fornjot.malc.org.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:71:8c:f6:48:4a:53:c3:d8:18:e5:9b:02:4c:97:e4:aa:ca was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fornjot.malc.org.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:71:8c:f6:48:4a:53:c3:d8:18:e5:9b:02:4c:97:e4:aa:caSerial Number (int): 387088421879766420253476335117770722421450
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e1:1e:fa:03:bb:c8:34:c3:54:54:ce:10:bd:f8:f7:76:ea:fa:16:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ba:36:2c:d4:47:6e:72:ed:6a:2d:4e:f9:70:0f:c3:c0:5f:68:ac:5a
Fingerprint (sha256): 9e:3c:53:0a:90:b2:7b:04:bd:c6:f4:66:fc:a6:77:9b:89:35:3b:fe:36:4b:7f:33:60:c8:7b:a6:13:76:a1:9d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate fornjot.malc.org.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fornjot.malc.org.uk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fornjot.cl.cam.ac.uk
fornjot.malc.org.uk
fornjot.malc.org.uk
Other certificates including the domain name malc.org.uk
(limited to 100 certificates)
munin.malc.org.uk
hats-cdn.malc.org.uk
manatee-gw.malc.org.uk
munin.malc.org.uk
webserver.srcf.net
webserver.srcf.net
rig.cl.cam.ac.uk
webchat.malc.org.uk
rig.cl.cam.ac.uk
rig.cl.cam.ac.uk
manatee-gw.malc.org.uk
mundilfari.malc.org.uk
webserver.srcf.net
wadjet.malc.org.uk
callisto.malc.org.uk
blog.malc.org.uk
malc.org.uk
callisto.malc.org.uk
hats-cdn.malc.org.uk
fornjot.malc.org.uk
webchat.malc.org.uk
io.malc.org.uk
manatee-gw.malc.org.uk
webchat.malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
hats-cdn.malc.org.uk
rig.cl.cam.ac.uk
webserver.srcf.net
callisto.malc.org.uk
ananke.malc.org.uk
manatee-gw.malc.org.uk
callisto-20140409.malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
malc.org.uk
callisto.malc.org.uk
mundilfari.malc.org.uk
callisto.malc.org.uk
malc.org.uk
manatee-gw.malc.org.uk
manatee-gw.malc.org.uk
webserver.srcf.net
webserver.srcf.net
io.malc.org.uk
munin.malc.org.uk
manatee-gw.malc.org.uk
io.malc.org.uk
blog.malc.org.uk
mundilfari.malc.org.uk
webchat.malc.org.uk
manatee-gw.malc.org.uk
malc.org.uk
webchat.malc.org.uk
rig.cl.cam.ac.uk
ananke.malc.org.uk
malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
callisto.malc.org.uk
webchat.malc.org.uk
munin.malc.org.uk
io.malc.org.uk
webchat.malc.org.uk
blog.malc.org.uk
rig.cl.cam.ac.uk
io.malc.org.uk
manatee-gw.malc.org.uk
callisto.malc.org.uk
webserver.srcf.net
malc.org.uk
webserver.srcf.net
webserver.srcf.net
munin.malc.org.uk
webchat.malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
manatee-gw.malc.org.uk
hats-cdn.malc.org.uk
webchat.malc.org.uk
malc.org.uk
callisto.malc.org.uk
ananke.malc.org.uk
malc.org.uk
munin.malc.org.uk
fornjot.malc.org.uk
manatee-gw.malc.org.uk
io.malc.org.uk
rig.cl.cam.ac.uk
fornjot.malc.org.uk
manatee-gw.malc.org.uk
webserver.srcf.net
blog.malc.org.uk
webserver.srcf.net
wadjet.malc.org.uk
callisto.malc.org.uk
munin.malc.org.uk
mundilfari.malc.org.uk
callisto.malc.org.uk
io.malc.org.uk
hats-cdn.malc.org.uk
manatee-gw.malc.org.uk
munin.malc.org.uk
webserver.srcf.net
webserver.srcf.net
rig.cl.cam.ac.uk
webchat.malc.org.uk
rig.cl.cam.ac.uk
rig.cl.cam.ac.uk
manatee-gw.malc.org.uk
mundilfari.malc.org.uk
webserver.srcf.net
wadjet.malc.org.uk
callisto.malc.org.uk
blog.malc.org.uk
malc.org.uk
callisto.malc.org.uk
hats-cdn.malc.org.uk
fornjot.malc.org.uk
webchat.malc.org.uk
io.malc.org.uk
manatee-gw.malc.org.uk
webchat.malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
hats-cdn.malc.org.uk
rig.cl.cam.ac.uk
webserver.srcf.net
callisto.malc.org.uk
ananke.malc.org.uk
manatee-gw.malc.org.uk
callisto-20140409.malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
malc.org.uk
callisto.malc.org.uk
mundilfari.malc.org.uk
callisto.malc.org.uk
malc.org.uk
manatee-gw.malc.org.uk
manatee-gw.malc.org.uk
webserver.srcf.net
webserver.srcf.net
io.malc.org.uk
munin.malc.org.uk
manatee-gw.malc.org.uk
io.malc.org.uk
blog.malc.org.uk
mundilfari.malc.org.uk
webchat.malc.org.uk
manatee-gw.malc.org.uk
malc.org.uk
webchat.malc.org.uk
rig.cl.cam.ac.uk
ananke.malc.org.uk
malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
callisto.malc.org.uk
webchat.malc.org.uk
munin.malc.org.uk
io.malc.org.uk
webchat.malc.org.uk
blog.malc.org.uk
rig.cl.cam.ac.uk
io.malc.org.uk
manatee-gw.malc.org.uk
callisto.malc.org.uk
webserver.srcf.net
malc.org.uk
webserver.srcf.net
webserver.srcf.net
munin.malc.org.uk
webchat.malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
manatee-gw.malc.org.uk
hats-cdn.malc.org.uk
webchat.malc.org.uk
malc.org.uk
callisto.malc.org.uk
ananke.malc.org.uk
malc.org.uk
munin.malc.org.uk
fornjot.malc.org.uk
manatee-gw.malc.org.uk
io.malc.org.uk
rig.cl.cam.ac.uk
fornjot.malc.org.uk
manatee-gw.malc.org.uk
webserver.srcf.net
blog.malc.org.uk
webserver.srcf.net
wadjet.malc.org.uk
callisto.malc.org.uk
munin.malc.org.uk
mundilfari.malc.org.uk
callisto.malc.org.uk
io.malc.org.uk
Certificate
The complete raw certificate details for fornjot.malc.org.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgISBHGM9khKU8PYGOWbAkyX5KrKMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MDkxMDQzNDVaFw0x OTA4MDcxMDQzNDVaMB4xHDAaBgNVBAMTE2Zvcm5qb3QubWFsYy5vcmcudWswggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCzO8NNToh6vKkIjg9XzHfvimbt 0o6CdYHFy6f+7MwdL5fyO4uxgVbQUdQmskc8aWD74GzpwdIQJKe4TrrEt0TivgbM sMlnsnB7011jCorlDLf7WKyp6ByOYfCIy1SsWMJILivuJJW8fvIUFYE9Nc8kO4fN 4tqtdzgT6jwVYd5lQ3XFFXDrCZAIMvVrE+WjK1x7VeSVsBgFdNPJlkOpRgDnookn 490qTYArQueibV8xMZ4JDTpELP7Hu4xY8vQHPO/MrKLs9fID1iiXpzBu2ptPXDDc IC+8c/yd+BZfXlj44Z10xpN9vB0BPv/L8dpraZijiD94rphNj/oOPPnrrIHzEZVG ez0kIfeLLhTeTUztE8raekXmRnEwpo4hH49owzugsCMYzPfFn6UAysjZnLbbvtZW GgQNKD8FcBA8Q1yWLJFDyb4aOcr+9s78Iw9Qf7K9Biez5y9f2voI7Y5fDOB4cIIC LYY1LsDkYGVMKLcK6UFz+7BjzIgWI7qG/TlNn1ULBHoGcEgmx4gempIqyciGtrtb PGwyl7oM9lAgRHYkHJqBQ3DGDe0+iXfFKjYacP6A5qyhjUVPlPe0ZDdcLls0T/jR OFUtNEHoNLI/Z67xQF7jpZ+Uq9pEngL/6Z4X2r7jLJ3bNuT4XZV6makwVro5ycQc OE2Hqc8Cluwh/JRw3wIDAQABo4ICfTCCAnkwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBThHvoDu8g0w1RUzhC9+Pd26voWjDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMDQGA1UdEQQtMCuCFGZvcm5qb3QuY2wu Y2FtLmFjLnVrghNmb3Juam90Lm1hbGMub3JnLnVrMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAdH7agzGtMxCR IZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFqnGgM4gAABAMARjBEAiBPp2Nefxqm fFtdd2g2wkVLH77axzTKVyiOVRnVedBCHAIgZo2I/HktZE8Ahxa7T5BEgorISqW3 jW2XYjFBXz5jjFQAdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAA AWqcaAztAAAEAwBHMEUCID//03x1UeSEHlbgi+4xWG2S/1Zbk0jVSXg7yYSNsSxr AiEApnZu3T9ZyjGmVyAG9BT1xDMBTz7tKn4p4gFTzO6xKeAwDQYJKoZIhvcNAQEL BQADggEBAE1msKQpzE6cXK5/MZYPga9McA0n6a54+VJXc9ulinB5EaJ2w9PiK1Lr bjbvLzR4b+j7Q1PyGpzjoob/dm/ZQHW72yAhCM5MT7IKsAQ0AFNWTA6HTKXY0aCx pM3ffa+IQSNwkEPgOxZeY6Vv3qjUb30SFslRKi28DjxORhOBIzKymoS+J0hR1gnc xN3RwTZhx1BzJ8/4C01HADsljPXJLlCniHPCIxh1mYfi5owhP7jV8PMzMlYucBMU 87XzbCXhLwUFCNw11UhT3ELF3J6Zcw9NAOXIaA1iYa63Qsc5s8xvtnypi+dZ8Zr9 1TRMIDXKcjP3bH+OBseD+20eAW+jVOI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAszvDTU6IerypCI4PV8x3 74pm7dKOgnWBxcun/uzMHS+X8juLsYFW0FHUJrJHPGlg++Bs6cHSECSnuE66xLdE 4r4GzLDJZ7Jwe9NdYwqK5Qy3+1isqegcjmHwiMtUrFjCSC4r7iSVvH7yFBWBPTXP JDuHzeLarXc4E+o8FWHeZUN1xRVw6wmQCDL1axPloytce1XklbAYBXTTyZZDqUYA 56KJJ+PdKk2AK0Lnom1fMTGeCQ06RCz+x7uMWPL0BzzvzKyi7PXyA9Yol6cwbtqb T1ww3CAvvHP8nfgWX15Y+OGddMaTfbwdAT7/y/Haa2mYo4g/eK6YTY/6Djz566yB 8xGVRns9JCH3iy4U3k1M7RPK2npF5kZxMKaOIR+PaMM7oLAjGMz3xZ+lAMrI2Zy2 277WVhoEDSg/BXAQPENcliyRQ8m+GjnK/vbO/CMPUH+yvQYns+cvX9r6CO2OXwzg eHCCAi2GNS7A5GBlTCi3CulBc/uwY8yIFiO6hv05TZ9VCwR6BnBIJseIHpqSKsnI hra7WzxsMpe6DPZQIER2JByagUNwxg3tPol3xSo2GnD+gOasoY1FT5T3tGQ3XC5b NE/40ThVLTRB6DSyP2eu8UBe46WflKvaRJ4C/+meF9q+4yyd2zbk+F2VepmpMFa6 OcnEHDhNh6nPApbsIfyUcN8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 387088421879766420253476335117770722421450 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-09 10:43:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-07 10:43:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fornjot.malc.org.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731208676276277210286467506776347322447049970819433480284353566885508219260131376637700473740187009832503149019758846576104344039864052715549268070756303374845287499965874555649557284231110515763353628658697450573019472046160418676192489837672987454269778346523623192928518871413422128414391202622047863735510114407467394759381526589565199571533037076122589961617468385231709521486296797836007345711086150519481877442155753669952507993924629395372243945908916750341283062825728940569382899463221346454702526787618418740125612309417028668919124562663934249711282776865393249708096355967861857640885140745348241964869380511035391697682700886183194143184911054437450692735298939678580197835214542823838949744734727391253798253593060769869393721664359692220631375422969112122479945196639762316819711308995258448980208922098753601553904828505074849225311373239984744999710953986953802613529385385031187400868459232860441184768723081903572109824640492718887533175332199478469915489921244141704324990873842107251833117452284918205553894877624877926371684105509284560234137559438436040023128193493330704438221339415630883249008040769075740574272009180455896099190083230424313493382362095246339810740861186275581544029004714158291329605726431 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e11efa03bbc834c35454ce10bdf8f776eafa168c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fornjot.cl.cam.ac.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fornjot.malc.org.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a9c680ce2000004030046304402204fa7635e7f1aa67c5b5d776836c2454b1fbedac734ca57288e5519d579d0421c0220668d88fc792d644f008716bb4f9044828ac84aa5b78d6d976231415f3e638c5400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a9c680ced000004030047304502203fffd37c7551e4841e56e08bee31586d92ff565b9348d549783bc9848db12c6b022100a6766edd3f59ca31a6572006f414f5c433014f3eed2a7e29e20153cceeb129e0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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