app-api.plantsnap.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:05:8e:9b:4c:de:1b:9a:42:fd:43:64:14:4a:58:f4:2e:df was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=app-api.plantsnap.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:05:8e:9b:4c:de:1b:9a:42:fd:43:64:14:4a:58:f4:2e:dfSerial Number (int): 263227826370360287751306436658406859484895
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 61:f7:b9:4e:9a:d8:21:19:15:d4:da:37:79:21:fe:22:ff:35:49:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 02:f2:51:59:b6:d9:4c:8e:98:7d:ff:fd:c4:35:67:e8:4b:57:4e:b7
Fingerprint (sha256): 8e:67:73:7f:ca:f7:bf:16:d4:b7:c6:ca:83:16:18:bf:19:9a:b8:06:a3:76:3f:4c:ac:4c:c6:95:86:5a:e6:53
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate app-api.plantsnap.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for app-api.plantsnap.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
app-api.plantsnap.com
app-api.plantsnap.net
app-api.plantsnap.net
Other certificates including the domain name plantsnap.com
(limited to 100 certificates)
www.lomond.app
staging-web.plantsnap.com
apis.wordbox.ai
www.plantsnap.com
www.plantsnap.com
www.purelifedigital.com
*.plantsnap.com
*.plantsnap.com
*.plantsnap.com
hookupscan.com
*.plantsnap.com
www2.plantsnap.com
tripheist.ai
staging-dashboard.plantsnap.com
www.plantsnap.com
ixi.swapptechs.com
my.plantsnap.net
web.plantsnap.com
www.plantsnap.com
isostore.outravibe.me
plantsnap.com
app.travelloc.com
api.primpedmn.com
finestdoors.com
*.plantsnap.com
my.plantsnap.com
www.admin.argutopia.co
blog.plantsnap.com
www.plantsnap.com
www.plantsnap.com
app.travelloc.com
www2.plantsnap.com
www2.plantsnap.com
staging-web.plantsnap.com
staging-web.plantsnap.com
my.plantsnap.com
www2.plantsnap.com
www2.plantsnap.com
www2.plantsnap.com
www2.plantsnap.com
new.plantsnap.com
www.plantsnap.com
cloudpaste.app
web.plantsnap.com
staging-web.plantsnap.com
api.plantsnap.com
webmill.com.au
www.anoukd.nl
blog.plantsnap.com
www2.plantsnap.com
bogdaniuga.com
blog.plantsnap.com
www2.plantsnap.com
plantsnap.com
plantsnap.com
business.plantsnap.com
staging-api.plantsnap.com
app-api.plantsnap.com
staging-api.plantsnap.com
www.agrapine.com
*.plantsnap.com
www.plantsnap.com
www.plantsnap.com
git.plantsnap.com
dl.plantsnap.com
plantsnap.com
staging.api.plantsnap.com
partner.elaachi.com
www.lomond.app
www.plantsnap.com
ga.alrehmanbiryani.pk
dev.adamswoodcrest.org
www.new.plantsnap.com
www.comparateur-pompes-funebres.fr
www.plantsnap.com
bogdaniuga.com
my.plantsnap.net
ga.alrehmanbiryani.pk
www.plantsnap.com
web.plantsnap.com
ads.plantsnap.com
www.plantsnap.com
renugamultistores.co.in
www.new.plantsnap.com
new.plantsnap.com
dl.plantsnap.com
my.plantsnap.com
my.plantsnap.com
www2.plantsnap.com
web.plantsnap.com
api.plantsnap.com
ixi.swapptechs.com
staging-web.plantsnap.com
apis.wordbox.ai
www.plantsnap.com
www.plantsnap.com
www.purelifedigital.com
*.plantsnap.com
*.plantsnap.com
*.plantsnap.com
hookupscan.com
*.plantsnap.com
www2.plantsnap.com
tripheist.ai
staging-dashboard.plantsnap.com
www.plantsnap.com
ixi.swapptechs.com
my.plantsnap.net
web.plantsnap.com
www.plantsnap.com
isostore.outravibe.me
plantsnap.com
app.travelloc.com
api.primpedmn.com
finestdoors.com
*.plantsnap.com
my.plantsnap.com
www.admin.argutopia.co
blog.plantsnap.com
www.plantsnap.com
www.plantsnap.com
app.travelloc.com
www2.plantsnap.com
www2.plantsnap.com
staging-web.plantsnap.com
staging-web.plantsnap.com
my.plantsnap.com
www2.plantsnap.com
www2.plantsnap.com
www2.plantsnap.com
www2.plantsnap.com
new.plantsnap.com
www.plantsnap.com
cloudpaste.app
web.plantsnap.com
staging-web.plantsnap.com
api.plantsnap.com
webmill.com.au
www.anoukd.nl
blog.plantsnap.com
www2.plantsnap.com
bogdaniuga.com
blog.plantsnap.com
www2.plantsnap.com
plantsnap.com
plantsnap.com
business.plantsnap.com
staging-api.plantsnap.com
app-api.plantsnap.com
staging-api.plantsnap.com
www.agrapine.com
*.plantsnap.com
www.plantsnap.com
www.plantsnap.com
git.plantsnap.com
dl.plantsnap.com
plantsnap.com
staging.api.plantsnap.com
partner.elaachi.com
www.lomond.app
www.plantsnap.com
ga.alrehmanbiryani.pk
dev.adamswoodcrest.org
www.new.plantsnap.com
www.comparateur-pompes-funebres.fr
www.plantsnap.com
bogdaniuga.com
my.plantsnap.net
ga.alrehmanbiryani.pk
www.plantsnap.com
web.plantsnap.com
ads.plantsnap.com
www.plantsnap.com
renugamultistores.co.in
www.new.plantsnap.com
new.plantsnap.com
dl.plantsnap.com
my.plantsnap.com
my.plantsnap.com
www2.plantsnap.com
web.plantsnap.com
api.plantsnap.com
ixi.swapptechs.com
Certificate
The complete raw certificate details for app-api.plantsnap.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLDCCBRSgAwIBAgISAwWOm0zeG5pC/UNkFEpY9C7fMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MDkwNjI4MDdaFw0x ODEyMDgwNjI4MDdaMCAxHjAcBgNVBAMTFWFwcC1hcGkucGxhbnRzbmFwLmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANpOzEt6cJ4NLEBklj2OtZ6w EH3YPIH9+j7RaCJ2ws6WpWmmdGp4lJ04iA0RheY51+ifpD9i6L6CUwL1krOM8SPb xHyhNSja3w0qRJOIW/SWEFLHniVbhoYJauLa6Zdk12z0FQqpMsnDONYP0ElmpmCW /sa4b6NX2gIYbyS5uUpg0cEkHa6kBfNZ0Nk4SdCoaa/aA0y0BbWDFIdRo5NgpqUF N03Bt992kpFc/SXMLFr5H5M9CXIao3Po9GPzvz0aEHr9hHs2tVhnbqDPfEYlaaH4 qz8fca+WafWB+CGHC5ndfDJ34Y5dh8+XWHEjQg5f4q4yZtXbYfy+GQUwhEvZMHkC AwEAAaOCAzQwggMwMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUYfe5TprYIRkV1No3 eSH+Iv81SWYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzA3BgNVHREEMDAughVhcHAtYXBpLnBsYW50c25hcC5jb22CFWFw cC1hcGkucGxhbnRzbmFwLm5ldDCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYL KwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9u bHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGlu IGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0 IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMIIBBAYKKwYBBAHW eQIEAgSB9QSB8gDwAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgA AAFlvTsLdwAABAMARzBFAiAhP2Zk5jmFupKz82X34oxW55nuVXp0pDhvpfgRjyDL MAIhAOTbXzcgB9eZVs4w8NODbT+yBwyRPaAVgnSed39MYw41AHYAb1N2rDHwMRnY mQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFlvTsM1AAABAMARzBFAiBm4ryeiFt7 Q8W3gzP9y4DPFjuTd/O1UQK41znz/WwErwIhAM77OTPp1gGbK3mOLCspDeMDyweO A9d4U18+ycQbIc/wMA0GCSqGSIb3DQEBCwUAA4IBAQBVAso/jZgKiewOxUY7lfix on5jmW1+Gm5eOv9Cl3pp1oF8Ej7vfQsDmLSNZmfUPLaoFStPFqUHvroDs0T65FpU gqkqGbCgokqX3u11f9KJ5HuICKw3W7gElNfgT4cjcwHlc3n/NEJMxfcrftlW+8pM xfzY3M+oIFu2I6tv8/FoYiZdG9FuAbT8B30QSZilzGg7D5LkIqmK+ugnclJODBjL z+yvGZAtmXPVBxfqu0f/53Gw8SoXtdHaJ8IDaL16NhV00sBuJsjkUD2HQZLDiwgL js83ahVRqVCohLgbXx5uO2TvmnnVG0d0QhR5ZPrAzW0Hi1H8Pl6nskQQi63xCDDv -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k7MS3pwng0sQGSWPY61 nrAQfdg8gf36PtFoInbCzpalaaZ0aniUnTiIDRGF5jnX6J+kP2LovoJTAvWSs4zx I9vEfKE1KNrfDSpEk4hb9JYQUseeJVuGhglq4trpl2TXbPQVCqkyycM41g/QSWam YJb+xrhvo1faAhhvJLm5SmDRwSQdrqQF81nQ2ThJ0Khpr9oDTLQFtYMUh1Gjk2Cm pQU3TcG333aSkVz9JcwsWvkfkz0Jchqjc+j0Y/O/PRoQev2Eeza1WGduoM98RiVp ofirPx9xr5Zp9YH4IYcLmd18Mnfhjl2Hz5dYcSNCDl/irjJm1dth/L4ZBTCES9kw eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 263227826370360287751306436658406859484895 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-09 06:28:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-08 06:28:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app-api.plantsnap.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27558807237781181983212414098387282642593772027731527579017909833849182620246795927234079218916516099672890824354371569420844785902742001670811412368922478235561340664365455757999297781749584937325455733502675571597756294689356512553505642725370477237710344729801557070935146180091679032309819997822079746034504470755018889917380837345162963439487675333920001567898407718483307065430234363206192730367109955516970079195963519515234429942257093748647192619287600561166644542193723422812100461983455309917655435518049920443463458297242723339538432866830585483853615967746642561914183447630647206866284940907445267017849 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 61f7b94e9ad8211915d4da377921fe22ff354966 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-api.plantsnap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-api.plantsnap.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165bd3b0b7700000403004730450220213f6664e63985ba92b3f365f7e28c56e799ee557a74a4386fa5f8118f20cb30022100e4db5f372007d79956ce30f0d3836d3fb2070c913da01582749e777f4c630e350076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165bd3b0cd40000040300473045022066e2bc9e885b7b43c5b78333fdcb80cf163b9377f3b55102b8d739f3fd6c04af022100cefb3933e9d6019b2b798e2c2b290de303cb078e03d778535f3ec9c41b21cff0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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