*.gew.is
Issued by R3
About this certificate
This digital certificate with serial number 04:47:d5:ef:17:43:6f:25:ef:f9:0c:4f:8e:c3:5c:e2:1c:6d was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.gew.is
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:47:d5:ef:17:43:6f:25:ef:f9:0c:4f:8e:c3:5c:e2:1c:6dSerial Number (int): 372893558772317100869156266008530955410541
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: af:ab:ba:08:e8:8d:66:a8:43:f0:3a:19:08:ee:bd:d7:5f:3c:cd:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 30:73:14:1f:89:5b:8d:d0:59:b0:a6:4e:3f:bf:3a:0a:60:fe:2f:0d
Fingerprint (sha256): 07:0a:2f:f7:03:e3:d6:d4:ec:a7:ca:6d:11:4e:d8:ca:a6:50:43:df:ac:4b:c3:88:7e:36:4c:95:27:7a:67:12
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.gew.is
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.gew.is
Public Key Algorithm
ECDSA
Key Size
384
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.gew.is
*.gewis.nl
*.test.gewis.nl
gew.is
gewis.nl
*.gewis.nl
*.test.gewis.nl
gew.is
gewis.nl
Other certificates including the domain name gew.is
(limited to 100 certificates)
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
*.gew.is
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
sni46991.cloudflaressl.com
gewis.nl
gewis.nl
gewis.nl
sni46991.cloudflaressl.com
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
gewis.nl
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
sni.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gehack.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
gewis.nl
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
www.gewis.nl
sni46991.cloudflaressl.com
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
*.gew.is
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
sni46991.cloudflaressl.com
gewis.nl
gewis.nl
gewis.nl
sni46991.cloudflaressl.com
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
gewis.nl
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
sni.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gehack.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
gewis.nl
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
www.gewis.nl
sni46991.cloudflaressl.com
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
sni46991.cloudflaressl.com
gewis.nl
Certificate
The complete raw certificate details for *.gew.is in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEqjCCA5KgAwIBAgISBEfV7xdDbyXv+QxPjsNc4hxtMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA0MDgxNjA4NTlaFw0yMzA3MDcxNjA4NThaMBMxETAPBgNVBAMM CCouZ2V3LmlzMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEPbpfrpNilHdAw9yVKmKn LsSbW+8y7jC8rZHD7NxG9QKmnxC+7ZLMvSTeCe1DWD8zka17IrP1SHOCWSHf1NHU C4cdXHE18xxK5VA9GteI4NgZkB7VBAKrm74zvDC/KrIio4IChTCCAoEwDgYDVR0P AQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBSvq7oI6I1mqEPwOhkI7r3XXzzNCjAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzBCBgNVHREEOzA5gggqLmdldy5pc4IKKi5nZXdpcy5ubIIP Ki50ZXN0Lmdld2lzLm5sggZnZXcuaXOCCGdld2lzLm5sMEwGA1UdIARFMEMwCAYG Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu bGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAtz77JN+c Tbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGHYde3MwAABAMARjBEAiBVmqtD QpKaUV67xSii7CjpTrsW83AwE28x0mSgo6tzCAIgLN/QfPDP04A+HoBPCtgGZ8h1 fsC4PUzOyf+CZbO/rWIAdwB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1Lr UgAAAYdh17k9AAAEAwBIMEYCIQCCr32AOANzAW0/CofflbnmZoTcuPAM5l9BPyH3 GiQL6QIhALMAhIxjvQLIxFwa6s/1rmX91Mx/W7FBNdSuDOB6B9YwMBEGCCsGAQUF BwEYBAUwAwIBBTANBgkqhkiG9w0BAQsFAAOCAQEAl68n6yyhuj8fmHFfcfhnGROw j1+/8GqPAujBJ6byLevc+Peu9RjywG0+2YizkBIZhvqpyXONlpElVwzs59qmGhJ5 XxdHlwFUQG8bhNbVF5Iclc6pUFgBW1UarTeHSmhHD4h4Scbwk47NPbuB8ImwhW48 dvMDJvT6glp/EBbQARmMDAywUoFri25uYwEF9/ZkDWVIXZfdx4WqKVTcT2pIvQQl FfCVmhY35Z+nYMyCH2jFlPM/cMqnEEEngYd13mTg5c4ozCbg+BHW45eWbLoRuDqy ogmeTYRttQdDueYKrC2LNFh3te12lWz4/H44oXmQq81yV9QMOWpGFxlCRjixXA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEPbpfrpNilHdAw9yVKmKnLsSbW+8y7jC8 rZHD7NxG9QKmnxC+7ZLMvSTeCe1DWD8zka17IrP1SHOCWSHf1NHUC4cdXHE18xxK 5VA9GteI4NgZkB7VBAKrm74zvDC/KrIi -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 372893558772317100869156266008530955410541 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-08 16:08:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 16:08:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gew.is' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.132.0.34 (secp384r1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (776 bits) 00043dba5fae9362947740c3dc952a62a72ec49b5bef32ee30bcad91c3ecdc46f502a69f10beed92ccbd24de09ed43583f3391ad7b22b3f54873825921dfd4d1d40b871d5c7135f31c4ae5503d1ad788e0d819901ed50402ab9bbe33bc30bf2ab222 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) afabba08e88d66a843f03a1908eebdd75f3ccd0a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gew.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gewis.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.gewis.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gew.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewis.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018761d7b73300000403004630440220559aab4342929a515ebbc528a2ec28e94ebb16f37030136f31d264a0a3ab730802202cdfd07cf0cfd3803e1e804f0ad80667c8757ec0b83d4ccec9ff8265b3bfad620077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018761d7b93d000004030048304602210082af7d80380373016d3f0a87df95b9e66684dcb8f00ce65f413f21f71a240be9022100b300848c63bd02c8c45c1aeacff5ae65fdd4cc7f5bb14135d4ae0ce07a07d630 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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