ljsd.org
Issued by R3
About this certificate
This digital certificate with serial number 03:02:7a:62:b3:85:1e:f6:ba:85:1c:b9:db:f7:0e:e8:64:69 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ljsd.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:02:7a:62:b3:85:1e:f6:ba:85:1c:b9:db:f7:0e:e8:64:69Serial Number (int): 262180100830798760511308389212709322253417
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f5:d3:69:39:32:ea:3b:7c:8d:66:3d:2a:21:ee:60:6d:1e:67:cc:2e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): de:09:bc:60:2e:95:45:fb:89:79:23:6c:98:fc:db:6b:ef:c8:f7:ac
Fingerprint (sha256): 97:24:68:e2:46:56:84:95:c7:a6:0b:80:cd:8b:ba:5e:93:b7:fe:ae:45:a1:28:ca:8f:4f:d8:11:31:b7:98:37
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ljsd.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ljsd.org
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ljsd.org
Other certificates including the domain name ljsd.org
(limited to 100 certificates)
admin.livingstonchristianschools.org
admin.ljef.ljsd.org
ms.bsd29j.com
*.ljsd.org
ljsd.org
meadowgreen.ljsd.org
www.phacs.org
admin.crps.coltsneckschools.org
ljsd.org
*.ljsd.org
admin.ahs.alcoaschools.net
admin.wjh.wintersisd.org
www.bronxdalehs.org
www.ljsd.org
www.ljsd.org
1.southampton.k12.nj.us
olita.ljsd.org
admin.church.faithmarietta.org
coltsneckschools.org
ljsd.org
www.crawfordschools.org
admin.hpiam.marquezhs.net
hhs.hattiesburgpsd.com
woodsboro.pylusd.org
2.southampton.k12.nj.us
admin.ashlandcityccs.net
admin.westcheathamccs.net
macy.ljsd.org
www.alarqamislamicschool.org
elportal.ljsd.org
summer.materdeicatholic.org
admin.coahomak12.org
adultschool.portervilleschools.org
admin.church.faithmarietta.org
admin.arcataschooldistrict.org
ljef.ljsd.org
admin.ljef.ljsd.org
admin.riverviewschools.com
*.ljsd.org
jordan.ljsd.org
www.grandcenterartsacademy.org
www.brackett.k12.tx.us
aeries.ljsd.org
www.mes150.org
balloustay.com
www.hawthorneacad.org
aeries.ljsd.org
ljef.ljsd.org
church.faithmarietta.org
admin.arcataschooldistrict.org
macy.ljsd.org
admin.jh.iasd.cc
www.cristoreysanjose.org
www.tjs.org
is.bsd29j.com
elportal.ljsd.org
ljsd.org
icacristorey.org
meadowgreen.ljsd.org
aeries.ljsd.org
admin.elportal.ljsd.org
admin.arcataschooldistrict.org
admin.elportal.ljsd.org
debusk.greenek12.org
www.ljsd.org
enroll.ljsd.org
admin.arcataschooldistrict.org
www.icefps.org
ljsd.org
admin.wintersisd.org
ljsd.org
www.ourladyofgrace.co
admin.arcataschooldistrict.org
palmlanecharterschool.org
jordan.ljsd.org
ranchostarbuck.ljsd.org
sainte-school.org
admin.pylusdparkview.org
elportal.ljsd.org
admin.ranchostarbuck.ljsd.org
ljsd.org
colegioangloamericanohgo.edu.mx
macy.ljsd.org
www.ljsd.org
www.wintersisd.org
olita.ljsd.org
admin.arcataschooldistrict.org
mail.ljsd.org
www.ps17queens.com
flacsms.flacsnyc.com
www.afsenyc.org
admin.alarqamislamicschool.org
olita.ljsd.org
admin.aes.lammersvilleschooldistrict.net
www.lacountycharterselpa.org
admin.colegioedlio.org
admin.marquezhs.net
enroll.ljsd.org
ljsd.org
ri.jcboe.org
admin.ljef.ljsd.org
ms.bsd29j.com
*.ljsd.org
ljsd.org
meadowgreen.ljsd.org
www.phacs.org
admin.crps.coltsneckschools.org
ljsd.org
*.ljsd.org
admin.ahs.alcoaschools.net
admin.wjh.wintersisd.org
www.bronxdalehs.org
www.ljsd.org
www.ljsd.org
1.southampton.k12.nj.us
olita.ljsd.org
admin.church.faithmarietta.org
coltsneckschools.org
ljsd.org
www.crawfordschools.org
admin.hpiam.marquezhs.net
hhs.hattiesburgpsd.com
woodsboro.pylusd.org
2.southampton.k12.nj.us
admin.ashlandcityccs.net
admin.westcheathamccs.net
macy.ljsd.org
www.alarqamislamicschool.org
elportal.ljsd.org
summer.materdeicatholic.org
admin.coahomak12.org
adultschool.portervilleschools.org
admin.church.faithmarietta.org
admin.arcataschooldistrict.org
ljef.ljsd.org
admin.ljef.ljsd.org
admin.riverviewschools.com
*.ljsd.org
jordan.ljsd.org
www.grandcenterartsacademy.org
www.brackett.k12.tx.us
aeries.ljsd.org
www.mes150.org
balloustay.com
www.hawthorneacad.org
aeries.ljsd.org
ljef.ljsd.org
church.faithmarietta.org
admin.arcataschooldistrict.org
macy.ljsd.org
admin.jh.iasd.cc
www.cristoreysanjose.org
www.tjs.org
is.bsd29j.com
elportal.ljsd.org
ljsd.org
icacristorey.org
meadowgreen.ljsd.org
aeries.ljsd.org
admin.elportal.ljsd.org
admin.arcataschooldistrict.org
admin.elportal.ljsd.org
debusk.greenek12.org
www.ljsd.org
enroll.ljsd.org
admin.arcataschooldistrict.org
www.icefps.org
ljsd.org
admin.wintersisd.org
ljsd.org
www.ourladyofgrace.co
admin.arcataschooldistrict.org
palmlanecharterschool.org
jordan.ljsd.org
ranchostarbuck.ljsd.org
sainte-school.org
admin.pylusdparkview.org
elportal.ljsd.org
admin.ranchostarbuck.ljsd.org
ljsd.org
colegioangloamericanohgo.edu.mx
macy.ljsd.org
www.ljsd.org
www.wintersisd.org
olita.ljsd.org
admin.arcataschooldistrict.org
mail.ljsd.org
www.ps17queens.com
flacsms.flacsnyc.com
www.afsenyc.org
admin.alarqamislamicschool.org
olita.ljsd.org
admin.aes.lammersvilleschooldistrict.net
www.lacountycharterselpa.org
admin.colegioedlio.org
admin.marquezhs.net
enroll.ljsd.org
ljsd.org
ri.jcboe.org
Certificate
The complete raw certificate details for ljsd.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAwJ6YrOFHva6hRy52/cO6GRpMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAyMTMwOTM0NTZaFw0yMzA1MTQwOTM0NTVaMBMxETAPBgNVBAMT CGxqc2Qub3JnMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAtGMojseV iMGTT6bEhFYX6sGTK3CceXz3+8zDxluq/2C5SQF6QxlwYHKC+6E9UcDvdI5k0rKB WVRMyS5BQ/YapIHA3m4PXoGrSkp5rxv+9xO5sjsi38Jvb7Mlo/BBr1aB/FposknI VfBc4pYMCzoELBj2yJxxbKss9IR46jLr4gVUl0ZUSZ9LcEVBikqwwWHNk4QzMWjD yAAvFF52KoWqElS02NuQNp7ODLFBs3SWUfZKZ1adaLhAVGpZL/dLYdcl0SEhcuME tkyoEOR505L5UmPWXhikc61G5KmcRgIrL0p0B+cqH4/ybllOZ9ro28nMzB4w3PQP sQxUQduOfaLMwa5alSWMDHjHLVIxyoJNR5cN4nfJKKftcpb4eVE9wruU8ho6wSnw AXn1eDdTvdObaoIhmF3mTfL/cwJb+jqKjg8FS41VQzzcaBU8X3IBcvHLRN4vmllR rBitLuclAVt7w+prK5A6piKCfmIngyvAo/oqJJlO7bmInhNfMeqG/VB3AgMBAAGj ggJEMIICQDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPXTaTky6jt8jWY9KiHuYG0e Z8wuMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEB BEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUF BzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMBMGA1UdEQQMMAqCCGxqc2Qub3Jn MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB 9gSB8wDxAHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGGSleK pQAABAMARzBFAiEA3Gad4ypdWEVGd57WiYozUfmxbNZIgWQCfSErpQAAHoQCIARP TCMUJyOrzYruFGhMTH+x6Gew11EJzhQQcfEtU9FRAHcA6D7Q2j71BjUy51covIlr yQPTy9ERa+zraeF3fW0GvW4AAAGGSleKjwAABAMASDBGAiEA6c+mYSkVdsQQiIbM 89C8otscKJZDuyncEbrm/uPkGykCIQCVaoFeftqjM7nOrVP3lcW1uxTGX72B5ixp UUyI8AIIozANBgkqhkiG9w0BAQsFAAOCAQEAQLF7X8fo4h2WcZe4DsnSkPelRaAK xFyowrsLZUVE2zmZDThxVrT5PnQW6pcmoL0vXrsXui4e3kSqp4KsThTN/1PGXKJc c1yj2vuZoiwNVXdhefHr4AxXaO6sUiE+4IKWfF2807LS5eUbYpY92qcfjydce3IR QYvhk6m8kiIIzJVisXqPNwwiEdV99vf8Dv2yNmlpcFNMnTawIt9rvX0AZU9+OqGX yMmXynwbjkQ8ddTWO7OQ7HRcgpLhTJSwsPomtGNQxU8kOri5B6YZZuLo66PTLXc1 V56jLblbrGYfyYMNWIWMib51T+jMLoQML2/TN232Fr4/iyOzhaoAvtDPew== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAtGMojseViMGTT6bEhFYX 6sGTK3CceXz3+8zDxluq/2C5SQF6QxlwYHKC+6E9UcDvdI5k0rKBWVRMyS5BQ/Ya pIHA3m4PXoGrSkp5rxv+9xO5sjsi38Jvb7Mlo/BBr1aB/FposknIVfBc4pYMCzoE LBj2yJxxbKss9IR46jLr4gVUl0ZUSZ9LcEVBikqwwWHNk4QzMWjDyAAvFF52KoWq ElS02NuQNp7ODLFBs3SWUfZKZ1adaLhAVGpZL/dLYdcl0SEhcuMEtkyoEOR505L5 UmPWXhikc61G5KmcRgIrL0p0B+cqH4/ybllOZ9ro28nMzB4w3PQPsQxUQduOfaLM wa5alSWMDHjHLVIxyoJNR5cN4nfJKKftcpb4eVE9wruU8ho6wSnwAXn1eDdTvdOb aoIhmF3mTfL/cwJb+jqKjg8FS41VQzzcaBU8X3IBcvHLRN4vmllRrBitLuclAVt7 w+prK5A6piKCfmIngyvAo/oqJJlO7bmInhNfMeqG/VB3AgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 262180100830798760511308389212709322253417 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-13 09:34:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-14 09:34:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ljsd.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4093669367495581091799980346046113532017456710135487140116804247988763998498729263694701252406265454282180420782144424175116758949366294520867186324452690402593751751138259479300749125940072837357806634641542676487157838996527467794506014232085904603068042867422549187640285029617934239668144124020124610668407593005914176159842662492605338781897303498746096923760937798800639762037697230589201478232461981970922476873650163398341623204725157514351749388664766222103326478424751504324856534464472739314042753696698045916646925216036524622377703778878274422603648527126060376148090275551444402734116993207107983852149694416691099965218615864532549792440916920615484212490155622033390459533606082385008804338425906184306780261410987970160855152840533709427259000270114744161966995507557066611183857443481408062422705872232784660112648168785878809609483580497759423016131201448298792155122339106674713729774017488065906645749879 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f5d3693932ea3b7c8d663d2a21ee606d1e67cc2e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ljsd.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001864a578aa50000040300473045022100dc669de32a5d584546779ed6898a3351f9b16cd6488164027d212ba500001e840220044f4c23142723abcd8aee14684c4c7fb1e867b0d75109ce141071f12d53d151007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001864a578a8f0000040300483046022100e9cfa661291576c4108886ccf3d0bca2db1c289643bb29dc11bae6fee3e41b29022100956a815e7edaa333b9cead53f795c5b5bb14c65fbd81e62c69514c88f00208a3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0040b17b5fc7e8e21d967197b80ec9d290f7a545a00ac45ca8c2bb0b654544db39990d387156b4f93e7416ea9726a0bd2f5ebb17ba2e1ede44aaa782ac4e14cdff53c65ca25c735ca3dafb99a22c0d55776179f1ebe00c5768eeac52213ee082967c5dbcd3b2d2e5e51b62963ddaa71f8f275c7b7211418be193a9bc922208cc9562b17a8f370c2211d57df6f7fc0efdb236696970534c9d36b022df6bbd7d00654f7e3aa197c8c997ca7c1b8e443c75d4d63bb390ec745c8292e14c94b0b0fa26b46350c54f243ab8b907a61966e2e8eba3d32d7735579ea32db95bac661fc9830d58858c89be754fe8cc2e840c2f6fd3376df616be3f8b23b385aa00bed0cf7b