquakemodel.org
ftp.openquake.org
globalquakemodel.org
old.globalquakemodel.org
globalquakemodel.org
ftp.openquake.org
old.globalquakemodel.org
globalquakemodel.org
globalquakemodel.org
storage-scw1.globalquakemodel.org
globalquakemodel.org
www.nexus.globalquakemodel.org
www.nexus.globalquakemodel.org
ftp.openquake.org
globalquakemodel.org
ftp.openquake.org
ftp.openquake.org
ftp.openquake.org
ftp.openquake.org
www.nexus.globalquakemodel.org
www.nexus.globalquakemodel.org
ftp.openquake.org
ftp.openquake.org
old.globalquakemodel.org
storage-scw1.globalquakemodel.org
nexus.globalquakemodel.org
www.nexus.globalquakemodel.org
old.globalquakemodel.org
globalquakemodel.org
www.globalquakemodel.org
globalquakemodel.org
www.nexus.globalquakemodel.org
globalquakemodel.org
globalquakemodel.org
globalquakemodel.org
globalquakemodel.org
storage-scw1.globalquakemodel.org
storage-scw1.globalquakemodel.org
storage-scw1.globalquakemodel.org
globalquakemodel.org
ftp.openquake.org
storage-scw1.globalquakemodel.org
storage-scw1.globalquakemodel.org
globalquakemodel.org
globalquakemodel.org
cloud-storage.globalquakemodel.org
ftp.openquake.org
old.globalquakemodel.org
www.nexus.globalquakemodel.org
cloud-storage.globalquakemodel.org
www.globalquakemodel.org
mail.globalquakemodel.org
old.globalquakemodel.org
ftp.openquake.org
old.globalquakemodel.org
globalquakemodel.org
www.globalquakemodel.org
old.globalquakemodel.org
ftp.openquake.org
www.globalquakemodel.org
ftp.openquake.org
globalquakemodel.org
www.nexus.globalquakemodel.org
globalquakemodel.org
www.globalquakemodel.org
globalquakemodel.org
globalquakemodel.org
storage-scw1.globalquakemodel.org
ftp.openquake.org
globalquakemodel.org
www.globalquakemodel.org
www.nexus.globalquakemodel.org
old.globalquakemodel.org
ftp.openquake.org
www.gem.foundation
cloud-storage.globalquakemodel.org
www.nexus.globalquakemodel.org
storage-scw1.globalquakemodel.org
cloud-storage.globalquakemodel.org
globalquakemodel.org
ftp.openquake.org
old.globalquakemodel.org
globalquakemodel.org
nexus.globalquakemodel.org
ftp.openquake.org
old.globalquakemodel.org
www.nexus.globalquakemodel.org
www.nexus.globalquakemodel.org
globalquakemodel.org
old.globalquakemodel.org
old.globalquakemodel.org
cloud-storage.globalquakemodel.org
cloud-storage.globalquakemodel.org
ftp.openquake.org
old.globalquakemodel.org
old.globalquakemodel.org
old.globalquakemodel.org
globalquakemodel.org
www.nexus.globalquakemodel.org
www.nexus.globalquakemodel.org
ftp.openquake.org
globalquakemodel.org
old.globalquakemodel.org
globalquakemodel.org
ftp.openquake.org
old.globalquakemodel.org
globalquakemodel.org
globalquakemodel.org
storage-scw1.globalquakemodel.org
globalquakemodel.org
www.nexus.globalquakemodel.org
www.nexus.globalquakemodel.org
ftp.openquake.org
globalquakemodel.org
ftp.openquake.org
ftp.openquake.org
ftp.openquake.org
ftp.openquake.org
www.nexus.globalquakemodel.org
www.nexus.globalquakemodel.org
ftp.openquake.org
ftp.openquake.org
old.globalquakemodel.org
storage-scw1.globalquakemodel.org
nexus.globalquakemodel.org
www.nexus.globalquakemodel.org
old.globalquakemodel.org
globalquakemodel.org
www.globalquakemodel.org
globalquakemodel.org
www.nexus.globalquakemodel.org
globalquakemodel.org
globalquakemodel.org
globalquakemodel.org
globalquakemodel.org
storage-scw1.globalquakemodel.org
storage-scw1.globalquakemodel.org
storage-scw1.globalquakemodel.org
globalquakemodel.org
ftp.openquake.org
storage-scw1.globalquakemodel.org
storage-scw1.globalquakemodel.org
globalquakemodel.org
globalquakemodel.org
cloud-storage.globalquakemodel.org
ftp.openquake.org
old.globalquakemodel.org
www.nexus.globalquakemodel.org
cloud-storage.globalquakemodel.org
www.globalquakemodel.org
mail.globalquakemodel.org
old.globalquakemodel.org
ftp.openquake.org
old.globalquakemodel.org
globalquakemodel.org
www.globalquakemodel.org
old.globalquakemodel.org
ftp.openquake.org
www.globalquakemodel.org
ftp.openquake.org
globalquakemodel.org
www.nexus.globalquakemodel.org
globalquakemodel.org
www.globalquakemodel.org
globalquakemodel.org
globalquakemodel.org
storage-scw1.globalquakemodel.org
Certificate
The complete raw certificate details for www.nexus.globalquakemodel.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISA+UBJtiEJAF0lRHVCPvghy0nMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAyMTIwMTM0MDBaFw0x ODA1MTMwMTM0MDBaMCkxJzAlBgNVBAMTHnd3dy5uZXh1cy5nbG9iYWxxdWFrZW1v ZGVsLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK8OLCK06XmM AVKP1jHnFx4HIGL2taHgRY048Jl/tQBtd1jQKPC6PpyiX2en2Sbs4jLDi7rMjPsD Rrojc0U0mLi5jQQXBZXbp4P54jy7kWX8cK1VUGQoeucsXJcoNVssO+9/NI9Q8nI1 Mq5BLcIu7nexArilVAi/sf1v3YoNWsqkysruHDO6V2V1+X1SmmzC1JczaSfI+Op8 4OABOt2u2iEGgBdUjDynHDnj3fYRiqo7Wq2S5llKBfee3FJAsd5xPOUmzL+hLsDw Bs35klYkuoncx4tTcbpRq7ipaPgoNVPqaubjpjaWvYsw93oplqpVhuZfaeSFXN9b YAW51LAR1MUCAwEAAaOCAjowggI2MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUvBWP 79rq8G8RjDsSBZD9XrUOhzswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzBFBgNVHREEPjA8ghpuZXh1cy5nbG9iYWxxdWFr ZW1vZGVsLm9yZ4Ied3d3Lm5leHVzLmdsb2JhbHF1YWtlbW9kZWwub3JnMIH+BgNV HSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcC ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGb VGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5 aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0 aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcv cmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAHfZSzq8a9vPh8/gtv0+Iyw2 O55bFGJ39uh+jdyclm7zJKbpNpldm24XL+Q06IxMuc+/jYtcEVhsJDCXnuu4EVA9 efLGZFrZP/WaasqLdej2AFrPt95LYNOltWrNaRerjWPrx84URkT4rbbEDrxy1j1d jKEJH9HuaunOqguXmhv2AOLeDx1auya68wawzCpL4wRIAIWnqwP1EE7XF+cF65kl lFxpd0ReXYlK+YnKRXLrrH5LOaYFBvsmBLqtW759fgSPqLQnhdORVR4v/Ef0z95l tI1d7xVVH48fKVbnvb7vz7EaZK/DQkiSqIcZfi8USzkMe3TJ+BqKMA00a2oQwKM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw4sIrTpeYwBUo/WMecX HgcgYva1oeBFjTjwmX+1AG13WNAo8Lo+nKJfZ6fZJuziMsOLusyM+wNGuiNzRTSY uLmNBBcFldung/niPLuRZfxwrVVQZCh65yxclyg1Wyw77380j1DycjUyrkEtwi7u d7ECuKVUCL+x/W/dig1ayqTKyu4cM7pXZXX5fVKabMLUlzNpJ8j46nzg4AE63a7a IQaAF1SMPKccOePd9hGKqjtarZLmWUoF957cUkCx3nE85SbMv6EuwPAGzfmSViS6 idzHi1NxulGruKlo+Cg1U+pq5uOmNpa9izD3eimWqlWG5l9p5IVc31tgBbnUsBHU xQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 339263050746921792372774725570459192470823 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-12 01:34:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-13 01:34:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nexus.globalquakemodel.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22098692042231071187899717128095267590155871372888782622927558872229500774138338999382396605004864590420613954485589322272265125357656172244849191266472367765771049289461121418910599679936910178246101678962078992468579477063549379600909941580292136069088340535023454711081902380402841565750632008954258308816702403808754471251808781061061868268621841870270572050223524835590431721628326881347427155114080906231934707965831208676327999660379220990046819285835122564291584880026707858899892758885226636876564519055529546758070264562809986605185174272872897404816053768302141890902422732085276680188033930806685011662021 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bc158fefdaeaf06f118c3b120590fd5eb50e873b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexus.globalquakemodel.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nexus.globalquakemodel.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0077d94b3abc6bdbcf87cfe0b6fd3e232c363b9e5b146277f6e87e8ddc9c966ef324a6e936995d9b6e172fe434e88c4cb9cfbf8d8b5c11586c2430979eebb811503d79f2c6645ad93ff59a6aca8b75e8f6005acfb7de4b60d3a5b56acd6917ab8d63ebc7ce144644f8adb6c40ebc72d63d5d8ca1091fd1ee6ae9ceaa0b979a1bf600e2de0f1d5abb26baf306b0cc2a4be304480085a7ab03f5104ed717e705eb9925945c6977445e5d894af989ca4572ebac7e4b39a60506fb2604baad5bbe7d7e048fa8b42785d391551e2ffc47f4cfde65b48d5def15551f8f1f2956e7bdbeefcfb11a64afc3424892a887197e2f144b390c7b74c9f81a8a300d346b6a10c0a3