cbh.hku.hk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:cb:fb:1a:5a:76:ac:a3:d6:43:ee:8b:45:05:de:aa:c6:58 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cbh.hku.hk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:cb:fb:1a:5a:76:ac:a3:d6:43:ee:8b:45:05:de:aa:c6:58Serial Number (int): 330747951341710800806324887804285719070296
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ff:a5:a0:ae:c9:68:dc:7a:1c:51:d1:6c:47:55:3b:98:b1:11:05:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 7b:d2:42:be:2a:27:46:bc:31:30:26:df:83:e5:d4:34:d9:16:8e:82
Fingerprint (sha256): 00:9e:34:0e:6d:dd:08:00:bd:02:a4:95:5c:1a:26:54:6b:de:ea:76:c3:70:79:22:32:16:60:f3:2c:d1:df:b6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate cbh.hku.hk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cbh.hku.hk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cbh.hku.hk
www.cbh.hku.hk
www.cbh.hku.hk
Other certificates including the domain name hku.hk
(limited to 100 certificates)
icmpe.hku.hk
tt.med.hku.hk
www.smarter.hku.hk
matpp.hku.hk
french.hku.hk
onlinesurvey.cetl.hku.hk
hkumockup7.its.hku.hk
itsvpn.hku.hk
apps.saas.hku.hk
mail02.tto.hku.hk
sofea.jmsc.hku.hk
www.oncology.hku.hk
www.hkuspace.hku.hk
swire.hku.hk
kl.biosch.hku.hk
www.bocsoc.hkusu.hku.hk
www.upo.hkusu.hku.hk
rc.ortho.hku.hk
www.shhorms.hku.hk
hkumockup.its.hku.hk
cbh.hku.hk
cms.its.hku.hk
hkupop.hku.hk
*.edu.hku.hk
www.ctc.hku.hk
www.lacrosse.hkusu.hku.hk
community.cs.hku.hk
paed.hku.hk
sis-eportal.hku.hk
www.eti.hku.hk
www.hkuisa.studsoc.hku.hk
talent.hku.hk
www.mathsoc.hkusu.hku.hk
www.biosch.hku.hk
www.radiology.hku.hk
gradhse.hku.hk
sctc.nursing.hku.hk
www.icahkusu.hkusu.hku.hk
www.hkuspace.hku.hk
bohr.physics.hku.hk
hkumockup6.its.hku.hk
www.summerals.hku.hk
www.cetl.hku.hk
shs.history.hku.hk
sis-eportal.hku.hk
www.sustainability.hku.hk
qlikprod.hku.hk
hkumockup4.its.hku.hk
www.lingsoc.hkusu.hku.hk
antibody.hku.hk
clc.hku.hk
diastemas.edu.hku.hk
www.sass.hkusu.hku.hk
asiaglobalinstitute.hku.hk
aprmay97.sph.hku.hk
meetingofminds.hku.hk
*.med.hku.hk
ug.hku.hk
www.cchkusu.hkusu.hku.hk
hkufeo2.hku.hk
hkumockup20.its.hku.hk
infoday.hku.hk
www.sportsoc.hkusu.hku.hk
ediblespaces.hku.hk
app04.teli.hku.hk
newgrads.alumni.hku.hk
web.cetl.hku.hk
fintechindex.hku.hk
www.ppaa.hkusu.hku.hk
hkumockup11.its.hku.hk
stickers.uvision.hku.hk
www.ramblers.hkusu.hku.hk
panda.sph.hku.hk
role.hku.hk
hkumockup22.its.hku.hk
oyphku.hku.hk
login.alumni.hku.hk
stickers.uvision.hku.hk
*.atlab.hku.hk
easytraining.psychiatry.hku.hk
gingerbread.uvision.hku.hk
blink.psychiatry.hku.hk
amr.hku.hk
eim.cse.hku.hk
www.edusoc.hkusu.hku.hk
foaintranet.ad.arch.hku.hk
learning.hku.hk
www2.jmsc.hku.hk
finearts.hku.hk
pchiu.chemistry.hku.hk
www.buddhistlibsearch.hku.hk
hkumockup6.its.hku.hk
hku-utokyo-summer.hku.hk
www2.cetl.hku.hk
bpyloo.hku.hk
hkumockup14.its.hku.hk
hkumockup29.its.hku.hk
ihss.hku.hk
campus.ageing.hku.hk
fintechindex.hku.hk
tt.med.hku.hk
www.smarter.hku.hk
matpp.hku.hk
french.hku.hk
onlinesurvey.cetl.hku.hk
hkumockup7.its.hku.hk
itsvpn.hku.hk
apps.saas.hku.hk
mail02.tto.hku.hk
sofea.jmsc.hku.hk
www.oncology.hku.hk
www.hkuspace.hku.hk
swire.hku.hk
kl.biosch.hku.hk
www.bocsoc.hkusu.hku.hk
www.upo.hkusu.hku.hk
rc.ortho.hku.hk
www.shhorms.hku.hk
hkumockup.its.hku.hk
cbh.hku.hk
cms.its.hku.hk
hkupop.hku.hk
*.edu.hku.hk
www.ctc.hku.hk
www.lacrosse.hkusu.hku.hk
community.cs.hku.hk
paed.hku.hk
sis-eportal.hku.hk
www.eti.hku.hk
www.hkuisa.studsoc.hku.hk
talent.hku.hk
www.mathsoc.hkusu.hku.hk
www.biosch.hku.hk
www.radiology.hku.hk
gradhse.hku.hk
sctc.nursing.hku.hk
www.icahkusu.hkusu.hku.hk
www.hkuspace.hku.hk
bohr.physics.hku.hk
hkumockup6.its.hku.hk
www.summerals.hku.hk
www.cetl.hku.hk
shs.history.hku.hk
sis-eportal.hku.hk
www.sustainability.hku.hk
qlikprod.hku.hk
hkumockup4.its.hku.hk
www.lingsoc.hkusu.hku.hk
antibody.hku.hk
clc.hku.hk
diastemas.edu.hku.hk
www.sass.hkusu.hku.hk
asiaglobalinstitute.hku.hk
aprmay97.sph.hku.hk
meetingofminds.hku.hk
*.med.hku.hk
ug.hku.hk
www.cchkusu.hkusu.hku.hk
hkufeo2.hku.hk
hkumockup20.its.hku.hk
infoday.hku.hk
www.sportsoc.hkusu.hku.hk
ediblespaces.hku.hk
app04.teli.hku.hk
newgrads.alumni.hku.hk
web.cetl.hku.hk
fintechindex.hku.hk
www.ppaa.hkusu.hku.hk
hkumockup11.its.hku.hk
stickers.uvision.hku.hk
www.ramblers.hkusu.hku.hk
panda.sph.hku.hk
role.hku.hk
hkumockup22.its.hku.hk
oyphku.hku.hk
login.alumni.hku.hk
stickers.uvision.hku.hk
*.atlab.hku.hk
easytraining.psychiatry.hku.hk
gingerbread.uvision.hku.hk
blink.psychiatry.hku.hk
amr.hku.hk
eim.cse.hku.hk
www.edusoc.hkusu.hku.hk
foaintranet.ad.arch.hku.hk
learning.hku.hk
www2.jmsc.hku.hk
finearts.hku.hk
pchiu.chemistry.hku.hk
www.buddhistlibsearch.hku.hk
hkumockup6.its.hku.hk
hku-utokyo-summer.hku.hk
www2.cetl.hku.hk
bpyloo.hku.hk
hkumockup14.its.hku.hk
hkumockup29.its.hku.hk
ihss.hku.hk
campus.ageing.hku.hk
fintechindex.hku.hk
Certificate
The complete raw certificate details for cbh.hku.hk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISA8v7Glp2rKPWQ+6LRQXeqsZYMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjAxNzE4NDRaFw0x OTEyMTkxNzE4NDRaMBUxEzARBgNVBAMTCmNiaC5oa3UuaGswggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCHi2/TSxuWhWkfriK7DKcL8Ycjno4i1/ybCxna xLL393yEmjyxNbvIukPSDvU7sGSxSoCgnjs0Rl3PAxoHwFl4STFY6YMlapnIdxI4 ixr2iGxdYtWjW1/RrXhD6Bb2zNqG1FA5hdBMNziL28FYl0I7/cDpfqoTsvv7pyyw wG6ihlj7Zofk7qmLhg8TfKYzXczcbSCC5SZKLOeT5lTigOlbqYchYq7SnPeaNpyW MSW3HZE28FIOtLRDvTaCAm5BqFTr+/lJmT4GYBEH+qaFJ6HaOPd/rlOAtpuf1bY7 wO3UimNSYfndeCNgLBlWuJEAW+KoYtWJO4f6Ux+ZC3Vu3gBjAgMBAAGjggJuMIIC ajAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFP+loK7JaNx6HFHRbEdVO5ixEQUwMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w JQYDVR0RBB4wHIIKY2JoLmhrdS5oa4IOd3d3LmNiaC5oa3UuaGswTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgB0 ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAW1P5dF6AAAEAwBHMEUC IQCHaLLx4QIUYPkb1es14lm6vHt1D4S7FRYLeE4Hlo0ezgIgBtTlYwZXmDyz6saD 0G0VxTTtG5b2hrB1N+NEnLZ5VzAAdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTD DPTlRUf0eAAAAW1P5dNDAAAEAwBGMEQCIBiPMkNK4yWUNHo7q+DELlsMVT6NJ+zX sHZctqXC3zGDAiBKcKB1/IrBVv5WZQNRra4Jgq5fvS6pG7DL2edJBg0jEzANBgkq hkiG9w0BAQsFAAOCAQEACnF6joVoyF7rJr4EV25NgViMsiBpOljVafT9b1cZcAme E2lPcGZ2mioaHLPvX8Iv4qOdTGzk13GTZzZkAMwYtICsBD69AbpZ0tWdF5YOVOxj 06LYpW9yurJtm1q2uIRrCO5giMz8SqX3gJipiEflQVFno4fM0UU2hlUf2Fs6waz8 J0yK8cHjko8O8MtJmVz9ixSfHuQsDWKsgNYwtcnG85rHr8C1nhJlIn+nnxvH1Qo1 raXEDw5wAovFgergzTtqLhN18KjZL0vJIVHBQpr0+zcXSx6FxRvBaf2lSXAEivqQ Lrbh2OiQeDo6bIEpoahOma90Rsu8Hc+Vr32DE5JgUg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4tv00sbloVpH64iuwyn C/GHI56OItf8mwsZ2sSy9/d8hJo8sTW7yLpD0g71O7BksUqAoJ47NEZdzwMaB8BZ eEkxWOmDJWqZyHcSOIsa9ohsXWLVo1tf0a14Q+gW9szahtRQOYXQTDc4i9vBWJdC O/3A6X6qE7L7+6cssMBuooZY+2aH5O6pi4YPE3ymM13M3G0gguUmSiznk+ZU4oDp W6mHIWKu0pz3mjacljEltx2RNvBSDrS0Q702ggJuQahU6/v5SZk+BmARB/qmhSeh 2jj3f65TgLabn9W2O8Dt1IpjUmH53XgjYCwZVriRAFviqGLViTuH+lMfmQt1bt4A YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 330747951341710800806324887804285719070296 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-20 17:18:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 17:18:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cbh.hku.hk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17110930027968225917975962990440584248471247707120958149225113185912629441577051790441709402230492249819805006802677284025383347386323298018656353627245979232642307709261066298078115006707357987828949615145834179814831758604538052787948243140705020054375805755060950796380945233176909286522464202220712802252356815220063568326862978859315494605553625050107661669981762215602664076741263068570642150664801828594849782797630573016023682048783956800969284417397059339836400785451398037183323082700115390417900869104855241407343971513165104393402309240208160439645234751227907637364921290921050794558353041710941900505187 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ffa5a0aec968dc7a1c51d16c47553b98b1110530 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbh.hku.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbh.hku.hk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d4fe5d17a00000403004730450221008768b2f1e1021460f91bd5eb35e259babc7b750f84bb15160b784e07968d1ece022006d4e5630657983cb3eac683d06d15c534ed1b96f686b07537e3449cb6795730007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d4fe5d34300000403004630440220188f32434ae32594347a3babe0c42e5b0c553e8d27ecd7b0765cb6a5c2df318302204a70a075fc8ac156fe56650351adae0982ae5fbd2ea91bb0cbd9e749060d2313 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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