planfric.fr
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:95:0a:1d:6f:51:2f:2f:57:7a:3e:e1:c5:c5:d7:b1:eb:11 was issued on by Let's Encrypt.
With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=planfric.fr
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:95:0a:1d:6f:51:2f:2f:57:7a:3e:e1:c5:c5:d7:b1:eb:11Serial Number (int): 312052375580846867861711651885756357667601
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 80:9d:87:3d:63:b0:64:cb:55:ba:7e:df:7d:57:7a:1f:62:e9:a5:59
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b2:cb:81:d0:70:48:18:d7:04:ce:83:2b:e7:3b:2d:8e:f2:b2:78:9c
Fingerprint (sha256): 06:19:8c:68:d3:82:c6:27:3f:30:b4:58:91:f9:c0:46:e1:42:8c:af:97:d6:4c:f5:72:b5:b1:98:40:f9:f4:7c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate planfric.fr
22
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for planfric.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
6uillau.me
debloc-portable.com
douche-senior.com
incontracougar.it
manger-a-strasbourg.com
planfric.fr
portejarretelles.net
quelsitederencontre.com
sasenligne.com
sosenergie.fr
sperme.org
toprencontre.net
www.6uillau.me
www.debloc-portable.com
www.douche-senior.com
www.manger-a-strasbourg.com
www.portejarretelles.net
www.quelsitederencontre.com
www.sasenligne.com
www.sosenergie.fr
www.sperme.org
www.toprencontre.net
debloc-portable.com
douche-senior.com
incontracougar.it
manger-a-strasbourg.com
planfric.fr
portejarretelles.net
quelsitederencontre.com
sasenligne.com
sosenergie.fr
sperme.org
toprencontre.net
www.6uillau.me
www.debloc-portable.com
www.douche-senior.com
www.manger-a-strasbourg.com
www.portejarretelles.net
www.quelsitederencontre.com
www.sasenligne.com
www.sosenergie.fr
www.sperme.org
www.toprencontre.net
Other certificates including the domain name planfric.fr
(limited to 100 certificates)
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
www.quelsitederencontre.com
planfric.fr
planfric.fr
planfric.fr
manger-a-strasbourg.com
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
greekrecipe.org
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
www.quelsitederencontre.com
planfric.fr
planfric.fr
planfric.fr
manger-a-strasbourg.com
planfric.fr
planfric.fr
planfric.fr
planfric.fr
planfric.fr
greekrecipe.org
planfric.fr
planfric.fr
planfric.fr
planfric.fr
Certificate
The complete raw certificate details for planfric.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHATCCBemgAwIBAgISA5UKHW9RLy9Xej7hxcXXsesRMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTQxNDQ0NTJaFw0x OTEyMTMxNDQ0NTJaMBYxFDASBgNVBAMTC3BsYW5mcmljLmZyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHV0O/riDYWbESyxqBVSOZW+hfKPO39J0Fgd hZssR8+LcbiO/rS+ecnWibudWzPlriAszOkv6SZ8YQu7jbU3GjBVY4wsn8G7ELcd QTT3HzTZoSKUQWBFZWMuHncLyo79LuZbC9d1VmZqBwCg6sYzBoi35t3HEdsKKMsJ m2oRaT1A720b8EmqpQEPd2Yy3jKf18Q6FdtdRq6aKXYcuDwi72N6WFJo1Mmwa8IR NMj4HrhErYFe386Fuh/m3RxuGz077YvtswIkKz2ia3pquE8VIsaznw/3mceqdfhG DlTAPh9KzP7Kl8G3V/W5NosWXXbdsX3GYxiKXlXiQ7RyTAfUQQIDAQABo4IEEzCC BA8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSAnYc9Y7Bky1W6ft99V3ofYumlWTAf BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv MIIBxwYDVR0RBIIBvjCCAbqCCjZ1aWxsYXUubWWCE2RlYmxvYy1wb3J0YWJsZS5j b22CEWRvdWNoZS1zZW5pb3IuY29tghFpbmNvbnRyYWNvdWdhci5pdIIXbWFuZ2Vy LWEtc3RyYXNib3VyZy5jb22CC3BsYW5mcmljLmZyghRwb3J0ZWphcnJldGVsbGVz Lm5ldIIXcXVlbHNpdGVkZXJlbmNvbnRyZS5jb22CDnNhc2VubGlnbmUuY29tgg1z b3NlbmVyZ2llLmZyggpzcGVybWUub3JnghB0b3ByZW5jb250cmUubmV0gg53d3cu NnVpbGxhdS5tZYIXd3d3LmRlYmxvYy1wb3J0YWJsZS5jb22CFXd3dy5kb3VjaGUt c2VuaW9yLmNvbYIbd3d3Lm1hbmdlci1hLXN0cmFzYm91cmcuY29tghh3d3cucG9y dGVqYXJyZXRlbGxlcy5uZXSCG3d3dy5xdWVsc2l0ZWRlcmVuY29udHJlLmNvbYIS d3d3LnNhc2VubGlnbmUuY29tghF3d3cuc29zZW5lcmdpZS5mcoIOd3d3LnNwZXJt ZS5vcmeCFHd3dy50b3ByZW5jb250cmUubmV0MEwGA1UdIARFMEMwCAYGZ4EMAQIB MDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2Vu Y3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAdH7agzGtMxCRIZzO JU9CcMK//V5CIAjGNzV55hB7zFYAAAFtMHLMNgAABAMARzBFAiEAmVjWkeu1OUiy Thm7XCXNFoAaGyp38N6GnpJSVn0oPu0CICFAzq/CguC+uRHiG4qdCGXzWMP1Vw9d YVj1TkpRzN/QAHYAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFt MHLMKwAABAMARzBFAiAx+c3WQrjZbld0IPsgkTj4y/VLwfRzfBhcN2fdHHctlAIh AKuPr8hxUkv8edYEIal8HPHQudKq5tDmvRHYnh3FzF/zMA0GCSqGSIb3DQEBCwUA A4IBAQB0WqSTOItVH7nkLiGQ5mW2L1z4WDkooXNOiUUhAs/gTRHLPX345nFQVH+s IDBYp8Y18nFpKWGz62EQrEhrLn+WYniNYRtBYWDbwKmBiwg+DuS/ohTPYVBpNeRR U43bxwgRb7DTc6Q6LntV8IaqHAxc81tLEXGbPyqCPccrulYl9zgS6lmqXthpsq/+ BX+S9TV80lSOS0+61xSf7X5kb3xiIqREt2r4YUHfEtsrn3V8Eg1Vr9oKg/ibXGGA Bzuyplbj/8knD7FlCgP9Y2L/rsDQ0uOW6Sbr7gQrSbejVoM3y+HuBidS96lw4JkS 5gZUwME10tsBjo1EhH5QihSom+BL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHV0O/riDYWbESyxqBVS OZW+hfKPO39J0FgdhZssR8+LcbiO/rS+ecnWibudWzPlriAszOkv6SZ8YQu7jbU3 GjBVY4wsn8G7ELcdQTT3HzTZoSKUQWBFZWMuHncLyo79LuZbC9d1VmZqBwCg6sYz Boi35t3HEdsKKMsJm2oRaT1A720b8EmqpQEPd2Yy3jKf18Q6FdtdRq6aKXYcuDwi 72N6WFJo1Mmwa8IRNMj4HrhErYFe386Fuh/m3RxuGz077YvtswIkKz2ia3pquE8V Isaznw/3mceqdfhGDlTAPh9KzP7Kl8G3V/W5NosWXXbdsX3GYxiKXlXiQ7RyTAfU QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 312052375580846867861711651885756357667601 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-14 14:44:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-13 14:44:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'planfric.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23790720079513882200097377784965114961557374329089603691557847976942602635040960350782637633217785355413118525140186639479727980895934997450761913255931162159980708442071235223640640446038350714542453811513355113229988632420154893603602330077933654991575143399849788262579867061465326790840304053403587995215036769815043652365761949429603901342816463985623045121772002661860001138125890275320928641534852329050609296261997169912532455208292029270670096802399340414619990990407975061159956213713162402821281856451857586591014144725167517832429618353592291043845234534340760889366323315018270980010082878702533554459713 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 809d873d63b064cb55ba7edf7d577a1f62e9a559 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (446 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6uillau.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debloc-portable.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'douche-senior.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incontracougar.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manger-a-strasbourg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planfric.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portejarretelles.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quelsitederencontre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasenligne.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosenergie.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sperme.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toprencontre.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.6uillau.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.debloc-portable.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douche-senior.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manger-a-strasbourg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portejarretelles.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quelsitederencontre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasenligne.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosenergie.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sperme.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toprencontre.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d3072cc3600000403004730450221009958d691ebb53948b24e19bb5c25cd16801a1b2a77f0de869e9252567d283eed02202140ceafc282e0beb911e21b8a9d0865f358c3f5570f5d6158f54e4a51ccdfd000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d3072cc2b0000040300473045022031f9cdd642b8d96e577420fb209138f8cbf54bc1f4737c185c3767dd1c772d94022100ab8fafc871524bfc79d60421a97c1cf1d0b9d2aae6d0e6bd11d89e1dc5cc5ff3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00745aa493388b551fb9e42e2190e665b62f5cf8583928a1734e89452102cfe04d11cb3d7df8e67150547fac203058a7c635f271692961b3eb6110ac486b2e7f9662788d611b416160dbc0a9818b083e0ee4bfa214cf61506935e451538ddbc708116fb0d373a43a2e7b55f086aa1c0c5cf35b4b11719b3f2a823dc72bba5625f73812ea59aa5ed869b2affe057f92f5357cd2548e4b4fbad7149fed7e646f7c6222a444b76af86141df12db2b9f757c120d55afda0a83f89b5c6180073bb2a656e3ffc9270fb1650a03fd6362ffaec0d0d2e396e926ebee042b49b7a3568337cbe1ee062752f7a970e09912e60654c0c135d2db018e8d44847e508a14a89be04b