comberton-pool.org.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:0e:12:f8:aa:ed:b8:e4:b6:f9:b4:c3:53:81:3d:c2:05:a4 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=comberton-pool.org.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:0e:12:f8:aa:ed:b8:e4:b6:f9:b4:c3:53:81:3d:c2:05:a4Serial Number (int): 266126028192562852428958671313608206583204
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 17:5c:12:ff:75:35:80:84:7e:1e:fc:01:2f:e9:2f:94:8b:3d:bd:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 3f:ba:ee:5d:c7:53:d0:6c:fa:ef:71:2c:d7:e8:ac:a7:29:eb:43:2b
Fingerprint (sha256): da:6a:21:d9:41:81:e5:36:96:4c:1b:5e:66:cb:5b:5f:ba:30:45:e7:a4:09:02:f1:54:85:3f:a0:06:14:41:3a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate comberton-pool.org.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for comberton-pool.org.uk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
comberton-pool.org.uk
www.comberton-pool.org.uk
www.comberton-pool.org.uk
Other certificates including the domain name comberton-pool.org.uk
(limited to 100 certificates)
comberton-pool.org.uk
www.fishbowl.dev
lottery-play.com
www.stormheg.co
comberton-pool.org.uk
comberton-pool.org.uk
link-sandbox.diyo.app
members.comberton-pool.org.uk
comberton-pool.org.uk
*.comberton-pool.org.uk
comberton-pool.org.uk
www.arttraphotography.com
comberton-pool.org.uk
extrapharma-qa.myretailcard.com
drumaid.com
peergateway.com
www.fishbowl.dev
comberton-pool.org.uk
www.brandingbros.uk
grupal.es
comberton-pool.org.uk
www.appyflow.in
comberton-pool.org.uk
members.comberton-pool.org.uk
*.comberton-pool.org.uk
comberton-pool.org.uk
comberton-pool.org.uk
comberton-pool.org.uk
comberton-pool.org.uk
muchselect.dev
portal.kv-sistem.me
members.comberton-pool.org.uk
members.comberton-pool.org.uk
members.comberton-pool.org.uk
internal-prd.order.place
cuup.productgenius.io
win95.deguchihi.net
comberton-pool.org.uk
comberton-pool.org.uk
comberton-pool.org.uk
orneka.com
haller.dev
www.amadogonzalez.dev
members.comberton-pool.org.uk
www.thx1138-force.com
comberton-pool.org.uk
comberton-pool.org.uk
extrapharma-qa.myretailcard.com
comberton-pool.org.uk
www.guitarlessonscambridge.com
faucet.arianee.net
comberton-pool.org.uk
comberton-pool.org.uk
portal.analyticindex.com
www.apijuridica.com.br
www.kaybet.net
members.comberton-pool.org.uk
einreg.org
www.fishbowl.dev
lottery-play.com
www.stormheg.co
comberton-pool.org.uk
comberton-pool.org.uk
link-sandbox.diyo.app
members.comberton-pool.org.uk
comberton-pool.org.uk
*.comberton-pool.org.uk
comberton-pool.org.uk
www.arttraphotography.com
comberton-pool.org.uk
extrapharma-qa.myretailcard.com
drumaid.com
peergateway.com
www.fishbowl.dev
comberton-pool.org.uk
www.brandingbros.uk
grupal.es
comberton-pool.org.uk
www.appyflow.in
comberton-pool.org.uk
members.comberton-pool.org.uk
*.comberton-pool.org.uk
comberton-pool.org.uk
comberton-pool.org.uk
comberton-pool.org.uk
comberton-pool.org.uk
muchselect.dev
portal.kv-sistem.me
members.comberton-pool.org.uk
members.comberton-pool.org.uk
members.comberton-pool.org.uk
internal-prd.order.place
cuup.productgenius.io
win95.deguchihi.net
comberton-pool.org.uk
comberton-pool.org.uk
comberton-pool.org.uk
orneka.com
haller.dev
www.amadogonzalez.dev
members.comberton-pool.org.uk
www.thx1138-force.com
comberton-pool.org.uk
comberton-pool.org.uk
extrapharma-qa.myretailcard.com
comberton-pool.org.uk
www.guitarlessonscambridge.com
faucet.arianee.net
comberton-pool.org.uk
comberton-pool.org.uk
portal.analyticindex.com
www.apijuridica.com.br
www.kaybet.net
members.comberton-pool.org.uk
einreg.org
Certificate
The complete raw certificate details for comberton-pool.org.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGfDCCBWSgAwIBAgISAw4S+KrtuOS2+bTDU4E9wgWkMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMjExMTUzNDlaFw0x OTAyMTkxMTUzNDlaMCAxHjAcBgNVBAMTFWNvbWJlcnRvbi1wb29sLm9yZy51azCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKjPb5gf/kjtl9S949Jwlknb gUZv70PxBaZe5OgqaCGT/aQogXoNGPwYDK9Cs15Oa2rOstauofVHoRGdPoerb3U8 fPohL1UsNWM3Rg7wpEm270b0OYV1A67Q3O1dUdIh+NMQvUBcP8DJkr+y0BTrvo+k KgPy39AJ/JzJUKjixu+MwbpgiuiIDYhvFk4wAdr/sfpGsOjKx30jjg3qsfy3r1R2 LRZtq21rAc3MBjPxy4Lx+P4EXCm93eusFvxcy0dA1c/IGtRGovdwOxmvkO9NNmJj ttnHkFNSOt234rzVtPvVrf2Z8oT6XuOBedcrFzK4E3HA56riKfCK1IemAfKc7H2s 0MhU/c9u8RRaveYaeftgzQqi6RIBoAgWPyf6PYgfKwGp6/mL64YCBZGxGIEFdqsq FYacMB0cjr5bzNByImhNCHR0x8JBhWda30htwtiHKIurWEVuPAEQIK29qthdt2R6 NBOQ9SNs9Bir8Fp3uGfhk2/W0HjuX+7YzYP8GoNZEbDJGIgNWFlfdcIbRQopq8k/ G45LmCiB0XqaC0RSkMsFF19vmnmlQeY4noUl0emImalksnG6INTurisRkktb2CFY VoLj2aaHX7rp5btCpY0aL7yLS+sO1qlDKhc9IHMdw7cYj/MB1u8BuLmgzbNprozj k2gFvySFBSayqHwaf03RAgMBAAGjggKEMIICgDAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFBdcEv91NYCEfh78AS/pL5SLPb2eMB8GA1UdIwQYMBaAFKhKamMEfd265tE5 t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wOwYDVR0RBDQwMoIVY29tYmVydG9u LXBvb2wub3JnLnVrghl3d3cuY29tYmVydG9uLXBvb2wub3JnLnVrMEwGA1UdIARF MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6 Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA 4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFnNlV2hgAABAMARjBE AiBI43usBDvHiJwIfsernajEm+fsPgcCIhJgrEM5l6cTfwIgBKOHKZWoURsGFz5N ZgcDoc3A9gPSOI9vyfbNrSTdJ6QAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTD DPTlRUf0eAAAAWc2VXbZAAAEAwBHMEUCIAYqB0cqhMlcOzseuWT1cqnPYcYbDGT3 384vJk0si22fAiEA6snf3Yx9mYWtPKZ4viC9URJvhhxksRRKizqjd1OnE8IwDQYJ KoZIhvcNAQELBQADggEBAD8dO7Tb1CggXqsUUoP+WgLstZ0UMWrZn2UQ1DhT+RnH Sxmw8taGBzMjFRV+yul8kaKh+zsKwZ4KBubAdPDd6STO+1znM6+RbH+fL1Z2Ph1v dKI/l/vedgf7TXQ8E9HxDgHQuVUVwkgaXQ6WBUf3Mlv3yZFA2WiPs1DeF1aLuXl/ HG7E8i0yzCxbPyZQuxAlP6bR7pnC/tuphdpxyjV7nnAmt8ujmvRPs6QCQnWZInGy FddatqscwkC+qQ6utS4cl/86sPN3y+dT4yntcAZ9TlQcFM7o8Rycjj5CibMab6c9 RPtIbqoVoj7bHOxlkMlAdM/PHVeDMZ7uL4+tAcrw1hY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqM9vmB/+SO2X1L3j0nCW SduBRm/vQ/EFpl7k6CpoIZP9pCiBeg0Y/BgMr0KzXk5ras6y1q6h9UehEZ0+h6tv dTx8+iEvVSw1YzdGDvCkSbbvRvQ5hXUDrtDc7V1R0iH40xC9QFw/wMmSv7LQFOu+ j6QqA/Lf0An8nMlQqOLG74zBumCK6IgNiG8WTjAB2v+x+kaw6MrHfSOODeqx/Lev VHYtFm2rbWsBzcwGM/HLgvH4/gRcKb3d66wW/FzLR0DVz8ga1Eai93A7Ga+Q7002 YmO22ceQU1I63bfivNW0+9Wt/ZnyhPpe44F51ysXMrgTccDnquIp8IrUh6YB8pzs fazQyFT9z27xFFq95hp5+2DNCqLpEgGgCBY/J/o9iB8rAanr+YvrhgIFkbEYgQV2 qyoVhpwwHRyOvlvM0HIiaE0IdHTHwkGFZ1rfSG3C2Icoi6tYRW48ARAgrb2q2F23 ZHo0E5D1I2z0GKvwWne4Z+GTb9bQeO5f7tjNg/wag1kRsMkYiA1YWV91whtFCimr yT8bjkuYKIHRepoLRFKQywUXX2+aeaVB5jiehSXR6YiZqWSycbog1O6uKxGSS1vY IVhWguPZpodfuunlu0KljRovvItL6w7WqUMqFz0gcx3DtxiP8wHW7wG4uaDNs2mu jOOTaAW/JIUFJrKofBp/TdECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 266126028192562852428958671313608206583204 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-21 11:53:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-19 11:53:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'comberton-pool.org.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 688685924912127652637911373247774383492275000808006565146463098663641488280941551043058138393256537209583542471921758856519339629836207604109959266898018553110478283714252652094351097177489346075219538018877602605898512685191629864540254185075575776878141168179486627234057830693515691961781464803609137992969096573593873201947162571416299828211151851723863498825160169582226265787317410409725226970692636897502712170283729044401738249020681355287220472702600737956520532363164530792111339643879516949771998727559679936303890387706410514794991763922450577641382823111000075738029757777589232704636209086192874440152223150955885759596218905298027228049548892900761690495211357995102026908156969670652635079418285857754153958405801449285507222255687205191779932698987012048053558565477229010458386408982754863857970425085979666550320411250157687373619572207310568695205586592042246317862399464397907483489180731122034846457178477131424693218853407524574397768311538229629350018507582830330610456725479500298809845915456359422490513960463707055576715806802413031360367400658829073981820459035959857951194805463738088135673504538300394927621455293107669230310212214925690008057610660268960469296211102351542556740538270282017538165394897 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 175c12ff753580847e1efc012fe92f948b3dbd9e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comberton-pool.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comberton-pool.org.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167365576860000040300463044022048e37bac043bc7889c087ec7ab9da8c49be7ec3e0702221260ac433997a7137f022004a3872995a8511b06173e4d660703a1cdc0f603d2388f6fc9f6cdad24dd27a4007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167365576d900000403004730450220062a07472a84c95c3b3b1eb964f572a9cf61c61b0c64f7dfce2f264d2c8b6d9f022100eac9dfdd8c7d9985ad3ca678be20bd51126f861c64b1144a8b3aa37753a713c2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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