danville.expenditures-demo.socrata.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:25:9b:ea:33:ef:ec:8e:bd:a9:30:5b:c2:01:07:53:44:6f was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=danville.expenditures-demo.socrata.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:25:9b:ea:33:ef:ec:8e:bd:a9:30:5b:c2:01:07:53:44:6fSerial Number (int): 274134551761578653850558565835652811932783
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 06:e0:4f:32:fb:a6:86:88:df:b1:84:67:78:a1:5e:3e:85:8c:c3:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5b:57:be:1b:48:aa:63:6e:e5:2e:ad:5c:a4:f7:3b:d4:e8:7e:ed:ae
Fingerprint (sha256): 99:19:c5:c9:3f:44:18:cb:f8:6c:f2:74:47:32:2a:56:4f:00:1f:54:25:8b:97:b7:0b:fa:3a:27:e3:ea:7d:bd
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate danville.expenditures-demo.socrata.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for danville.expenditures-demo.socrata.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
academy.clever.com.skilljarapp.com
api.workfit.com
bah.accellion.net
contact.harveststatus.com
danville.expenditures-demo.socrata.com
training.medallia.com
api.workfit.com
bah.accellion.net
contact.harveststatus.com
danville.expenditures-demo.socrata.com
training.medallia.com
Other certificates including the domain name socrata.com
(limited to 100 certificates)
evergreen.payroll.socrata.com
open-source.socrata.com
*.stat.socrata.com
*.spending.socrata.com
api.eu.socrata.com
labs.socrata.com
data-academy.socrata.com
training.socrata.com
open-data-apps.socrata.com
api.eu.socrata.com
nasa-data.socrata.com
sandbox.socrata.com
support.socrata.com
crimereports.socrata.com
open-data-apps.socrata.com
support.socrata.com
*.demo.socrata.com
az-eastus-production.socrata.net
*.socrata.com
open-source.socrata.com
learn.socrata.com
open-source.socrata.com
*.connect.socrata.com
*.data.socrata.com
socrata.com
*.socrata.com
*.fedramp.socrata.com
open-source.socrata.com
*.api.us.socrata.com
open-source.socrata.com
careers.socrata.com
*.insights.socrata.com
ldap.socrata.com
nasa-data.socrata.com
www.socrata.com
labs.socrata.com
*.socrata.com
open-source.socrata.com
www.socrata.com
support.socrata.com
*.socrata.com
support.socrata.com
*.projects.socrata.com
*.azure-westeurope-prod.socrata.com
api.eu.socrata.com
api.eu.socrata.com
training.socrata.com
sandbox.socrata.com
artifactory.socrata.com
*.insight.socrata.com
api.eu.socrata.com
admin.apps.cjis.socrata.com
www.socrata.com
open-source.socrata.com
labs.socrata.com
*.socrata.com
www.socrata.com
proxy.dev.socrata.com
labs.socrata.com
admin.crimereports.socrata.com
socrata.com
nasa-data.socrata.com
open-source.socrata.com
repo.socrata.com
status.socrata.com
*.insights.socrata.com
*.insight.socrata.com
jenkins-build.socrata.com
training.socrata.com
support.socrata.com
open-source.socrata.com
*.data.eu.socrata.com
*.spending.socrata.com
training.medallia.com
geo.socrata.com
labs.socrata.com
*.api.eu.socrata.com
support.socrata.com
labs.socrata.com
proxy.dev.socrata.com
training.socrata.com
*.budget.socrata.com
jenkins-build.socrata.com
www.socrata.com
socrata.com
*.insight.socrata.com
dcwater-opendata.socrata.com
support.socrata.com
open-source.socrata.com
support.socrata.com
support.socrata.com
artifactory.socrata.com
*.finance.socrata.com
status.socrata.com
*.api.us.socrata.com
*.socrata.com
*.finance.socrata.com
az-eastus-production.socrata.net
*.api.eu.socrata.com
*.budget.finance.socrata.com
open-source.socrata.com
*.stat.socrata.com
*.spending.socrata.com
api.eu.socrata.com
labs.socrata.com
data-academy.socrata.com
training.socrata.com
open-data-apps.socrata.com
api.eu.socrata.com
nasa-data.socrata.com
sandbox.socrata.com
support.socrata.com
crimereports.socrata.com
open-data-apps.socrata.com
support.socrata.com
*.demo.socrata.com
az-eastus-production.socrata.net
*.socrata.com
open-source.socrata.com
learn.socrata.com
open-source.socrata.com
*.connect.socrata.com
*.data.socrata.com
socrata.com
*.socrata.com
*.fedramp.socrata.com
open-source.socrata.com
*.api.us.socrata.com
open-source.socrata.com
careers.socrata.com
*.insights.socrata.com
ldap.socrata.com
nasa-data.socrata.com
www.socrata.com
labs.socrata.com
*.socrata.com
open-source.socrata.com
www.socrata.com
support.socrata.com
*.socrata.com
support.socrata.com
*.projects.socrata.com
*.azure-westeurope-prod.socrata.com
api.eu.socrata.com
api.eu.socrata.com
training.socrata.com
sandbox.socrata.com
artifactory.socrata.com
*.insight.socrata.com
api.eu.socrata.com
admin.apps.cjis.socrata.com
www.socrata.com
open-source.socrata.com
labs.socrata.com
*.socrata.com
www.socrata.com
proxy.dev.socrata.com
labs.socrata.com
admin.crimereports.socrata.com
socrata.com
nasa-data.socrata.com
open-source.socrata.com
repo.socrata.com
status.socrata.com
*.insights.socrata.com
*.insight.socrata.com
jenkins-build.socrata.com
training.socrata.com
support.socrata.com
open-source.socrata.com
*.data.eu.socrata.com
*.spending.socrata.com
training.medallia.com
geo.socrata.com
labs.socrata.com
*.api.eu.socrata.com
support.socrata.com
labs.socrata.com
proxy.dev.socrata.com
training.socrata.com
*.budget.socrata.com
jenkins-build.socrata.com
www.socrata.com
socrata.com
*.insight.socrata.com
dcwater-opendata.socrata.com
support.socrata.com
open-source.socrata.com
support.socrata.com
support.socrata.com
artifactory.socrata.com
*.finance.socrata.com
status.socrata.com
*.api.us.socrata.com
*.socrata.com
*.finance.socrata.com
az-eastus-production.socrata.net
*.api.eu.socrata.com
*.budget.finance.socrata.com
Certificate
The complete raw certificate details for danville.expenditures-demo.socrata.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAyWb6jPv7I69qTBbwgEHU0RvMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDgxNTA2NThaFw0y MDAxMDYxNTA2NThaMDExLzAtBgNVBAMTJmRhbnZpbGxlLmV4cGVuZGl0dXJlcy1k ZW1vLnNvY3JhdGEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA 7vLGWtXTuHUa39PUK2biixnXOlbS/xsIlxPaw52U1xtPwqJM8jxWQRzuYZy0jy2e 8w2TnLCygsaXFNGMLWXxSKLYdTPgKFkhyxC6c6CfzY8p2hoo7Zme3eSnrxPIy5mQ qpGh+2x4IouWPLiq4HdNWf0wXUpmedd2YQXP3Jev2xpLk8FM/qWOdUo/s7bNd0vo SZr8nQScNb7I1ROXIr+JrhzTICVzVrNF1P8ETeVHMK4uO1HBI2l0ftnvi2TJc8Y0 bZUkign3eNXLn1UW2TNvam6AgVTzlAFrRtBNGuV47qhShMh6E8jC67/tBRlmqFup 5Ynhlp/+CSyvNmXJw8gmvQIDAQABo4ICBTCCAgEwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBQG4E8y+6aGiN+xhGd4oV4+hYzDJjAfBgNVHSMEGDAWgBSoSmpjBH3duubR ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIGtBgNVHREEgaUwgaKCImFjYWRl bXkuY2xldmVyLmNvbS5za2lsbGphcmFwcC5jb22CD2FwaS53b3JrZml0LmNvbYIR YmFoLmFjY2VsbGlvbi5uZXSCGWNvbnRhY3QuaGFydmVzdHN0YXR1cy5jb22CJmRh bnZpbGxlLmV4cGVuZGl0dXJlcy1kZW1vLnNvY3JhdGEuY29tghV0cmFpbmluZy5t ZWRhbGxpYS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEw KDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYKKwYB BAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBABT6ZmZ9rQRxsOzP343x yfFq+9dOO1xEkAiZz1rr6jX8j3gVN2lS6xgv2wYc29aZWIBvWgnVS/z99A0KaoEA muAvj2//0xPht49z0PNb7n/GacKDt3xN4ED1SAytlYo2gf+FkSdiB9vJ/2KMxUzX mkHfsq3Mta9BRuP8ioFj5k3uHADV8ghmMa7SVGwMRZPoT27N8iGWUOAw7Kyt9BvJ tU1F6WLnewd8LE9/w0hQnTX8RUXfSdLpfNo7xQvnX9GxgrB2j8vFsiG8eOCl7tBK WfWGtNXMDZOgahxqQmnQcx9rgpTA7JJf8k7Rm6WPvWeLizma5OE/M4tQWd0/iNTb fpo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vLGWtXTuHUa39PUK2bi ixnXOlbS/xsIlxPaw52U1xtPwqJM8jxWQRzuYZy0jy2e8w2TnLCygsaXFNGMLWXx SKLYdTPgKFkhyxC6c6CfzY8p2hoo7Zme3eSnrxPIy5mQqpGh+2x4IouWPLiq4HdN Wf0wXUpmedd2YQXP3Jev2xpLk8FM/qWOdUo/s7bNd0voSZr8nQScNb7I1ROXIr+J rhzTICVzVrNF1P8ETeVHMK4uO1HBI2l0ftnvi2TJc8Y0bZUkign3eNXLn1UW2TNv am6AgVTzlAFrRtBNGuV47qhShMh6E8jC67/tBRlmqFup5Ynhlp/+CSyvNmXJw8gm vQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 274134551761578653850558565835652811932783 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 15:06:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 15:06:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'danville.expenditures-demo.socrata.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30164433309311136698279398198274173397627329839571426669877514243190161240119100886805147625332539794037352224553541632114974773214294771097630187854680267549014780727370149416933490084982510848743094120522016399393234044185098387124959731320452387737071986920456037362484801812337889850482242328953924173215232145317170861232138795080289306065144412862619695911405262327412792924259633307620200654672571437482368417300851880499527514409266573590346834515429739158969198240936084279645127676323111734344300282331086275980726453847627264426242039581772104478684525601666006183611095129845031720829740921342725580138173 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 06e04f32fba68688dfb1846778a15e3e858cc326 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.clever.com.skilljarapp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.workfit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bah.accellion.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.harveststatus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danville.expenditures-demo.socrata.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.medallia.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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