status.extrinsec.com
Issued by R3
About this certificate
This digital certificate with serial number 04:11:6d:22:42:68:99:44:b8:1f:a8:35:1a:8a:f6:91:ab:ca was issued on by Let's Encrypt.
With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=status.extrinsec.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:11:6d:22:42:68:99:44:b8:1f:a8:35:1a:8a:f6:91:ab:caSerial Number (int): 354379007701256883505110392560918383930314
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 0f:aa:6a:d1:51:c3:ee:b4:df:ec:26:c4:1c:f3:b6:73:39:cc:77:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 6d:ca:f8:52:97:23:ba:03:52:db:b7:d3:96:ef:dc:bd:e6:59:a2:1c
Fingerprint (sha256): 9d:78:2b:3a:e2:bb:a3:21:9d:43:b3:72:ee:82:3e:b0:e6:cc:58:7e:fc:8f:8c:78:d0:a4:95:51:8c:4e:0b:8d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate status.extrinsec.com
31
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for status.extrinsec.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
delivery.uptime.owhealth.com
foxtrot.status.descartes.com
status.ampersand-dev.tv
status.detroitcatholic.com
status.digitalshadows.com
status.etosoftware.com
status.extrinsec.com
status.foradian.org
status.harleysplumbing.com.au
status.hdns.io
status.intermiles.com
status.ivey.ca
status.openpay.mx
status.plataformasintese.com
status.quicklypos.com
status.sandsiv.com
status.simplesdental.com
status.smbstorm.com
status.socialpinpoint.com
status.sogi.com.br
status.tallwave.com
status.thecomplianceengine.com
status.transvirtual.com
status.uss.cl
status.wilsongirgenti.com
status.wmcws.com
status.wowconnect.be
status.xelya.info
systemstatus.clinisys.com
trust.instasafe.com
uptime.apricot.info
foxtrot.status.descartes.com
status.ampersand-dev.tv
status.detroitcatholic.com
status.digitalshadows.com
status.etosoftware.com
status.extrinsec.com
status.foradian.org
status.harleysplumbing.com.au
status.hdns.io
status.intermiles.com
status.ivey.ca
status.openpay.mx
status.plataformasintese.com
status.quicklypos.com
status.sandsiv.com
status.simplesdental.com
status.smbstorm.com
status.socialpinpoint.com
status.sogi.com.br
status.tallwave.com
status.thecomplianceengine.com
status.transvirtual.com
status.uss.cl
status.wilsongirgenti.com
status.wmcws.com
status.wowconnect.be
status.xelya.info
systemstatus.clinisys.com
trust.instasafe.com
uptime.apricot.info
Other certificates including the domain name extrinsec.com
(limited to 100 certificates)
status-namer-gtassurancetool.gtil.gt.com
status-namer-gtassurancetool.gtil.gt.com
status-namer-gtassurancetool.gtil.gt.com
leapstatus.gtil.gt.com
leapstatus.gtil.gt.com
status.extrinsec.com
status.extrinsec.com
status.extrinsec.com
leapstatus.gtil.gt.com
status.extrinsec.com
extrinsec.com
status-namer-gtassurancetool.gtil.gt.com
leapstatus.gtil.gt.com
status-namer-gtassurancetool.gtil.gt.com
status-namer-gtassurancetool.gtil.gt.com
leapstatus.gtil.gt.com
leapstatus.gtil.gt.com
status.extrinsec.com
status.extrinsec.com
status.extrinsec.com
leapstatus.gtil.gt.com
status.extrinsec.com
extrinsec.com
status-namer-gtassurancetool.gtil.gt.com
leapstatus.gtil.gt.com
Certificate
The complete raw certificate details for status.extrinsec.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgISBBFtIkJomUS4H6g1Gor2kavKMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAyMjEyMDI2MzFaFw0yMzA1MjIyMDI2MzBaMB8xHTAbBgNVBAMT FHN0YXR1cy5leHRyaW5zZWMuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE daoDpp2c54Ki49JmoUp7DNZIuhob6mZLrhmsv/AnYSFZU+7ZHSoT/pqspycaSrB7 wLJXV1IuLBfiMBC6r8E606OCBCMwggQfMA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU D6pq0VHD7rTf7CbEHPO2cznMdz4wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggLk BgNVHREEggLbMIIC14IcZGVsaXZlcnkudXB0aW1lLm93aGVhbHRoLmNvbYIcZm94 dHJvdC5zdGF0dXMuZGVzY2FydGVzLmNvbYIXc3RhdHVzLmFtcGVyc2FuZC1kZXYu dHaCGnN0YXR1cy5kZXRyb2l0Y2F0aG9saWMuY29tghlzdGF0dXMuZGlnaXRhbHNo YWRvd3MuY29tghZzdGF0dXMuZXRvc29mdHdhcmUuY29tghRzdGF0dXMuZXh0cmlu c2VjLmNvbYITc3RhdHVzLmZvcmFkaWFuLm9yZ4Idc3RhdHVzLmhhcmxleXNwbHVt YmluZy5jb20uYXWCDnN0YXR1cy5oZG5zLmlvghVzdGF0dXMuaW50ZXJtaWxlcy5j b22CDnN0YXR1cy5pdmV5LmNhghFzdGF0dXMub3BlbnBheS5teIIcc3RhdHVzLnBs YXRhZm9ybWFzaW50ZXNlLmNvbYIVc3RhdHVzLnF1aWNrbHlwb3MuY29tghJzdGF0 dXMuc2FuZHNpdi5jb22CGHN0YXR1cy5zaW1wbGVzZGVudGFsLmNvbYITc3RhdHVz LnNtYnN0b3JtLmNvbYIZc3RhdHVzLnNvY2lhbHBpbnBvaW50LmNvbYISc3RhdHVz LnNvZ2kuY29tLmJyghNzdGF0dXMudGFsbHdhdmUuY29tgh5zdGF0dXMudGhlY29t cGxpYW5jZWVuZ2luZS5jb22CF3N0YXR1cy50cmFuc3ZpcnR1YWwuY29tgg1zdGF0 dXMudXNzLmNsghlzdGF0dXMud2lsc29uZ2lyZ2VudGkuY29tghBzdGF0dXMud21j d3MuY29tghRzdGF0dXMud293Y29ubmVjdC5iZYIRc3RhdHVzLnhlbHlhLmluZm+C GXN5c3RlbXN0YXR1cy5jbGluaXN5cy5jb22CE3RydXN0Lmluc3Rhc2FmZS5jb22C E3VwdGltZS5hcHJpY290LmluZm8wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBADBd3h97 q/hDEkBCZRxx6wxHD8EeRfLX9x4T877xdmldy/pC/C/AXpXjyTNl0oHwRUUTPpGe ngYnmbQ7bjDGdj0+7N6OwSJ/OxYF+Hnp3vsLdSJhY4yOJmbZeqbwwvyQF0vF2aVr 4JyzziEuCJbLEphFTDYmv+A9IPOYC/50gWHJY3vREzwbOZ/KB/aYyIbdbyU7mCBu xY+5tagd2iQG11WzI2PZKzM2toqvv1vEAN++nYPyguDq0hyqxCGsoa8l5+us3epj uuUfFfZycfVQjFjZsb40VDmSbsv/DhsKYf1NYuIDR6iKz4hIoYivvFY0YqVDQzNb 2LYhkKBepDJr1FA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEdaoDpp2c54Ki49JmoUp7DNZIuhob 6mZLrhmsv/AnYSFZU+7ZHSoT/pqspycaSrB7wLJXV1IuLBfiMBC6r8E60w== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 354379007701256883505110392560918383930314 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-21 20:26:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-22 20:26:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'status.extrinsec.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 000475aa03a69d9ce782a2e3d266a14a7b0cd648ba1a1bea664bae19acbff02761215953eed91d2a13fe9aaca7271a4ab07bc0b25757522e2c17e23010baafc13ad3 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0faa6ad151c3eeb4dfec26c41cf3b67339cc773e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (731 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.uptime.owhealth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxtrot.status.descartes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ampersand-dev.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.detroitcatholic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.digitalshadows.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.etosoftware.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.extrinsec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.foradian.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.harleysplumbing.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.hdns.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.intermiles.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ivey.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.openpay.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.plataformasintese.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.quicklypos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sandsiv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.simplesdental.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.smbstorm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.socialpinpoint.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sogi.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.tallwave.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.thecomplianceengine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.transvirtual.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.uss.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.wilsongirgenti.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.wmcws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.wowconnect.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.xelya.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systemstatus.clinisys.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trust.instasafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uptime.apricot.info' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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