www.degrandisphysicaltherapy.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ab:c7:73:99:6d:41:48:2c:d4:d8:a7:3c:7a:bc:8e:a5:49 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.degrandisphysicaltherapy.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ab:c7:73:99:6d:41:48:2c:d4:d8:a7:3c:7a:bc:8e:a5:49Serial Number (int): 319790259135925889808762128837919390999881
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a3:ca:e5:43:db:32:87:42:80:10:3c:85:0f:cd:fa:2c:0e:fc:4c:3a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d9:11:25:f2:4d:bf:72:5f:2e:41:8b:90:fa:e3:f0:30:7d:c4:8d:b6
Fingerprint (sha256): f6:5b:f2:ce:77:5b:67:58:b7:84:50:df:f7:d3:c3:30:f9:5a:02:be:c7:0c:e1:68:7e:e9:4b:ac:af:6b:1f:ec
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.degrandisphysicaltherapy.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.degrandisphysicaltherapy.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.degrandisphysicaltherapy.com
Other certificates including the domain name degrandisphysicaltherapy.com
(limited to 100 certificates)
sakarya.futbol
www.degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
www.yeshrealstar.com
www.bringtotable.com
qa.app.pspro.ai
degrandisphysicaltherapy.com
chatterr.net
degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
business.shopsavee.com
sushiuplus.ca
launchboard.app
www.degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
calendaa.com
www.degrandisphysicaltherapy.com
entregamovil.com
degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
www.seelan.co
www.degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
shenaniganizers.com
www.vjsm3.cf
junior.mipasion.co
beaconbee.io
staging.ainahainapta.com
degrandisphysicaltherapy.com
app.deboutique.ru
share.cashbee.ph
www.degrandisphysicaltherapy.com
oversiculo.com.br
degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
www.matoshreebiz.in
adablocks.com
brick.real-tech.nl
facilitarte.com.co
degrandisphysicaltherapy.com
insigneluxuryvillarokabella.porcelanosapartners.com
degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
inyvanz.es
grupohml.com.br
junior.mipasion.co
www.degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
www.menula.app
www.degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
test.kenarial.com
econotify.ca
patrickgalicia.com
www.degrandisphysicaltherapy.com
www.vireum.fi
www.degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
www.pointa.org
www.degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
tezt.cf
degrandisphysicaltherapy.com
asidoar.pt
www.degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
www.yeshrealstar.com
www.bringtotable.com
qa.app.pspro.ai
degrandisphysicaltherapy.com
chatterr.net
degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
business.shopsavee.com
sushiuplus.ca
launchboard.app
www.degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
calendaa.com
www.degrandisphysicaltherapy.com
entregamovil.com
degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
www.seelan.co
www.degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
shenaniganizers.com
www.vjsm3.cf
junior.mipasion.co
beaconbee.io
staging.ainahainapta.com
degrandisphysicaltherapy.com
app.deboutique.ru
share.cashbee.ph
www.degrandisphysicaltherapy.com
oversiculo.com.br
degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
www.matoshreebiz.in
adablocks.com
brick.real-tech.nl
facilitarte.com.co
degrandisphysicaltherapy.com
insigneluxuryvillarokabella.porcelanosapartners.com
degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
inyvanz.es
grupohml.com.br
junior.mipasion.co
www.degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
www.menula.app
www.degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
test.kenarial.com
econotify.ca
patrickgalicia.com
www.degrandisphysicaltherapy.com
www.vireum.fi
www.degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
www.pointa.org
www.degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
tezt.cf
degrandisphysicaltherapy.com
asidoar.pt
www.degrandisphysicaltherapy.com
www.degrandisphysicaltherapy.com
degrandisphysicaltherapy.com
Certificate
The complete raw certificate details for www.degrandisphysicaltherapy.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLDCCBRSgAwIBAgISA6vHc5ltQUgs1NinPHq8jqVJMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MjMyMjA4MDlaFw0x ODExMjEyMjA4MDlaMCsxKTAnBgNVBAMTIHd3dy5kZWdyYW5kaXNwaHlzaWNhbHRo ZXJhcHkuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpQBflSS 8qhVgYKlbYqCpwGPvn6Mglt8wldmpUlv/6rRwLvwA2zqggmyjpjAbl9GmGadwhbm TPmW18ijvK9GThLk2QzXBWIJ31g5oIHD65jCDRcmARmSLmA74Kn1pqVhbXKZrKpO QcehUUdjPNlB6u1RpRtZ58QuNW0DB3OkoBR3Db+1VlNgh+ZwPNDTx47VE3CM5Bzy HGCtL6852kV62Yve+p1WcxKp88ojuwasZ2lJR3pMpQJ3bzHnO2QGKTsNZJHg3Dxu qGNf7SfFBS4k/ZcGbm1b/2VXk3CkorUhY3LMJUHkxL9ROG4sHfjrKqsi3BKj+r+2 tVGeU3iI6T/VMwIDAQABo4IDKTCCAyUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSj yuVD2zKHQoAQPIUPzfosDvxMOjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCIHd3dy5kZWdyYW5kaXNw aHlzaWNhbHRoZXJhcHkuY29tMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsr BgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw dC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25s eSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4g YWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQg aHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEFBgorBgEEAdZ5 AgQCBIH2BIHzAPEAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAA AWVpC44RAAAEAwBHMEUCIHK41o/vZHW0C53jwgwUX8n5JuhpIRdZjjXkmXcXD5I7 AiEAp3+xjttZa0j5QIKUiFepZ3uzutm+qYgrpUkXX9uNZbQAdwBvU3asMfAxGdiZ AKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWVpC5DoAAAEAwBIMEYCIQDmeCq1w9oO HSazbTd/rcnLAxeIoBxynnPGh4Qpq82k2wIhAJnOIBz+A2Qr5ZmzRVsTZhARCM2r ISP1turHsHC30istMA0GCSqGSIb3DQEBCwUAA4IBAQB41NGZL/iTuTi0deWdSu56 6645mP7zEc32xUxCY+Zl+TWGYQ/mcMI6JeXWQIyqofV+Yx8rkG6wU7FxeMFO123D Y2f11jM+hQLI9P8yBTj9kI6rVxRp06zWmSezdQ7THIdDcw6csDFgTXqS1mksLivo VVuPRJcY1IjAk3uHLjSvc6WK/IUZOMcbERzVlQi4ES/iME5lUrnBnCKxBhkR4hIM iIQyRz7S9EWtF8O9ryk4x7K83vVvDetd/CjG51L7p+XHFzDobnnqiUkSZ/6Vfuoo ryAEjQxxHO4QrfSqhy6jstjtWGQcGe9HALNwrk6noJ+iryOK1RTeojDLEPhcsswh -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpQBflSS8qhVgYKlbYqC pwGPvn6Mglt8wldmpUlv/6rRwLvwA2zqggmyjpjAbl9GmGadwhbmTPmW18ijvK9G ThLk2QzXBWIJ31g5oIHD65jCDRcmARmSLmA74Kn1pqVhbXKZrKpOQcehUUdjPNlB 6u1RpRtZ58QuNW0DB3OkoBR3Db+1VlNgh+ZwPNDTx47VE3CM5BzyHGCtL6852kV6 2Yve+p1WcxKp88ojuwasZ2lJR3pMpQJ3bzHnO2QGKTsNZJHg3DxuqGNf7SfFBS4k /ZcGbm1b/2VXk3CkorUhY3LMJUHkxL9ROG4sHfjrKqsi3BKj+r+2tVGeU3iI6T/V MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 319790259135925889808762128837919390999881 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-23 22:08:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-21 22:08:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.degrandisphysicaltherapy.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24563215560276409123329633156153617562642356361013091091958926389009531476406419395326181694427867525095101323978945275773127329200216647011208940502317463849635253469645354317775801412537340204386103885349307937517251967763298457900001408673891139084532113672960156515216744724481360343353237237912766640679178956466976394734982165440017986833586465903620570237196852966485840197615474684760385612233180876064375538107707532015041122270130129136833900755031469899669967517129694912984517427157059424731327017864334875499853237364454608049876951483808645048565918033112958527960576251358168100379685981723913971815731 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a3cae543db32874280103c850fcdfa2c0efc4c3a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.degrandisphysicaltherapy.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165690b8e110000040300473045022072b8d68fef6475b40b9de3c20c145fc9f926e8692117598e35e49977170f923b022100a77fb18edb596b48f94082948857a9677bb3bad9bea9882ba549175fdb8d65b40077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165690b90e80000040300483046022100e6782ab5c3da0e1d26b36d377fadc9cb031788a01c729e73c6878429abcda4db02210099ce201cfe03642be599b3455b1366101108cdab2123f5b6eac7b070b7d22b2d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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