usc.college
Issued by R3
About this certificate
This digital certificate with serial number 04:ff:b8:2a:10:9d:7e:12:ed:8f:35:39:20:be:fb:8c:f9:7a was issued on by Let's Encrypt.
With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=usc.college
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:ff:b8:2a:10:9d:7e:12:ed:8f:35:39:20:be:fb:8c:f9:7aSerial Number (int): 435465943656569170919941867987704541411706
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ef:ed:87:ff:9e:ee:60:61:f6:08:49:12:db:51:26:05:ef:25:69:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 7e:5b:0a:94:e0:10:ec:ca:16:0d:98:5e:bf:2e:03:cb:f7:e0:a6:d1
Fingerprint (sha256): bc:5a:51:f8:8f:48:23:ff:1b:85:22:11:bd:41:40:76:57:eb:ac:e0:5f:b2:73:b4:c1:b9:ca:14:af:3c:f9:5e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate usc.college
16
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for usc.college
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
betvibe.com
cointake.com
doneverhard.net
e-francbank.com
gonegnomes.com.showconvention.com
gowns.cool
hippieshroom.com.hobimo.com
homschooling.com
merchforever.com
newyorkmobiletbillboard.co
nm.cosfacts.org.pokerzen.com
polkawise.com
sonia.ws
tinybirths.com
usc.college
wetech-alliance.org
cointake.com
doneverhard.net
e-francbank.com
gonegnomes.com.showconvention.com
gowns.cool
hippieshroom.com.hobimo.com
homschooling.com
merchforever.com
newyorkmobiletbillboard.co
nm.cosfacts.org.pokerzen.com
polkawise.com
sonia.ws
tinybirths.com
usc.college
wetech-alliance.org
Other certificates including the domain name usc.college
(limited to 100 certificates)
sanr.co.za
usc.college
dumptruck.ca
sculpit.cloud
dumptruck.ca
dumptruck.ca
dumptruck.ca
usc.college
portland.world
usc.college
usc.college
usc.college
grocer.cc
grocer.cc
usc.college
5272653.ca
grocer.cc
usc.college
norway.biz.fat.vc
usc.college
reptile.vc
morethanapatch.life
usc.college
marsexpress.ca
usc.college
emotionsandmore.limited
dumptruck.ca
proassislife.com.ec.proassislife.com.ec
usc.college
usc.college
birthdoula.la
usc.college
winecountry.realty.usc.college
usc.college
usc.college
usc.college
laughing.pizza
usc.college
usc.college
usc.college
usc.college
apify.de
marsexpress.ca
marsexpress.ca
usc.college
usc.college
marsexpress.ca
usc.college
usc.college
marsexpress.ca
usc.college
usc.college
white-pages.co.za
proassislife.com.ec.proassislife.com.ec
beachblanket.club
usc.college
grocer.cc
marsexpress.ca
usc.college
usc.college
usc.college
usc.college
dumptruck.ca
sculpit.cloud
dumptruck.ca
dumptruck.ca
dumptruck.ca
usc.college
portland.world
usc.college
usc.college
usc.college
grocer.cc
grocer.cc
usc.college
5272653.ca
grocer.cc
usc.college
norway.biz.fat.vc
usc.college
reptile.vc
morethanapatch.life
usc.college
marsexpress.ca
usc.college
emotionsandmore.limited
dumptruck.ca
proassislife.com.ec.proassislife.com.ec
usc.college
usc.college
birthdoula.la
usc.college
winecountry.realty.usc.college
usc.college
usc.college
usc.college
laughing.pizza
usc.college
usc.college
usc.college
usc.college
apify.de
marsexpress.ca
marsexpress.ca
usc.college
usc.college
marsexpress.ca
usc.college
usc.college
marsexpress.ca
usc.college
usc.college
white-pages.co.za
proassislife.com.ec.proassislife.com.ec
beachblanket.club
usc.college
grocer.cc
marsexpress.ca
usc.college
usc.college
usc.college
Certificate
The complete raw certificate details for usc.college in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISBP+4KhCdfhLtjzU5IL77jPl6MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAyMjMxNzE4MzdaFw0yMzA1MjQxNzE4MzZaMBYxFDASBgNVBAMT C3VzYy5jb2xsZWdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEmQ oAyKUIR7pP4FrI8vQvH9WPadHdIzf8K281QsehwHsjBda8sOkgyZvtaTlycQG6Gc ELIv3pUWr55eGot5AVPp3zYm3BeDXPa0kL3zFCCJV1NnJItIBQH2tdpl7x9dgSx0 tISutGIjmGdYZci/gR67CmMipeNoM0xcvSgihz1hMlNxpYFTYfEq1rYCvur3lSuR Im8EBcsnuYnS5FC6aN9W6jk7qHsyBS46ubZwPhJSS9q3W9u+AShbsm8KazTsQNCi 0I1XuYOV7bnjwb/lXKEGPIWFZ89p2L/c7SR/wzhL2bNubI1Hxnd98qaeY+DXBmvA HB9tLa067uqQeD38ZQIDAQABo4IDczCCA28wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBTv7Yf/nu5gYfYISRLbUSYF7yVpmDAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCC AT8GA1UdEQSCATYwggEyggtiZXR2aWJlLmNvbYIMY29pbnRha2UuY29tgg9kb25l dmVyaGFyZC5uZXSCD2UtZnJhbmNiYW5rLmNvbYIhZ29uZWdub21lcy5jb20uc2hv d2NvbnZlbnRpb24uY29tggpnb3ducy5jb29sghtoaXBwaWVzaHJvb20uY29tLmhv Ymltby5jb22CEGhvbXNjaG9vbGluZy5jb22CEG1lcmNoZm9yZXZlci5jb22CGm5l d3lvcmttb2JpbGV0YmlsbGJvYXJkLmNvghxubS5jb3NmYWN0cy5vcmcucG9rZXJ6 ZW4uY29tgg1wb2xrYXdpc2UuY29tgghzb25pYS53c4IOdGlueWJpcnRocy5jb22C C3VzYy5jb2xsZWdlghN3ZXRlY2gtYWxsaWFuY2Uub3JnMEwGA1UdIARFMEMwCAYG Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu bGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAtz77JN+c Tbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGGf3+m1gAABAMASDBGAiEA9Xzw hskLPKbmDBKLgIz/Zq746al65l8xQBPYExzeyCYCIQCSKGMWeS3tMhSXT4NLZn+w rcrsF7fTQTpdmWSst7SGOAB3AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlej UutSAAABhn9/qNUAAAQDAEgwRgIhAPccBVuI82HdwurIZWEfmSowgLIHi+HSelaq iGPxm+TXAiEA11bhivxExHdcJPNTl6T721HIufRyHI3vtx8ZN413Fx8wDQYJKoZI hvcNAQELBQADggEBAA7lD5IMNIGL3+B4fj8Lr5hTrX0iQXSJiZK0CbVFBGuwR1IB jrb/J6LfFjFYvodZUSZB0sI11vloULomuFaSUufuoc6noe+PweDjKd/fGeGvikEK A65ZM6vMf2v1teH6Hc4xsG2Gr99FMCYYU7CGWgZncoW4wM88jU2Sc0v2Ri8B9n3x DIWhYidkb0AcF0G0Gb+01ZhHBaR0+Ssb+gE5HfjU2SF1xvRh/Pi6up8h2mzg4whQ 1gcRak0LhUZe9L9LGGYtbX2IuP1pq1CE4GGYq4R1gyv+EZ6oLGGKfqJemkuSL8dv 712Ykmu6t+hO2ET0NyA0dAaof7suetlOgC7371E= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEmQoAyKUIR7pP4FrI8v QvH9WPadHdIzf8K281QsehwHsjBda8sOkgyZvtaTlycQG6GcELIv3pUWr55eGot5 AVPp3zYm3BeDXPa0kL3zFCCJV1NnJItIBQH2tdpl7x9dgSx0tISutGIjmGdYZci/ gR67CmMipeNoM0xcvSgihz1hMlNxpYFTYfEq1rYCvur3lSuRIm8EBcsnuYnS5FC6 aN9W6jk7qHsyBS46ubZwPhJSS9q3W9u+AShbsm8KazTsQNCi0I1XuYOV7bnjwb/l XKEGPIWFZ89p2L/c7SR/wzhL2bNubI1Hxnd98qaeY+DXBmvAHB9tLa067uqQeD38 ZQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 435465943656569170919941867987704541411706 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-23 17:18:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-24 17:18:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'usc.college' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23769077558628436820133194146417012207494249919656733595763396711566635100085975003949177086870138101610296278071944319811619905436291632267237139148473516808558959430855991783432587220331013717927967087989069799121578373493251733381723307297346517940415332456287201873848234371299869359302448422390750594568679312340722322664894183165382297184689152956860480416652567382131196021210943111239059036249289539573800200761770588375090300053750284327517958421914856255337988181678678363832633157179978869792396549699107360785321641143578584952357680375625404296274822655286607669844745016164940246420264981848958670077029 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) efed87ff9eee6061f6084912db512605ef256998 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (310 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betvibe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cointake.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doneverhard.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-francbank.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonegnomes.com.showconvention.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gowns.cool' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hippieshroom.com.hobimo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homschooling.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merchforever.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkmobiletbillboard.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nm.cosfacts.org.pokerzen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polkawise.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonia.ws' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinybirths.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usc.college' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wetech-alliance.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001867f7fa6d60000040300483046022100f57cf086c90b3ca6e60c128b808cff66aef8e9a97ae65f314013d8131cdec82602210092286316792ded3214974f834b667fb0adcaec17b7d3413a5d9964acb7b486380077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001867f7fa8d50000040300483046022100f71c055b88f361ddc2eac865611f992a3080b2078be1d27a56aa8863f19be4d7022100d756e18afc44c4775c24f35397a4fbdb51c8b9f4721c8defb71f19378d77171f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000ee50f920c34818bdfe0787e3f0baf9853ad7d224174898992b409b545046bb04752018eb6ff27a2df163158be8759512641d2c235d6f96850ba26b8569252e7eea1cea7a1ef8fc1e0e329dfdf19e1af8a410a03ae5933abcc7f6bf5b5e1fa1dce31b06d86afdf4530261853b0865a06677285b8c0cf3c8d4d92734bf6462f01f67df10c85a16227646f401c1741b419bfb4d5984705a474f92b1bfa01391df8d4d92175c6f461fcf8baba9f21da6ce0e30850d607116a4d0b85465ef4bf4b18662d6d7d88b8fd69ab5084e06198ab8475832bfe119ea82c618a7ea25e9a4b922fc76fef5d98926bbab7e84ed844f43720347406a87fbb2e7ad94e802ef7ef51