www.fortdodgeiowa.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:29:67:17:f7:69:5f:b1:cf:5d:1f:eb:31:77:59:b1:0b:86 was issued on by Let's Encrypt.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.fortdodgeiowa.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:29:67:17:f7:69:5f:b1:cf:5d:1f:eb:31:77:59:b1:0b:86Serial Number (int): 275425469763536554778825764613405816195974
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 60:b7:18:a7:d0:fd:13:27:af:f7:62:fc:36:05:80:b4:90:85:15:55
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 24:cc:79:9f:3b:d2:ff:f5:2e:b3:bd:8b:48:91:58:1a:0a:e9:ab:1f
Fingerprint (sha256): d7:96:10:f3:e4:50:41:ec:15:81:49:81:0f:7a:d2:2d:99:a1:2a:1e:cf:46:7e:ce:74:c4:f7:c1:5d:24:fd:6b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.fortdodgeiowa.org
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.fortdodgeiowa.org
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fortdodgeiowa.org
lakesidemgc.org
rogerssportscomplex.org
rosedalerapids.org
ssmidfd.com
www.fortdodgeiowa.org
www.lakesidemgc.org
www.rogerssportscomplex.org
www.rosedalerapids.org
www.ssmidfd.com
lakesidemgc.org
rogerssportscomplex.org
rosedalerapids.org
ssmidfd.com
www.fortdodgeiowa.org
www.lakesidemgc.org
www.rogerssportscomplex.org
www.rosedalerapids.org
www.ssmidfd.com
Other certificates including the domain name fortdodgeiowa.org
(limited to 100 certificates)
*.fortdodgeiowa.org
fortdodgeiowa.org
fortdodgeiowa.org
fortdodgeiowa.org
*.fortdodgeiowa.org
fortdodgeiowa.org
fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
fortdodgeiowa.org
www.fortdodgeiowa.org
fortdodgeiowa.org
www.fortdodgeiowa.org
fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
fortdodgeiowa.org
mail.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
*.fortdodgeiowa.org
www.fortdodgeiowa.org
fortdodgeiowa.org
www.fortdodgeiowa.org
fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
*.fortdodgeiowa.org
fortdodgeiowa.org
fortdodgeiowa.org
fortdodgeiowa.org
*.fortdodgeiowa.org
fortdodgeiowa.org
fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
fortdodgeiowa.org
www.fortdodgeiowa.org
fortdodgeiowa.org
www.fortdodgeiowa.org
fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
fortdodgeiowa.org
mail.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
*.fortdodgeiowa.org
www.fortdodgeiowa.org
fortdodgeiowa.org
www.fortdodgeiowa.org
fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
www.fortdodgeiowa.org
*.fortdodgeiowa.org
Certificate
The complete raw certificate details for www.fortdodgeiowa.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGnzCCBYegAwIBAgISAylnF/dpX7HPXR/rMXdZsQuGMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTkxMzAwMzJaFw0y MDA0MTgxMzAwMzJaMCAxHjAcBgNVBAMTFXd3dy5mb3J0ZG9kZ2Vpb3dhLm9yZzCC AaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAMsrh+TLndDrWaFRaI7Ht4oB qBffe20keiHBQaHYYx22D8JVNB5uJPNHfkhJ41nYpld5AZYdfFaDgYeBaCAx4dJP bMSnnEt/ctY3uZ/THQC7Tvp//ljjsVN72+4Nh/oEUsoGV5/JkpYxWPldHBpW+h8f 2/MJvu8WiYYjtwp0PHtnTuYfDMXJXNkAn1uFXDsmYUlRI16gzvft3vtE5plM9KYc KoViwoCl8RpzC6Sc7In/MFO4WGKdUtPBv37M9pzzB6Ezodm3Kji4eqMMb21FiX3j dNKU/ZEBdoNeRuISfFvIgUuXq5JXVvFLwtA+lNTsH1I0+zm/dU2sw++498EH/hOo SX0wNNGbNMjtiU98jbiFesvGhoSsDMF5vR0rxsCdO719tdgCfRo0LtMbJHvIZuvV P2B8PBn3bjmitFrEcA4lgQO4T93Jmb8d6Lfxa5AH2XM22+j89fOlqFIxj4xsKzWC pAs0ExLF400/cfNCiIKAWxgxtj8SkE8q83/3wXlLuQIDAQABo4IDJzCCAyMwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBRgtxin0P0TJ6/3Yvw2BYC0kIUVVTAfBgNVHSME GDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYB BQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYB BQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIHbBgNV HREEgdMwgdCCEWZvcnRkb2RnZWlvd2Eub3Jngg9sYWtlc2lkZW1nYy5vcmeCF3Jv Z2Vyc3Nwb3J0c2NvbXBsZXgub3JnghJyb3NlZGFsZXJhcGlkcy5vcmeCC3NzbWlk ZmQuY29tghV3d3cuZm9ydGRvZGdlaW93YS5vcmeCE3d3dy5sYWtlc2lkZW1nYy5v cmeCG3d3dy5yb2dlcnNzcG9ydHNjb21wbGV4Lm9yZ4IWd3d3LnJvc2VkYWxlcmFw aWRzLm9yZ4IPd3d3LnNzbWlkZmQuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAXqdz+d9WwOe1Nkh90Eng MnqRmgyEoRIShBh1loFxRVgAAAFvvhrpYAAABAMARzBFAiAKH2zImmwbCqaGvhwe qn3/09jMI6V9zuA07/f9WiB5vwIhAPMC5vW5sTmWtYWaT5ZikxR7ZFANFExYZpsE KmZaRWiTAHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFvvhrp SwAABAMASDBGAiEAuish1wTXsTd5D20GXrjPYdXy0XqIAVuksgj7yiR29S0CIQDs rDbPzNtCfh+zqMerVVNQao4MWBVcp70sTatIqom7XjANBgkqhkiG9w0BAQsFAAOC AQEAWk4W76N2Z1NXXVaWHvznlGfg16++CUkco3veHattFF8gFLrX0kJGuVIvH5U5 9FAo+ZJTULdvcPeOiX9/nQty+bc4FJL/v4a+xL/oXpfCMcI2C6FDIY4tQtePGJaB QX5CRsddFe/ubZRZnUih5UTx/ma+P8CIaNEF2/YmGXnN1NdGsC9J/gEzZx1ADLfc CLuw0JuIm61nuEugD7XmcFBABWPfV8y2VIqNtw6z+H1R596C6k3IUrcGydixYPDs fSvp1IA3u+5hY/l0B/aaygfpxwK7hWGc0g8vK3yBZkKKg8iaZfZ0dh+QQuOoN8AD m3MrxfeQpkh8jWIaqlTjZdXWpw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAyyuH5Mud0OtZoVFojse3 igGoF997bSR6IcFBodhjHbYPwlU0Hm4k80d+SEnjWdimV3kBlh18VoOBh4FoIDHh 0k9sxKecS39y1je5n9MdALtO+n/+WOOxU3vb7g2H+gRSygZXn8mSljFY+V0cGlb6 Hx/b8wm+7xaJhiO3CnQ8e2dO5h8Mxclc2QCfW4VcOyZhSVEjXqDO9+3e+0TmmUz0 phwqhWLCgKXxGnMLpJzsif8wU7hYYp1S08G/fsz2nPMHoTOh2bcqOLh6owxvbUWJ feN00pT9kQF2g15G4hJ8W8iBS5erkldW8UvC0D6U1OwfUjT7Ob91TazD77j3wQf+ E6hJfTA00Zs0yO2JT3yNuIV6y8aGhKwMwXm9HSvGwJ07vX212AJ9GjQu0xske8hm 69U/YHw8GfduOaK0WsRwDiWBA7hP3cmZvx3ot/FrkAfZczbb6Pz186WoUjGPjGwr NYKkCzQTEsXjTT9x80KIgoBbGDG2PxKQTyrzf/fBeUu5AgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 275425469763536554778825764613405816195974 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 13:00:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-18 13:00:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fortdodgeiowa.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4610694906108835919140023036931324780339370173405204203314077212949173709383861823201599345860645611701391838919543551214911557186084897986563579978116107861037521557314810554389701231337915295510167376910788604705218306886135644200004525962892754662899038347074136458232378358398116692411351648309362382665513627194230773017476894642596233781886373781136014428345425215528561970388615361098115601926642472524698411041590333830313927931822260491475151541336342323428336536022215533174927980277438018306324672709222992889689229610210402152949220626751012687096885937726803918215278612102800964755433844814318603079959622219129896468480513431668239088520911020150910583751463002134818154772857654180458919410430576104215452327549577694035406076984213113918475119982685798885953710426842074426605485066625440254084416853603701485953010583966372850752579560774353624015207560370379616819750166954525576434633866372859828379405241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 60b718a7d0fd1327aff762fc360580b490851555 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (211 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortdodgeiowa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakesidemgc.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogerssportscomplex.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosedalerapids.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssmidfd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortdodgeiowa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakesidemgc.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rogerssportscomplex.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosedalerapids.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssmidfd.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fbe1ae960000004030047304502200a1f6cc89a6c1b0aa686be1c1eaa7dffd3d8cc23a57dcee034eff7fd5a2079bf022100f302e6f5b9b13996b5859a4f966293147b64500d144c58669b042a665a456893007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fbe1ae94b0000040300483046022100ba2b21d704d7b137790f6d065eb8cf61d5f2d17a88015ba4b208fbca2476f52d022100ecac36cfccdb427e1fb3a8c7ab5553506a8e0c58155ca7bd2c4dab48aa89bb5e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005a4e16efa3766753575d56961efce79467e0d7afbe09491ca37bde1dab6d145f2014bad7d24246b9522f1f9539f45028f9925350b76f70f78e897f7f9d0b72f9b7381492ffbf86bec4bfe85e97c231c2360ba143218e2d42d78f189681417e4246c75d15efee6d94599d48a1e544f1fe66be3fc08868d105dbf6261979cdd4d746b02f49fe0133671d400cb7dc08bbb0d09b889bad67b84ba00fb5e67050400563df57ccb6548a8db70eb3f87d51e7de82ea4dc852b706c9d8b160f0ec7d2be9d48037bbee6163f97407f69aca07e9c702bb85619cd20f2f2b7c8166428a83c89a65f674761f9042e3a837c0039b732bc5f790a6487c8d621aaa54e365d5d6a7