ssl.newsmanapp.eu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:4c:b3:40:29:03:56:79:7e:58:d1:95:b6:54:8b:7f:04:9d was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ssl.newsmanapp.eu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4c:b3:40:29:03:56:79:7e:58:d1:95:b6:54:8b:7f:04:9dSerial Number (int): 287436582631359750158092858026087455589533
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 51:6b:22:c3:91:12:55:00:d5:63:93:75:23:f2:03:22:c0:6a:0e:bc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 28:fd:12:14:0d:ac:5d:08:16:b1:f2:e4:c7:ab:ec:f4:12:ed:e2:c8
Fingerprint (sha256): 0b:b7:50:b0:49:6b:0c:a1:09:21:00:ab:3d:a7:ba:12:81:0d:de:02:e3:32:48:98:ab:02:9c:21:c9:ab:00:9a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ssl.newsmanapp.eu
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ssl.newsmanapp.eu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dmonster.dazoot.ro
ssl.newsman.app
ssl.newsman.ro
ssl.newsmanapp.eu
ssl.newsman.app
ssl.newsman.ro
ssl.newsmanapp.eu
Other certificates including the domain name newsmanapp.eu
(limited to 100 certificates)
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.clintelica-feedback.eu
ssl.newsmanapp.eu
ssl.newsman.ro
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.clintelica-feedback.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsman.ro
ssl.newsmanapp.eu
ssl.newsmanapp.eu
newsmanapp.eu
cdn.clintelica-feedback.eu
cdn.newsmanapp.eu
cdn.newsmanapp.eu
cdn.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.clintelica-feedback.eu
ssl.newsmanapp.eu
ssl.newsman.ro
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.clintelica-feedback.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsman.ro
ssl.newsmanapp.eu
ssl.newsmanapp.eu
newsmanapp.eu
cdn.clintelica-feedback.eu
cdn.newsmanapp.eu
cdn.newsmanapp.eu
cdn.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
Certificate
The complete raw certificate details for ssl.newsmanapp.eu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGjjCCBXagAwIBAgISA0yzQCkDVnl+WNGVtlSLfwSdMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MDEwNjI0MTVaFw0x OTA5MjkwNjI0MTVaMBwxGjAYBgNVBAMTEXNzbC5uZXdzbWFuYXBwLmV1MIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr9JoEqct2W2RfOLpXpkEzTGxwvNY 2piNsqSFCtZkIcUAGPG4zqvMhoqb8x1wk9dve1zszVo89dzr4EsIxAnHv+XBMj3R bQQBBynW5ouTJUgoc8bDZIWYJHnPq811gksJQODCB5xAWLVbxKxvBEqMJgcPuMz1 6WbmWIujqgkKRqAHZPLdMM6c7vmf4olH+2aQcjVlpxRUpIWAwMXzLLFx792ofuNb rfDqDuRjO++mnpqiiFKls9oM/DpCbeZBRyWzdlcKkKlnME8PsMSXJnMqChpyfDtJ YkQ9Mtf0xILBVtO3cq4kPHyMBjKtusaAZzIhcxxrFpcEZg/iElCDBkDY8KOdYKRg hibyO79+ony7Tog0VvuVaJ97vp1rBWZvUQv21bgTd3s6I1xxywb/g/vPYy2TQ0m5 aRCYTf4kNv1UUZ+khLgM0S6c6VFUbseF0vUSWHSh0Ih5LWHFZGQ8lxseaFPwOv9q Fds8op0/WYHi0l4pnAnJhYlEVteEvBkJyma/yhOy6RDtiJylnepVFfmSDH+78x5F 54MUrGbkbMydk5hItYirvP94kOBMa/Slf5B9J2w4JTgGRX+DSgzsbhTb1VQ2Yn/2 iW7E7inmycAjnTnkjjAqvjVix6TAQetM8Yka0NxkTMWFZw2TjWwH+szZ5+VuSZOY vAnj1FP1qxWnffMCAwEAAaOCApowggKWMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU UWsiw5ESVQDVY5N1I/IDIsBqDrwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl 7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p bnQteDMubGV0c2VuY3J5cHQub3JnLzBRBgNVHREESjBIghJkbW9uc3Rlci5kYXpv b3Qucm+CD3NzbC5uZXdzbWFuLmFwcIIOc3NsLm5ld3NtYW4ucm+CEXNzbC5uZXdz bWFuYXBwLmV1MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYB BAHWeQIEAgSB9ASB8QDvAHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL 2I0AAAFrrGuFDAAABAMARjBEAiAtmy2Frj8J2eXaPUoBi8HpwzF7h3z6f6XP8yBc Z/mfxQIgRJ4vItaVqFwPP5qO/cUzCPSTibfgeK522hjoFjfYzM4AdgB0ftqDMa0z EJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWusa4biAAAEAwBHMEUCIHJ79dCS rZlKSjJf+WcdItOaID/WZFsZ8JolcJ7YgEVlAiEAw5Q9eFOEAinYh4UTdQz9G6xi gy2ldvqSLUSlozNz1/8wDQYJKoZIhvcNAQELBQADggEBAAaZbbEBT4W7SSCQJfHi LFlj2A6Jh585FYhgn1o8X7okvaeyNmzKAFG2o3EtIC+wCsS+r3PvF/Iy5CDyPxuS vzkpno3bSJ+sRtVVE5dvcDaamMcXpmsfo/AX3uQveBuIdwuHJPgvH/7lSv3Nltdc ep6+nuD1V6D0nhscGfChaGGN+iHggDsNIb8l2DE1b5iUves6h3Z/MRrrhFsdq/fh GMeacdBLsyYIBaeCCetowK20yu92B0O4HjhLdYl3isn59lr/IM1yfYenxPQfN4eX YqU+LtGqZ+78xXLdAMzz8PxYW4iMoqSnbG9dm2X2xNhuC1OpB3XzQVKiZc6oab6j 4TI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr9JoEqct2W2RfOLpXpkE zTGxwvNY2piNsqSFCtZkIcUAGPG4zqvMhoqb8x1wk9dve1zszVo89dzr4EsIxAnH v+XBMj3RbQQBBynW5ouTJUgoc8bDZIWYJHnPq811gksJQODCB5xAWLVbxKxvBEqM JgcPuMz16WbmWIujqgkKRqAHZPLdMM6c7vmf4olH+2aQcjVlpxRUpIWAwMXzLLFx 792ofuNbrfDqDuRjO++mnpqiiFKls9oM/DpCbeZBRyWzdlcKkKlnME8PsMSXJnMq ChpyfDtJYkQ9Mtf0xILBVtO3cq4kPHyMBjKtusaAZzIhcxxrFpcEZg/iElCDBkDY 8KOdYKRghibyO79+ony7Tog0VvuVaJ97vp1rBWZvUQv21bgTd3s6I1xxywb/g/vP Yy2TQ0m5aRCYTf4kNv1UUZ+khLgM0S6c6VFUbseF0vUSWHSh0Ih5LWHFZGQ8lxse aFPwOv9qFds8op0/WYHi0l4pnAnJhYlEVteEvBkJyma/yhOy6RDtiJylnepVFfmS DH+78x5F54MUrGbkbMydk5hItYirvP94kOBMa/Slf5B9J2w4JTgGRX+DSgzsbhTb 1VQ2Yn/2iW7E7inmycAjnTnkjjAqvjVix6TAQetM8Yka0NxkTMWFZw2TjWwH+szZ 5+VuSZOYvAnj1FP1qxWnffMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 287436582631359750158092858026087455589533 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-01 06:24:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 06:24:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.newsmanapp.eu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717290773508392524125529494954794498950547812258140679581354854809990533643156109524756221741774612034676087835625213044508963373343780486572048628495079378233098582353949056785180064215923978541430392727078973057434642610791484185834213409726879833330203577558954645601075029878711617185943776947309973560354325222706639293228190079368897113312324863521150075955269634557793647859862354385616304555369023043804386299213872863500083395464527596301715016753771925799333680778897730062262555010867540257686245735055206588786245584679439265255177660411088523658850788896010162513858915607597162829691886199824632899455894309329812435236928483926069481755909377996648312126237955637942198723985409247213482597229360720897843572380699639053656326473615058865832612416140634470844955638464687715940870923032111853265669033010516829998213092376244912997174838454973658103905268189234450607727045972106388594946628786326647028787905222465060051356662174970914818537765063956572430680964714804349726363390670462501107036991877704937189470698177676427563997192104562231602481530741040263330323781309241677352370225694548323083360198590438292040234342687074580590029410725547044287075439833213532098974487966879367838585748069223984453116198387 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 516b22c391125500d563937523f20322c06a0ebc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmonster.dazoot.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.newsman.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.newsman.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.newsmanapp.eu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bac6b850c000004030046304402202d9b2d85ae3f09d9e5da3d4a018bc1e9c3317b877cfa7fa5cff3205c67f99fc50220449e2f22d695a85c0f3f9a8efdc53308f49389b7e078ae76da18e81637d8ccce007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bac6b86e200000403004730450220727bf5d092ad994a4a325ff9671d22d39a203fd6645b19f09a25709ed8804565022100c3943d7853840229d8878513750cfd1bac62832da576fa922d44a5a33373d7ff . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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