g.hslp.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e0:87:55:bb:2e:27:3a:ef:f8:d0:55:48:56:ca:99:62:31 was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=g.hslp.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e0:87:55:bb:2e:27:3a:ef:f8:d0:55:48:56:ca:99:62:31Serial Number (int): 337739998906702127383692542451846995337777
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 94:45:86:42:db:1f:3a:83:fa:dc:7d:ce:c2:85:0b:18:b0:79:47:01
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 93:e2:21:3e:ed:9c:bd:c2:76:e7:9b:65:5e:4c:f8:de:32:34:d9:8f
Fingerprint (sha256): e1:6d:e8:74:d1:ba:9f:db:aa:5e:e3:20:9b:b4:72:60:8e:16:2e:65:4d:6d:d0:97:b5:b6:58:6c:42:ea:e3:1a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate g.hslp.ca
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for g.hslp.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
g.hslp.ca
ghslp.ca
grant.heaslip.me
grant.hslp.ca
grantheaslip.ca
grantheaslip.com
grantheaslip.me
heaslip.me
hslp.ca
www.g.hslp.ca
www.ghslp.ca
www.grant.heaslip.me
www.grant.hslp.ca
www.grantheaslip.ca
www.grantheaslip.com
www.grantheaslip.me
www.heaslip.me
www.hslp.ca
ghslp.ca
grant.heaslip.me
grant.hslp.ca
grantheaslip.ca
grantheaslip.com
grantheaslip.me
heaslip.me
hslp.ca
www.g.hslp.ca
www.ghslp.ca
www.grant.heaslip.me
www.grant.hslp.ca
www.grantheaslip.ca
www.grantheaslip.com
www.grantheaslip.me
www.heaslip.me
www.hslp.ca
Other certificates including the domain name hslp.ca
(limited to 100 certificates)
weather.g.hslp.ca
g.hslp.ca
g.hslp.ca
www.grantheaslip.ca
g.hslp.ca
weather.g.hslp.ca
weather.g.hslp.ca
g.hslp.ca
www.weather.g.hslp.ca
g.hslp.ca
weather.g.hslp.ca
grantheaslip.com
weather.g.hslp.ca
g.hslp.ca
www.weather.g.hslp.ca
weather.g.hslp.ca
www.grant.heaslip.me
g.hslp.ca
grant.hslp.ca
www.weather.g.hslp.ca
hslp.ca
www.hslp.ca
g.hslp.ca
weather.g.hslp.ca
weather.ghslp.ca
hslp.ca
www.hslp.ca
g.hslp.ca
g.hslp.ca
www.grantheaslip.ca
g.hslp.ca
weather.g.hslp.ca
weather.g.hslp.ca
g.hslp.ca
www.weather.g.hslp.ca
g.hslp.ca
weather.g.hslp.ca
grantheaslip.com
weather.g.hslp.ca
g.hslp.ca
www.weather.g.hslp.ca
weather.g.hslp.ca
www.grant.heaslip.me
g.hslp.ca
grant.hslp.ca
www.weather.g.hslp.ca
hslp.ca
www.hslp.ca
g.hslp.ca
weather.g.hslp.ca
weather.ghslp.ca
hslp.ca
www.hslp.ca
Certificate
The complete raw certificate details for g.hslp.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZjCCBU6gAwIBAgISA+CHVbsuJzrv+NBVSFbKmWIxMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMjIyMzIyNTlaFw0x OTA0MjIyMzIyNTlaMBQxEjAQBgNVBAMTCWcuaHNscC5jYTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAPXO8thqxfCROS5zEkGDd8vNXKxH7pmHH+RbYxbo 1inLX7bqzvxMH4B1Xsh+69pazIF6vUPmh00OJIAiCQdRZk2GmKEWfiqbtfJzCTiG iTKfWVOb8hy/qZwhLgo7T6QzmOBsNgTxjNS6gvqlpaDa7G/c6lbgsARzlqY6JZf8 +pOCsLOHLKYkA5FD7ic2Ky74YV1/SC3tie9Bdhkr7DDAC/trwS2pNaDYnDhXFIL7 3J9flWIACiqgrtRTDyqulkaBaYiR3aYkxtqlbjfM6XjnBZt9Oy+RT0YzdfnZFkoV 8uxkitVrmyPLIb64ttA0I+1COWh3YTj34RyJx9+VizQlEiMCAwEAAaOCA3owggN2 MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUlEWGQtsfOoP63H3OwoULGLB5RwEwHwYD VR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4G CCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8G CCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCC AS8GA1UdEQSCASYwggEigglnLmhzbHAuY2GCCGdoc2xwLmNhghBncmFudC5oZWFz bGlwLm1lgg1ncmFudC5oc2xwLmNhgg9ncmFudGhlYXNsaXAuY2GCEGdyYW50aGVh c2xpcC5jb22CD2dyYW50aGVhc2xpcC5tZYIKaGVhc2xpcC5tZYIHaHNscC5jYYIN d3d3LmcuaHNscC5jYYIMd3d3Lmdoc2xwLmNhghR3d3cuZ3JhbnQuaGVhc2xpcC5t ZYIRd3d3LmdyYW50LmhzbHAuY2GCE3d3dy5ncmFudGhlYXNsaXAuY2GCFHd3dy5n cmFudGhlYXNsaXAuY29tghN3d3cuZ3JhbnRoZWFzbGlwLm1lgg53d3cuaGVhc2xp cC5tZYILd3d3LmhzbHAuY2EwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC 3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIg CMY3NXnmEHvMVgAAAWh4FrIZAAAEAwBHMEUCIQC7IILWVGJB45vCkik77oUk2p0d RyAtAlGzUypVw6TPjQIgJ+FIBsNiROCJeegfjfdJ5F3mSopDus+59t5EA8KOK+oA dQBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWh4FrRqAAAEAwBG MEQCIBH5Qitx/OhWLtXZPBZnqEONuhq1U34CwJbeEJ00f3b1AiBIuNXZNDKgwPid EYwQLIJrCJePkvl4UDiwo6lCO8af7jANBgkqhkiG9w0BAQsFAAOCAQEAc7ArcryX zN1J6SSn25Tf+W3YYqveRcicU+DjKc5ARCUg1a7pfzpW34mwYf7AndRcEVBKhTnZ pvh26UwPC2yHQ388D3u8TG7bU899ISOwhWRP/8rJFPhks0NqZ+pKaljlAbAra/Hv joys+G99uSXvBySkgSIBkc/N0gWwV7KW5Rg0v1hv1cwZ5J5KE3y+317i2W6cnYFV L/aSebLgRu/EPdn7yiJzI+8vh2YjJfDcTFmbRHyYlDNg2+QT+A5phLu0auW1ovJy LBj8F3/YZntthkzFM1rdPto+ilPro1YeVM3kqXE9vi6YkeoWpEcpC0A6vWZDBrg2 shbWF10ppS0N9Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9c7y2GrF8JE5LnMSQYN3 y81crEfumYcf5FtjFujWKctfturO/EwfgHVeyH7r2lrMgXq9Q+aHTQ4kgCIJB1Fm TYaYoRZ+Kpu18nMJOIaJMp9ZU5vyHL+pnCEuCjtPpDOY4Gw2BPGM1LqC+qWloNrs b9zqVuCwBHOWpjoll/z6k4Kws4cspiQDkUPuJzYrLvhhXX9ILe2J70F2GSvsMMAL +2vBLak1oNicOFcUgvvcn1+VYgAKKqCu1FMPKq6WRoFpiJHdpiTG2qVuN8zpeOcF m307L5FPRjN1+dkWShXy7GSK1WubI8shvri20DQj7UI5aHdhOPfhHInH35WLNCUS IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 337739998906702127383692542451846995337777 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-22 23:22:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-22 23:22:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'g.hslp.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31030434882085559858700186172118696190745833363128937438295717984156164579206175746822328643054366582345501143704741667781002494139634471992372078160893584430778123505086357356252223984405935992003608298152574631153305862613129827086861226982945076821805212994481879129655130259804907528812652218962338402113797851374815411152784040076894172949014691658176093991848043513681209887879611599325996282075879723631329937521457906438012893756802350461067414196088063283697079624516814791629754973584724119307830669589034156155356165612793679637669115460782488729219578204134818891428512361607449195619351787244188418249251 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 94458642db1f3a83fadc7dcec2850b18b0794701 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (294 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g.hslp.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghslp.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grant.heaslip.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grant.hslp.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantheaslip.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantheaslip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantheaslip.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heaslip.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hslp.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.g.hslp.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghslp.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grant.heaslip.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grant.hslp.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grantheaslip.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grantheaslip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grantheaslip.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heaslip.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hslp.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001687816b2190000040300473045022100bb2082d6546241e39bc292293bee8524da9d1d47202d0251b3532a55c3a4cf8d022027e14806c36244e08979e81f8df749e45de64a8a43bacfb9f6de4403c28e2bea00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001687816b46a0000040300463044022011f9422b71fce8562ed5d93c1667a8438dba1ab5537e02c096de109d347f76f5022048b8d5d93432a0c0f89d118c102c826b08978f92f9785038b0a3a9423bc69fee . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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