aleyant.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b3:c4:65:29:c6:74:55:09:9b:71:47:33:06:22:54:72:57 was issued on by Let's Encrypt.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=aleyant.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b3:c4:65:29:c6:74:55:09:9b:71:47:33:06:22:54:72:57Serial Number (int): 322508455430587253421240856724842483053143
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ed:94:58:db:b4:e3:5a:0f:8e:07:70:e0:49:a1:aa:a0:ca:cb:bd:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d0:53:73:ab:1a:68:e3:8e:66:12:3d:8d:c9:f0:d4:c7:7d:cb:ab:7c
Fingerprint (sha256): 01:df:69:f2:cf:01:cf:39:61:c9:0e:17:06:9a:49:d3:02:77:38:2a:09:c4:11:ab:67:c4:31:81:d4:b1:45:92
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate aleyant.com
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aleyant.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aleyant.com
colorprodupe.aleyant.com
englishfamily.aleyant.com
www.aleyant.com
www.colorprodupe.aleyant.com
www.englishfamily.aleyant.com
www.node1.aleyant.com
www.node2.aleyant.com
www.node3.aleyant.com
colorprodupe.aleyant.com
englishfamily.aleyant.com
www.aleyant.com
www.colorprodupe.aleyant.com
www.englishfamily.aleyant.com
www.node1.aleyant.com
www.node2.aleyant.com
www.node3.aleyant.com
Other certificates including the domain name aleyant.com
(limited to 100 certificates)
aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
books.newhorizonnetwork.net
aleyant.com
aleyant.com
*.aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
blog.aleyant.com
aleyant.com
aleyant.com
aleyant.com
accounts.recstra.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
access.ourvolaris.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
access.ourvolaris.com
blog.aleyant.com
webext.ourvolaris.com
blog.aleyant.com
aleyant.com
access.ourvolaris.com
aleyant.com
access.ourvolaris.com
aleyant.com
aleyant.com
client.sv3nska.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
books.ksedpainting.com
tls.automattic.com
aleyant.com
payments.aleyant.com
aleyant.com
clients.nevron360.com
aleyant.com
access.ourvolaris.com
clients.thatcherswineconsulting.com
payments.aleyant.com
aleyant.com
client.sv3nska.com
webext.ourvolaris.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
payments.aleyant.com
aleyant.com
client.sv3nska.com
tls.automattic.com
blog.aleyant.com
aleyant.com
access.ourvolaris.com
*.aleyant.com
*.aleyant.com
aleyant.com
aleyant.com
books.ksedpainting.com
aleyant.com
aleyant.com
aleyant.com
tls.automattic.com
aleyant.com
blog.aleyant.com
books.dlogiceu.com
payments.aleyant.com
access.ourvolaris.com
aleyant.com
access.ourvolaris.com
aleyant.com
books.ksedpainting.com
aleyant.com
aleyant.com
books.nephosit.com
aleyant.com
aleyant.com
blog.aleyant.com
aleyant.com
aleyant.com
*.aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
books.newhorizonnetwork.net
aleyant.com
aleyant.com
*.aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
blog.aleyant.com
aleyant.com
aleyant.com
aleyant.com
accounts.recstra.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
access.ourvolaris.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
access.ourvolaris.com
blog.aleyant.com
webext.ourvolaris.com
blog.aleyant.com
aleyant.com
access.ourvolaris.com
aleyant.com
access.ourvolaris.com
aleyant.com
aleyant.com
client.sv3nska.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
books.ksedpainting.com
tls.automattic.com
aleyant.com
payments.aleyant.com
aleyant.com
clients.nevron360.com
aleyant.com
access.ourvolaris.com
clients.thatcherswineconsulting.com
payments.aleyant.com
aleyant.com
client.sv3nska.com
webext.ourvolaris.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
aleyant.com
payments.aleyant.com
aleyant.com
client.sv3nska.com
tls.automattic.com
blog.aleyant.com
aleyant.com
access.ourvolaris.com
*.aleyant.com
*.aleyant.com
aleyant.com
aleyant.com
books.ksedpainting.com
aleyant.com
aleyant.com
aleyant.com
tls.automattic.com
aleyant.com
blog.aleyant.com
books.dlogiceu.com
payments.aleyant.com
access.ourvolaris.com
aleyant.com
access.ourvolaris.com
aleyant.com
books.ksedpainting.com
aleyant.com
aleyant.com
books.nephosit.com
aleyant.com
aleyant.com
blog.aleyant.com
aleyant.com
aleyant.com
*.aleyant.com
Certificate
The complete raw certificate details for aleyant.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGTCCBQGgAwIBAgISA7PEZSnGdFUJm3FHMwYiVHJXMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTgwODM4NDlaFw0x OTEwMTYwODM4NDlaMBYxFDASBgNVBAMTC2FsZXlhbnQuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGYgCXqoCoLHEcjyBXV/K4ugq1mIIjHlU/sj yD6MuUvkGya9NZ/KpEIn20ME2OPmFKGEq6vOKVKeNME7qq2UctAd2axX5/6Z3ERf wph/7yNCCc+pIUHfxC6yAI2jSI+I5JFdQq/yiC64GUY7eOfJtjmBQByw7oc19KEY JnNhSJbzjiJN4Nmc2dLE8itUo3S/7tptIHKLv6iUSiepiq6vmDqhCXZ7V2NgnARv UfuYybMRXhxzfVnpLDMNp5kFH/BbcSzVpWGBWoRe9bacPcs99fQ+AXpP2YmDMqWp 9K6fWrgSzrV5AbeId1JRm2RMK8GsACTEpzxa3zospJtgnzIFnwIDAQABo4IDKzCC AycwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTtlFjbtONaD44HcOBJoaqgysu9EzAf BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv MIHgBgNVHREEgdgwgdWCC2FsZXlhbnQuY29tghhjb2xvcnByb2R1cGUuYWxleWFu dC5jb22CGWVuZ2xpc2hmYW1pbHkuYWxleWFudC5jb22CD3d3dy5hbGV5YW50LmNv bYIcd3d3LmNvbG9ycHJvZHVwZS5hbGV5YW50LmNvbYIdd3d3LmVuZ2xpc2hmYW1p bHkuYWxleWFudC5jb22CFXd3dy5ub2RlMS5hbGV5YW50LmNvbYIVd3d3Lm5vZGUy LmFsZXlhbnQuY29tghV3d3cubm9kZTMuYWxleWFudC5jb20wTAYDVR0gBEUwQzAI BgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nw cy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBvU3as MfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWwEctRDAAAEAwBHMEUCICbR lUutlX+8qhwDJQQrmEqQp8U23S8sUyYdMsaF8HPBAiEAs7M/bw6ZbNDiEbgy3ssh spPguBO/Q8ja+uchHYCEiHoAdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdo VEvYjQAAAWwEctNRAAAEAwBHMEUCIQDK4lQjf+U9jrToVuVKLCLSzCQTxckidFME EREFTUXPiwIgFpd9lINudERf6qT4sI6PgzZUooqoQBKZjRhsSRYmih4wDQYJKoZI hvcNAQELBQADggEBAFO7AJ71WiF1gh3m+XSD0O7YdyH3KofrcapPK8N86th64Qgj L4OgM+svGfVLXgbx/ewF0SnozebAxuFM5ttt7mzMXy6fC9/tJcqPa5RdDjRJT02H JQgcpyQuJ4Rznl/5YTU23FzsIR/yOOCVroprJZdBbHPjbEiSr3SXO9YY51k3tEAT Lk8vB7+YTlM3FHYRjj1oKcxSH9AiRdaEIfOY4rsciKzxC6sPYvpd3cJg52mKrR6s gFFdEvC00eSy4EjLdbLKXhD/Ewk4JE8qfjBxHxPFcwEagOt6f9uiNDnMcNj8O/33 pZRTCK2gCZ5z3Wi/W0O+Yv0/SuCvEiEf6lwieEk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGYgCXqoCoLHEcjyBXV/ K4ugq1mIIjHlU/sjyD6MuUvkGya9NZ/KpEIn20ME2OPmFKGEq6vOKVKeNME7qq2U ctAd2axX5/6Z3ERfwph/7yNCCc+pIUHfxC6yAI2jSI+I5JFdQq/yiC64GUY7eOfJ tjmBQByw7oc19KEYJnNhSJbzjiJN4Nmc2dLE8itUo3S/7tptIHKLv6iUSiepiq6v mDqhCXZ7V2NgnARvUfuYybMRXhxzfVnpLDMNp5kFH/BbcSzVpWGBWoRe9bacPcs9 9fQ+AXpP2YmDMqWp9K6fWrgSzrV5AbeId1JRm2RMK8GsACTEpzxa3zospJtgnzIF nwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 322508455430587253421240856724842483053143 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 08:38:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 08:38:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aleyant.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24288114339240155184259166000653415519959049974359021666258854977832932615256755454955981958629734694996072784058432300421271076808097378390980306672393584461614846587748173900479811935625436294510486770273085500312731143612646182063163748479971461880185898600751932459021829456667479207098284834128751736224537790216101473946786916772390484542127858798939058109885671450187290606026615317704438786116213616947357787811977206325606544267928270797565143609088339417722835381827030494165748536422557808792589689611968564929086850931447805671634446944544912189795672087574346152010049789157078854351205860863068408513951 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ed9458dbb4e35a0f8e0770e049a1aaa0cacbbd13 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (216 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aleyant.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colorprodupe.aleyant.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englishfamily.aleyant.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aleyant.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colorprodupe.aleyant.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.englishfamily.aleyant.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.node1.aleyant.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.node2.aleyant.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.node3.aleyant.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c0472d4430000040300473045022026d1954bad957fbcaa1c0325042b984a90a7c536dd2f2c53261d32c685f073c1022100b3b33f6f0e996cd0e211b832decb21b293e0b813bf43c8dafae7211d8084887a00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c0472d3510000040300473045022100cae254237fe53d8eb4e856e54a2c22d2cc2413c5c9227453041111054d45cf8b022016977d94836e74445feaa4f8b08e8f833654a28aa84012998d186c4916268a1e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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