cornell.brad.sfunder-dev.com
Issued by Let's Encrypt Authority X1
About this certificate
This digital certificate with serial number 01:b4:07:ac:e8:dd:7f:cb:a8:fa:4f:50:5e:61:12:27:be:ea was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cornell.brad.sfunder-dev.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:b4:07:ac:e8:dd:7f:cb:a8:fa:4f:50:5e:61:12:27:be:eaSerial Number (int): 148373314371627335240497382604653478788842
Serial Number lenght: 137 bits, 18 octets
SubjectKeyId: 9a:ab:bb:1e:bc:f0:6f:4f:42:05:13:09:4e:69:a8:00:88:50:d2:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 99:50:b5:25:72:a8:32:d4:ee:c1:ff:1a:10:e3:8e:69:b7:cd:6c:a4
Fingerprint (sha256): ba:06:97:0e:39:0d:39:30:c0:3e:ba:cc:ed:04:9d:2f:51:65:57:b2:a9:f8:b1:16:97:aa:a9:c8:2d:a4:9d:03
Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x1.letsencrypt.org/Check the revocation status for certificate cornell.brad.sfunder-dev.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cornell.brad.sfunder-dev.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cornell.brad.sfunder-dev.com
Other certificates including the domain name sfunder-dev.com
(limited to 100 certificates)
*.sfunder-dev.com
ucsf.brad.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
*.adowds.sfunder-dev.com
cornell.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
cornell.brett.sfunder-dev.com
test-redir2.sfunder-dev.com
hogwarts.brett.sfunder-dev.com
ucsf.brad.sfunder-dev.com
nyu.brad.sfunder-dev.com
cornell.qa1.sfunder-dev.com
ucsf.brad.sfunder-dev.com
*.sfunder-dev.com
cornell.brad.sfunder-dev.com
hogwarts.brett.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
ucsf.brett.sfunder-dev.com
*.bsun.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
cornell.brad.sfunder-dev.com
hogwarts.brad.sfunder-dev.com
sfunder-dev.com
*.qa2.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
*.ohiodev.sfunder-dev.com
cornell.brad.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
sfunder-test.com
nyu.brad.sfunder-dev.com
*.vance.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
*.uat.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
cornell.brett.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
qa2.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
hogwarts.brad.sfunder-dev.com
cornell.qa1.sfunder-dev.com
cornell.brad.sfunder-dev.com
ucsf.brad.sfunder-dev.com
cornell.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
sfunder-dev.com
*.ohiodev.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
dev1.sfunder-dev.com
ucsf.brett.sfunder-dev.com
ucsf.brad.sfunder-dev.com
sfunder-dev.com
ucsf.brett.sfunder-dev.com
qa2.sfunder-dev.com
ucsf.brad.sfunder-dev.com
*.qa2.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
*.ohiodev.sfunder-dev.com
ucsf.brad.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
*.adowds.sfunder-dev.com
cornell.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
cornell.brett.sfunder-dev.com
test-redir2.sfunder-dev.com
hogwarts.brett.sfunder-dev.com
ucsf.brad.sfunder-dev.com
nyu.brad.sfunder-dev.com
cornell.qa1.sfunder-dev.com
ucsf.brad.sfunder-dev.com
*.sfunder-dev.com
cornell.brad.sfunder-dev.com
hogwarts.brett.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
ucsf.brett.sfunder-dev.com
*.bsun.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
cornell.brad.sfunder-dev.com
hogwarts.brad.sfunder-dev.com
sfunder-dev.com
*.qa2.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
*.ohiodev.sfunder-dev.com
cornell.brad.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
sfunder-test.com
nyu.brad.sfunder-dev.com
*.vance.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
*.uat.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
cornell.brett.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
qa2.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
hogwarts.brad.sfunder-dev.com
cornell.qa1.sfunder-dev.com
cornell.brad.sfunder-dev.com
ucsf.brad.sfunder-dev.com
cornell.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
sfunder-dev.com
*.ohiodev.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
dev1.sfunder-dev.com
ucsf.brett.sfunder-dev.com
ucsf.brad.sfunder-dev.com
sfunder-dev.com
ucsf.brett.sfunder-dev.com
qa2.sfunder-dev.com
ucsf.brad.sfunder-dev.com
*.qa2.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
*.ohiodev.sfunder-dev.com
Certificate
The complete raw certificate details for cornell.brad.sfunder-dev.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGHDCCBQSgAwIBAgISAbQHrOjdf8uo+k9QXmESJ77qMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNjAxMjAyMzEzMDBaFw0x NjA0MTkyMzEzMDBaMCcxJTAjBgNVBAMTHGNvcm5lbGwuYnJhZC5zZnVuZGVyLWRl di5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDCumnvFaReFqkA c95TKpbJ9uu2VMdOsZmECQ+QlKt63GoYDPvPFSn75KyeF2TlsICgZmi2qqs6/Jcb kZX9Vn5O3E48UIqd7K/aCY+GSZIKRgsNIrGTtE/OyL3E/1CryHlgAIV4AD42sj1e 0jtTkJrVzPBZn274qLF1HTqo9MAPXnkJghiZl+X8sP+vCx/7K9m2BAHSEqbm96iq 0knFC0qwfgZdBDY64Oj8xQ8yAZEZyNcBjjDcPMwCwZ5EhPzvgC9Ux5evBYEZjTUX pxTn9y9ZIG8Vmo6wdhytvKmYxBcQdRjxPm8eeq5sxmL3CBWyYhZ2DKq39PTJxuRw XWI5vw82zKHTteaN7qLW6VgAHrv1pStfDHHE4/4HsTlPRIyUPMrTtrOseUhHaW/b MFM8kpX8AkRYDz5RCgz96IOD8/LoQtY3DdM1HO78+xQwEnqA5rtRohyv19MnmzJk AbTIe7p2i2OfsaiKDKmyJEQkt83bSVXn4w2praq8woKcyzji742ScWAto+OVv07p +6QcIj81SsTxv4okFEbg3uxFuWKt6rMRy7QjUcLvWN+lPH2a86y2CMWHckE7shkf hcTH926bishMdJTItykznNm8nOYyfkv8B03EfBf2Iktr/ask+aj+inwofaqEgMwK 9UGOJDdL+ImHzU3liXKfEreS0wM7gQIDAQABo4ICHTCCAhkwDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBSaq7sevPBvT0IFEwlOaagAiFDShzAfBgNVHSMEGDAWgBSoSmpj BH3duubRObemRWXv86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0 dHA6Ly9vY3NwLmludC14MS5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNo dHRwOi8vY2VydC5pbnQteDEubGV0c2VuY3J5cHQub3JnLzAnBgNVHREEIDAeghxj b3JuZWxsLmJyYWQuc2Z1bmRlci1kZXYuY29tMIH+BgNVHSAEgfYwgfMwCAYGZ4EM AQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0 ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5k IG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kg Zm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJ KoZIhvcNAQELBQADggEBAFo85Q43R/APq1PtV+lAoVqRpiOAPfXl6rbl4gC/OIlL e17H4DpANKOXOrJNtooJM9ubl/0GQo8+gwLZ/Yk43C6VwAW1d7GQ6ukSATYjubs3 /lyVkaXYcHp7k4ApTKHtdzHcC1CAhMrTynCW6ZAskgbrwEWaTui7CQR/t4wv5IYb gMzT4UA4PqBdObeijcqihnZS2QZhCVUMm6NASjb1PTk6/dEmpreOWpO0EiPQGHIY cKxUgqLdlX0zlzKZFaeEx+sYBxlXOVL0CmomdnZEcDciu4wDibYW78cm+wUwqt48 a41Rnry5+mE4xCqVLrkpwCjiPqif3sl+2Duw4CG/3/M= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwrpp7xWkXhapAHPeUyqW yfbrtlTHTrGZhAkPkJSretxqGAz7zxUp++Ssnhdk5bCAoGZotqqrOvyXG5GV/VZ+ TtxOPFCKneyv2gmPhkmSCkYLDSKxk7RPzsi9xP9Qq8h5YACFeAA+NrI9XtI7U5Ca 1czwWZ9u+KixdR06qPTAD155CYIYmZfl/LD/rwsf+yvZtgQB0hKm5veoqtJJxQtK sH4GXQQ2OuDo/MUPMgGRGcjXAY4w3DzMAsGeRIT874AvVMeXrwWBGY01F6cU5/cv WSBvFZqOsHYcrbypmMQXEHUY8T5vHnqubMZi9wgVsmIWdgyqt/T0ycbkcF1iOb8P Nsyh07Xmje6i1ulYAB679aUrXwxxxOP+B7E5T0SMlDzK07azrHlIR2lv2zBTPJKV /AJEWA8+UQoM/eiDg/Py6ELWNw3TNRzu/PsUMBJ6gOa7UaIcr9fTJ5syZAG0yHu6 dotjn7GoigypsiREJLfN20lV5+MNqa2qvMKCnMs44u+NknFgLaPjlb9O6fukHCI/ NUrE8b+KJBRG4N7sRblireqzEcu0I1HC71jfpTx9mvOstgjFh3JBO7IZH4XEx/du m4rITHSUyLcpM5zZvJzmMn5L/AdNxHwX9iJLa/2rJPmo/op8KH2qhIDMCvVBjiQ3 S/iJh81N5YlynxK3ktMDO4ECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 148373314371627335240497382604653478788842 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-20 23:13:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-19 23:13:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cornell.brad.sfunder-dev.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794421660021213169039346661101820171785420341064331859958421720995443286409466170947694703501894017717053512193067954930189795422000283557261434085862876786588399491158825575731045530847360387129575109800799287504175682137698581481994571070527207378668774262038038604069831045978372731572601639788285650667735501784741243379267726838606855858422040467191087168562962493456767565753120067300595816660823001794561995275275744958139692770612363006719820906540376127951287103836842126904991364255068619977915488755759136465953010648715181950993733650425449404894245610912717895130815208937643437600410431099232997379154670807253656689648712431269286879755302791752241246046276307189697753642997742330644874864252707563988337603477827774824686134240058941297385817685682001516064186640914107352766443743699582474624735470044551182113685129950996336549083412921210985680214286824446782815327939198789367893187337556008688657947269905159642187002127366863964713717425910586652795853123989901945682250513555976291306560750553323922012715326667381103218029264988352938300273268955909177622001634960683545473718194958941470539372527995571945597121614089908622834865910207815338843354003326755035405470148379631938785173836872644816805799607169 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9aabbb1ebcf06f4f420513094e69a8008850d287 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornell.brad.sfunder-dev.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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