fornjot.malc.org.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b1:f6:1a:0a:b1:d8:b5:1c:16:4e:73:7d:6c:ef:9e:81:e8 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fornjot.malc.org.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b1:f6:1a:0a:b1:d8:b5:1c:16:4e:73:7d:6c:ef:9e:81:e8Serial Number (int): 321893962043882807695015678018845237215720
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 0d:6c:f0:e4:3d:0a:ac:1d:be:4e:03:6d:70:df:1c:a1:fe:35:7b:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f5:34:bd:4c:1b:fc:81:67:2c:de:cb:1d:6b:83:75:11:f1:27:f1:83
Fingerprint (sha256): 97:d2:dd:09:7b:81:a6:ae:88:19:3c:89:52:c8:12:ab:cf:a4:ed:e9:6e:30:5a:6c:89:e8:5f:52:25:a5:69:c4
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate fornjot.malc.org.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fornjot.malc.org.uk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fornjot.cl.cam.ac.uk
fornjot.malc.org.uk
fornjot.malc.org.uk
Other certificates including the domain name malc.org.uk
(limited to 100 certificates)
munin.malc.org.uk
hats-cdn.malc.org.uk
manatee-gw.malc.org.uk
munin.malc.org.uk
webserver.srcf.net
webserver.srcf.net
rig.cl.cam.ac.uk
webchat.malc.org.uk
rig.cl.cam.ac.uk
rig.cl.cam.ac.uk
manatee-gw.malc.org.uk
mundilfari.malc.org.uk
webserver.srcf.net
wadjet.malc.org.uk
callisto.malc.org.uk
blog.malc.org.uk
malc.org.uk
callisto.malc.org.uk
hats-cdn.malc.org.uk
fornjot.malc.org.uk
webchat.malc.org.uk
io.malc.org.uk
manatee-gw.malc.org.uk
webchat.malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
hats-cdn.malc.org.uk
rig.cl.cam.ac.uk
webserver.srcf.net
callisto.malc.org.uk
ananke.malc.org.uk
manatee-gw.malc.org.uk
callisto-20140409.malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
malc.org.uk
callisto.malc.org.uk
mundilfari.malc.org.uk
callisto.malc.org.uk
malc.org.uk
manatee-gw.malc.org.uk
manatee-gw.malc.org.uk
webserver.srcf.net
webserver.srcf.net
io.malc.org.uk
munin.malc.org.uk
manatee-gw.malc.org.uk
io.malc.org.uk
blog.malc.org.uk
mundilfari.malc.org.uk
webchat.malc.org.uk
manatee-gw.malc.org.uk
malc.org.uk
webchat.malc.org.uk
rig.cl.cam.ac.uk
ananke.malc.org.uk
malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
callisto.malc.org.uk
webchat.malc.org.uk
munin.malc.org.uk
io.malc.org.uk
webchat.malc.org.uk
blog.malc.org.uk
rig.cl.cam.ac.uk
io.malc.org.uk
manatee-gw.malc.org.uk
callisto.malc.org.uk
webserver.srcf.net
malc.org.uk
webserver.srcf.net
webserver.srcf.net
munin.malc.org.uk
webchat.malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
manatee-gw.malc.org.uk
hats-cdn.malc.org.uk
webchat.malc.org.uk
malc.org.uk
callisto.malc.org.uk
ananke.malc.org.uk
malc.org.uk
munin.malc.org.uk
fornjot.malc.org.uk
manatee-gw.malc.org.uk
io.malc.org.uk
rig.cl.cam.ac.uk
fornjot.malc.org.uk
manatee-gw.malc.org.uk
webserver.srcf.net
blog.malc.org.uk
webserver.srcf.net
wadjet.malc.org.uk
callisto.malc.org.uk
munin.malc.org.uk
mundilfari.malc.org.uk
callisto.malc.org.uk
io.malc.org.uk
hats-cdn.malc.org.uk
manatee-gw.malc.org.uk
munin.malc.org.uk
webserver.srcf.net
webserver.srcf.net
rig.cl.cam.ac.uk
webchat.malc.org.uk
rig.cl.cam.ac.uk
rig.cl.cam.ac.uk
manatee-gw.malc.org.uk
mundilfari.malc.org.uk
webserver.srcf.net
wadjet.malc.org.uk
callisto.malc.org.uk
blog.malc.org.uk
malc.org.uk
callisto.malc.org.uk
hats-cdn.malc.org.uk
fornjot.malc.org.uk
webchat.malc.org.uk
io.malc.org.uk
manatee-gw.malc.org.uk
webchat.malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
hats-cdn.malc.org.uk
rig.cl.cam.ac.uk
webserver.srcf.net
callisto.malc.org.uk
ananke.malc.org.uk
manatee-gw.malc.org.uk
callisto-20140409.malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
malc.org.uk
callisto.malc.org.uk
mundilfari.malc.org.uk
callisto.malc.org.uk
malc.org.uk
manatee-gw.malc.org.uk
manatee-gw.malc.org.uk
webserver.srcf.net
webserver.srcf.net
io.malc.org.uk
munin.malc.org.uk
manatee-gw.malc.org.uk
io.malc.org.uk
blog.malc.org.uk
mundilfari.malc.org.uk
webchat.malc.org.uk
manatee-gw.malc.org.uk
malc.org.uk
webchat.malc.org.uk
rig.cl.cam.ac.uk
ananke.malc.org.uk
malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
callisto.malc.org.uk
webchat.malc.org.uk
munin.malc.org.uk
io.malc.org.uk
webchat.malc.org.uk
blog.malc.org.uk
rig.cl.cam.ac.uk
io.malc.org.uk
manatee-gw.malc.org.uk
callisto.malc.org.uk
webserver.srcf.net
malc.org.uk
webserver.srcf.net
webserver.srcf.net
munin.malc.org.uk
webchat.malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
manatee-gw.malc.org.uk
hats-cdn.malc.org.uk
webchat.malc.org.uk
malc.org.uk
callisto.malc.org.uk
ananke.malc.org.uk
malc.org.uk
munin.malc.org.uk
fornjot.malc.org.uk
manatee-gw.malc.org.uk
io.malc.org.uk
rig.cl.cam.ac.uk
fornjot.malc.org.uk
manatee-gw.malc.org.uk
webserver.srcf.net
blog.malc.org.uk
webserver.srcf.net
wadjet.malc.org.uk
callisto.malc.org.uk
munin.malc.org.uk
mundilfari.malc.org.uk
callisto.malc.org.uk
io.malc.org.uk
Certificate
The complete raw certificate details for fornjot.malc.org.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgISA7H2Ggqx2LUcFk5zfWzvnoHoMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMDYwNTI1MjZaFw0y MDA0MDUwNTI1MjZaMB4xHDAaBgNVBAMTE2Zvcm5qb3QubWFsYy5vcmcudWswggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDi+PNVj4QyhNU+Xf9NOcbuhbvX 2eE9C9hfPgS55+InlyX1mD8W6L5VMelLjfHijjhSM6AytCp3s1HrPf8J0UWXx0Qy 0xGihZPqMe+AWLPIt7az+ezt2VtN1/85mCI18I6JrlqOdga7eQAobgC8BZFyfRtH d2tn7nnhKXWM0OzI0cQJ5/5z0rTwjC31VqWg6ohGgbDRVYTI/HE94XBTBFWs98k3 OTHPhCr1goaviBGK1IJDZzgjOQ+ldUrwwVhwOOWD6Uzn278oXjDtEDPPfkbczXuE KsjhJ1SPshbU9kYrJZk83LgFw4rNt23Ek1qoRJJXogB5mnefkZeU0FdqBQgXDoOy 2DIP6cjh58j6xU85D+VvGl62oviD7uwr24bldFSC2oZi4KzWaKCCjYK8rlf+fW6M dfH9hGx6yW7YyLP+lssroixyEoG7yXrqPXlAMA3+QaN/7OpnFN6LIFLQL8jmvqZu 1tJNZAsCZuHOQMaxd6hvnZnpn8tJNmGGtOd2v0yfxMUBGOgRchX1B10CpvGOGJV7 3g9V6TzjpeCjB8qRsfgCd28pqDHYX5tMeEAEscZ9uZba3K1TbrVj0njRW8FosebN lZ2xZXd2+BuLrf/a2TvBO8JdXVvNCTJf1evjkaOCX6DLA0qxRThidR7jOOZaVS9Z f65fT+KSnWBRMC5H7QIDAQABo4ICfTCCAnkwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBQNbPDkPQqsHb5OA21w3xyh/jV7NjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMDQGA1UdEQQtMCuCFGZvcm5qb3QuY2wu Y2FtLmFjLnVrghNmb3Juam90Lm1hbGMub3JnLnVrMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAsh4FzIuizYog Todm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFveYeVrAAABAMARzBFAiEA0XcuTz8G DKk3ZahfketqPwsyqNpgAF7ixr4m/b1Mc2MCICDXYaAs5OdQYiajdGNpOSp/6zw+ Zs72NxJ7nauBgJYBAHUA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMA AAFveYeXsAAABAMARjBEAiBR8jF8E3TJUpF/lsZNABx1SdO3ySpqvghN23GqU6B1 ugIgK5TFJJZD4vxzygSKzCGE2ecKV2/l/1ExrYtku82y87EwDQYJKoZIhvcNAQEL BQADggEBAAGnXGjG/Lnsb0Y9GRC1iX9cm9s44IzPl1J4aMIvZBbKAr5BO6o1Fo7J 44FL2GzbWoybRJhIzuhcoChD0a7WgFaTYu86AVOuh+C4/NZHHqjbF1TFdfy601YN 1Otg9cILiY9tVoRtlqnOIXK0cwvUNRgxIcyu1NzLWEbLjnpIfTgTRHIVXQVKnpYc eO72AuWy4h83P2Fnf9/5eoQpPfpZkvvxxR0U1vqn1eX/+Kg/TKAjK49RspmEIDIJ vGDe9K7mEFBD+OtUHzu15G9e+YJBF8DwOsw/bOsMXyky3mm7TX+XxRvr32n8U4Ga x3XXGzzqeRHHS9ASNhLIvBK+MiydHaY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4vjzVY+EMoTVPl3/TTnG 7oW719nhPQvYXz4EuefiJ5cl9Zg/Fui+VTHpS43x4o44UjOgMrQqd7NR6z3/CdFF l8dEMtMRooWT6jHvgFizyLe2s/ns7dlbTdf/OZgiNfCOia5ajnYGu3kAKG4AvAWR cn0bR3drZ+554Sl1jNDsyNHECef+c9K08Iwt9ValoOqIRoGw0VWEyPxxPeFwUwRV rPfJNzkxz4Qq9YKGr4gRitSCQ2c4IzkPpXVK8MFYcDjlg+lM59u/KF4w7RAzz35G 3M17hCrI4SdUj7IW1PZGKyWZPNy4BcOKzbdtxJNaqESSV6IAeZp3n5GXlNBXagUI Fw6DstgyD+nI4efI+sVPOQ/lbxpetqL4g+7sK9uG5XRUgtqGYuCs1miggo2CvK5X /n1ujHXx/YRseslu2Miz/pbLK6IschKBu8l66j15QDAN/kGjf+zqZxTeiyBS0C/I 5r6mbtbSTWQLAmbhzkDGsXeob52Z6Z/LSTZhhrTndr9Mn8TFARjoEXIV9QddAqbx jhiVe94PVek846XgowfKkbH4AndvKagx2F+bTHhABLHGfbmW2tytU261Y9J40VvB aLHmzZWdsWV3dvgbi63/2tk7wTvCXV1bzQkyX9Xr45Gjgl+gywNKsUU4YnUe4zjm WlUvWX+uX0/ikp1gUTAuR+0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321893962043882807695015678018845237215720 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 05:25:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-05 05:25:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fornjot.malc.org.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 925966862222925090139011100219246552931547088076483764501353927672709704395225095299330157816688222680488404030407741170934798056919390120598788279240709025244898224114538913386617884979235223234108325446046803078868628654602271305398066586312316251865872900785000013695167132898666174105299319564229421076590007570138671778476938717380272170476683951502271435726589730752893761183205492073452273919775982808859868489528308728472370837773753631171645035094462518227637397196057436089744816053616067996925598223059577124440803336230171072646523040640483799118182356200772238684422292970888452968216382441536694946619068768279146054957547318203746126741403230595388708307449018206989832014583531777829734917283923943208463047822945023045567399382009730553511699395909050277708206206735451563322151423078842508510639498924427539504691989893919935295170644614565362196942624361811975703346826316122718011953150850639784268198430105168188167063378280643582653304001208600615885856338880745062104220644105787704610551584523381050062471772377504349519037662377851034419315697125742503692712442759986517180348855064458599512505118903156213151147484356206823624729689846671107076880202239982301036441175047428537253640503225198281351150585837 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0d6cf0e43d0aac1dbe4e036d70df1ca1fe357b36 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fornjot.cl.cam.ac.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fornjot.malc.org.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f798795ac0000040300473045022100d1772e4f3f060ca93765a85f91eb6a3f0b32a8da60005ee2c6be26fdbd4c7363022020d761a02ce4e7506226a3746369392a7feb3c3e66cef637127b9dab81809601007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f798797b00000040300463044022051f2317c1374c952917f96c64d001c7549d3b7c92a6abe084ddb71aa53a075ba02202b94c5249643e2fc73ca048acc2184d9e70a576fe5ff5131ad8b64bbcdb2f3b1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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