s2b.ugent.be
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:10:a3:79:9b:f5:a7:2d:78:dd:37:9a:6b:1e:dd:a1:07:e1 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=s2b.ugent.be
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:10:a3:79:9b:f5:a7:2d:78:dd:37:9a:6b:1e:dd:a1:07:e1Serial Number (int): 266998671260484706707782505691665974495201
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f7:4a:c1:d3:0e:03:6f:85:fb:6a:61:25:1d:4a:21:aa:7c:0c:08:7c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 91:11:8b:d9:44:b3:4e:ae:33:78:63:9f:b8:ea:6a:32:8a:5e:82:11
Fingerprint (sha256): 03:86:f2:10:28:60:04:f3:4e:68:5c:2e:65:85:f6:45:d4:b2:73:c7:54:20:fc:bf:01:d5:cf:7b:8b:24:82:ea
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate s2b.ugent.be
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for s2b.ugent.be
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
s2b.ugent.be
Other certificates including the domain name ugent.be
(limited to 100 certificates)
uchido.ugent.be
neruda0.ugent.be
we12s008.ugent.be
jira-student.atlantis.ugent.be
bioit2.irc.ugent.be
openuniv.ugent.be
www.quantum.ugent.be
www.miam.ugent.be
dresearch.ugent.be
diwdev02.ugent.be
idlab.ugent.be
otrsdev3.ugent.be
oauth.ugent.be
tropius2.ugent.be
lcp.elis.ugent.be
cp0581.irc.ugent.be
www.payment.ugent.be
qresearch.ugent.be
ssophp.ugent.be
schamper.be
laxness.ugent.be
vtctools.ugent.be
ingest.prd.opencast.ugent.be
qexr.ugent.be
accounting.ugent.be
login.ugent.be
www.gemane3.ugent.be
sharelatex.elis.ugent.be
www.insep.ugent.be
www.tussenblokenblad.ugent.be
bumps.ugent.be
plato.helpdesk.ugent.be
www.yaw.ugent.be
www.corpusvgt.ugent.be
plan.opencast.ugent.be
eyaml.qas.rad.ugent.be
paoweb.ugent.be
naos.ugent.be
ewp.ugent.be
www.omeka.ugent.be
gaspar.ugent.be
imanema.ugent.be
getrecruited.ugent.be
sapv11.aps.ugent.be
www.ictoprd.ugent.be
e10kdom2.aps.ugent.be
metals.ugent.be
fkserv.ugent.be
mssmall.ugent.be
*.psb.ugent.be
eqtis.ugent.be
sapv03.aps.ugent.be
www.waves.intec.ugent.be
authorship.ugent.be
adfspoc.ugent.be
www.dictwiki.ugent.be
adt1fs.ugent.be
wina.ugent.be
www.songstudies.ugent.be
alicere.ugent.be
straling01.ugent.be
jusprd.aps.ugent.be
prd.oasis.ugent.be
grinhog.ugent.be
nagila.ugent.be
qa.opencast.ugent.be
qas.oasis.ugent.be
kobobw26.ugent.be
www.evalisa.ugent.be
www.vrijstellingen.ugent.be
ai.ugent.be
ipilxd2.ugent.be
s2b.ugent.be
www.grieks.ugent.be
gift.ugent.be
geoviz-proto.ugent.be
disbiome.ugent.be
yaw.ugent.be
zephyr.UGent.be
www.sms2018.ugent.be
iomics.ugent.be
athenax.ugent.be
remosa.ugent.be
tokyoap2.ugent.be
cepec.ugent.be
www.linghentiandoctorials.ugent.be
we12s008.ugent.be
tgismo.ugent.be
epurse.ugent.be
ihodp-prd.ugent.be
www.livesintranslation.ugent.be
redcap1.ugent.be
www.lct.ugent.be
uforatest.ugent.be
www.welkom.ugent.be
dev.dbbe.ugent.be
wachtwoordservice-tst.ugent.be
qoasis.ugent.be
www.scripts.ugent.be
www.tic.ugent.be
neruda0.ugent.be
we12s008.ugent.be
jira-student.atlantis.ugent.be
bioit2.irc.ugent.be
openuniv.ugent.be
www.quantum.ugent.be
www.miam.ugent.be
dresearch.ugent.be
diwdev02.ugent.be
idlab.ugent.be
otrsdev3.ugent.be
oauth.ugent.be
tropius2.ugent.be
lcp.elis.ugent.be
cp0581.irc.ugent.be
www.payment.ugent.be
qresearch.ugent.be
ssophp.ugent.be
schamper.be
laxness.ugent.be
vtctools.ugent.be
ingest.prd.opencast.ugent.be
qexr.ugent.be
accounting.ugent.be
login.ugent.be
www.gemane3.ugent.be
sharelatex.elis.ugent.be
www.insep.ugent.be
www.tussenblokenblad.ugent.be
bumps.ugent.be
plato.helpdesk.ugent.be
www.yaw.ugent.be
www.corpusvgt.ugent.be
plan.opencast.ugent.be
eyaml.qas.rad.ugent.be
paoweb.ugent.be
naos.ugent.be
ewp.ugent.be
www.omeka.ugent.be
gaspar.ugent.be
imanema.ugent.be
getrecruited.ugent.be
sapv11.aps.ugent.be
www.ictoprd.ugent.be
e10kdom2.aps.ugent.be
metals.ugent.be
fkserv.ugent.be
mssmall.ugent.be
*.psb.ugent.be
eqtis.ugent.be
sapv03.aps.ugent.be
www.waves.intec.ugent.be
authorship.ugent.be
adfspoc.ugent.be
www.dictwiki.ugent.be
adt1fs.ugent.be
wina.ugent.be
www.songstudies.ugent.be
alicere.ugent.be
straling01.ugent.be
jusprd.aps.ugent.be
prd.oasis.ugent.be
grinhog.ugent.be
nagila.ugent.be
qa.opencast.ugent.be
qas.oasis.ugent.be
kobobw26.ugent.be
www.evalisa.ugent.be
www.vrijstellingen.ugent.be
ai.ugent.be
ipilxd2.ugent.be
s2b.ugent.be
www.grieks.ugent.be
gift.ugent.be
geoviz-proto.ugent.be
disbiome.ugent.be
yaw.ugent.be
zephyr.UGent.be
www.sms2018.ugent.be
iomics.ugent.be
athenax.ugent.be
remosa.ugent.be
tokyoap2.ugent.be
cepec.ugent.be
www.linghentiandoctorials.ugent.be
we12s008.ugent.be
tgismo.ugent.be
epurse.ugent.be
ihodp-prd.ugent.be
www.livesintranslation.ugent.be
redcap1.ugent.be
www.lct.ugent.be
uforatest.ugent.be
www.welkom.ugent.be
dev.dbbe.ugent.be
wachtwoordservice-tst.ugent.be
qoasis.ugent.be
www.scripts.ugent.be
www.tic.ugent.be
Certificate
The complete raw certificate details for s2b.ugent.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISAxCjeZv1py143Teaax7doQfhMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MDIwMzAwMjBaFw0x OTA4MzEwMzAwMjBaMBcxFTATBgNVBAMTDHMyYi51Z2VudC5iZTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAKiHgcto1RdOaxxrlrAFbfnM1qV7ZQFY+fwz unvDIpyY9MbZtVJMgPQF8NkoU8yFflno6YygkP3jGXOxBDjeGzn/1pP4Vyg+eqJb rhlERMsj31EAUZUsJ99Cy2kRSZzppuM1FW33RcIIpJ/VdsafIhb7M876tImO8tgx 7CduAxq+oZxbbn3nr4SNVu9lPaiPmHbM1KAtGrMu46aiNLkuT2HaqQFQTt/MmdEV 5q6wkW0ZrjK1dkJkIVLS0G/+vzFEe4reqA4TBny9mum/1pJLGXe8k/mGW6JzSJsT ghjMZ9S0fLUqg4Bw8rEaPj67pezzWIVJgE50bN/zEqhujMYST8zjiRQ5/kCgSt4n Wf3iqxbbcrxSge6UURL7V5Bv5bbNVeOqkbB68gPCk1CyfF/xq0EY+DnwjUlWTzfv YG3u2RiO2bxGgg2Cc0BIwlnfxWp+KADN0hvyeFtgwf2TCOQmBcHo6YkGatWieetF YVKzXoMqdEd3ohfhAbSg/eWWXTwTQ3Qq3mRfSBrTv/w1w13eJLt+oVj8ddBinwpO J8yvHXIZVH5+7e/Z9JQ4mDKrDNgsVBS+g/xAHO15zSz42xW0+NKBuden4dVvD54u xSJNg5OQiWNKT6cMPM8I8CDGmJ7A9p1d+wULaYCSmTQPAIHKLf4lYwIoZZjwMDHc n0WDhPVHAgMBAAGjggJiMIICXjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPdKwdMO A2+F+2phJR1KIap8DAh8MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMczJiLnVnZW50LmJlMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx AHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFrFlhn1QAABAMA RzBFAiEA9Z5yDamTS4cc4yAMa9zT8y2tqJzGx9f33Jv8vr7uUm0CIEu2a1dE09AR QsP4n0Nyrp2ZItDE/8KHU0c5VJc93kCxAHcAKTxRllTIOWW6qlD8WAfUt2+/WHop ctykwwz05UVH9HgAAAFrFlhn+gAABAMASDBGAiEAgmkpNMv7sBHUbMK5ICC7kNBa mU99mhVRSfIDRD4YgW0CIQD+j6kzqwWrTBJ4PCP/XhTowjFhUzrOH8plAVj6Hgyx VjANBgkqhkiG9w0BAQsFAAOCAQEANCh3WJtI2jpTqjfgWDuohVgISd++AGhXHzxm 8ZmhS1zl/xWaJMZz6Id2qzG73AgZFSpzQZNE2hoiwIEUu0T1xkDX43d3wkP5szLg BTWXAWFskqlNGCLGn5Zr29wMVIWW47GwW2Kx8CAtHNsn9oMX7dCKm+GJkwdICIfu yA+u+HksyWyTN1TZxEXCkGe7K8BZwdNehAq1o7HUKhMZapotcJf9uXvooJjNwrpi WCUC9GjTj43UwnB222PjiQ9/MbvKoPGcOBAamFyCU9pRyATZ4u61A2fkCR4DXuDy Z7u1rhQZ+g/pXFgSCpP88Yb6yXqkWmJYB1ldxMeLdRG9IUuLpw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqIeBy2jVF05rHGuWsAVt +czWpXtlAVj5/DO6e8MinJj0xtm1UkyA9AXw2ShTzIV+WejpjKCQ/eMZc7EEON4b Of/Wk/hXKD56oluuGUREyyPfUQBRlSwn30LLaRFJnOmm4zUVbfdFwgikn9V2xp8i Fvszzvq0iY7y2DHsJ24DGr6hnFtufeevhI1W72U9qI+YdszUoC0asy7jpqI0uS5P YdqpAVBO38yZ0RXmrrCRbRmuMrV2QmQhUtLQb/6/MUR7it6oDhMGfL2a6b/WkksZ d7yT+YZbonNImxOCGMxn1LR8tSqDgHDysRo+Prul7PNYhUmATnRs3/MSqG6MxhJP zOOJFDn+QKBK3idZ/eKrFttyvFKB7pRREvtXkG/lts1V46qRsHryA8KTULJ8X/Gr QRj4OfCNSVZPN+9gbe7ZGI7ZvEaCDYJzQEjCWd/Fan4oAM3SG/J4W2DB/ZMI5CYF wejpiQZq1aJ560VhUrNegyp0R3eiF+EBtKD95ZZdPBNDdCreZF9IGtO//DXDXd4k u36hWPx10GKfCk4nzK8dchlUfn7t79n0lDiYMqsM2CxUFL6D/EAc7XnNLPjbFbT4 0oG516fh1W8Pni7FIk2Dk5CJY0pPpww8zwjwIMaYnsD2nV37BQtpgJKZNA8Agcot /iVjAihlmPAwMdyfRYOE9UcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 266998671260484706707782505691665974495201 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-02 03:00:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-31 03:00:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's2b.ugent.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 687539657996345996650665776583686994022635890399739833526989659686403674321798352128574133582436404514729554325185138429399409725829506049791514097050936326381041268378503541101565285853768436164734290690630535516214463524236202603247648030047196100212162395551222173512489962181299958672086775484294697761048440432282606926830088943133396289851404695093004091124777896883175144327073532674836337965226344796923170445810999995645849942734281287930536904158487084318088434851715373239876336317300341690261854729464242041305435061372895392024802310048167352081768448380252755757172143275463167856125081170662930185826874866021928992785466357094262594915262550899329348240064469656700697301833874081046653862077644439243386247241276699632580679532668508987958187431923203672117745643274698969127281967415965045940439064579072002063004720302028024471309054194878992818836787308752747425058974207746193727413869736764675192502238084665655449048129907930147135297311216230028804376420370497716192003907909813556133371229113807593975285339281134097697369415311246353608911633642527184945474221942241298283824989163416161785385038235526954996385918727292455936820887088120610746621989591088271841467620791892333014014606887698567114025923911 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f74ac1d30e036f85fb6a61251d4a21aa7c0c087c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2b.ugent.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b165867d50000040300473045022100f59e720da9934b871ce3200c6bdcd3f32dada89cc6c7d7f7dc9bfcbebeee526d02204bb66b5744d3d01142c3f89f4372ae9d9922d0c4ffc28753473954973dde40b1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b165867fa000004030048304602210082692934cbfbb011d46cc2b92020bb90d05a994f7d9a155149f203443e18816d022100fe8fa933ab05ab4c12783c23ff5e14e8c23161533ace1fca650158fa1e0cb156 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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