visa.cefim.eu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b0:37:56:6c:57:2d:8d:53:bb:68:ca:97:e2:22:76:44:12 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=visa.cefim.eu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b0:37:56:6c:57:2d:8d:53:bb:68:ca:97:e2:22:76:44:12Serial Number (int): 321300110648071098890128832009023610307602
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 24:c7:5a:3a:5d:3e:f9:78:7d:4f:1c:eb:1b:56:32:e3:fc:c2:ea:d9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 58:4b:88:30:7b:9b:e5:e2:7a:5d:63:2f:f6:20:87:76:db:70:c8:91
Fingerprint (sha256): 0f:8a:76:15:75:c5:20:af:ff:d8:b5:59:fa:e1:6b:5e:92:ae:94:11:ee:07:3b:ea:d2:33:64:c2:7b:a8:16:00
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate visa.cefim.eu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for visa.cefim.eu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
visa.cefim.eu
Other certificates including the domain name cefim.eu
(limited to 100 certificates)
support.tadiplus.de
supporto.cgshop.it
mysupport.gauri.com
desk.ascent-makler.de
desk.ascent-makler.de
cefim.eu
support.edclass.com
ifragasatt.support.automat-it.io
technical.subrosagroup.co.uk
campus.cefim.eu
service.werobot.de
support.e4p-shipper.easy4pro.com
visa.cefim.eu
visa.cefim.eu
www3.cefim.eu
desk.ascent-makler.de
desk.ascent-makler.de
desk.ascent-makler.de
cefim.eu
support.kleeberg.studio
intra.cefim.eu
support.flylumo.co.uk
intra.cefim.eu
campus.cefim.eu
help.rjcortel.co.uk
cefim.eu
support.kleeberg.studio
servicedesk.atraxo.com
brillplace.zephyrcomplete.com
portal.sbusinesslondon.ac.uk
ifragasatt.support.automat-it.io
desk.ascent-makler.de
desk.ascent-makler.de
glpi.cefim.eu
welcome.cefim.eu
servicedesk.atraxo.com
desk.ascent-makler.de
campus.cefim.eu
support.cefim.eu
support.oddly.digital
welcome.cefim.eu
support.candjapparel.co.uk
supporto.cgshop.it
campus.cefim.eu
cefim.eu
desk.ascent-makler.de
brillplace.zephyrcomplete.com
forms.wimenetwork.com
support.edclass.com
desk.ascent-makler.de
glpi.cefim.eu
assistenza.spaziopromozionale.it
support.kleeberg.studio
visa.cefim.eu
campus.cefim.eu
help.simplylearn.com
cefim.eu
welcome.cefim.eu
support.tadiplus.de
help.rjcortel.co.uk
ithelpdesk.heart-england.co.uk
campus.cefim.eu
assistenza.spaziopromozionale.it
welcome.cefim.eu
mysupport.gauri.com
cefim.eu
visa.cefim.eu
job.cefim.eu
propertymaintenance.ssphealth.com
portal.sbusinesslondon.ac.uk
portal.sbusinesslondon.ac.uk
cefim.eu
termin.markustebel.de
cefim.eu
desk.ascent-makler.de
visa.cefim.eu
brillplace.zephyrcomplete.com
visa.cefim.eu
desk.ascent-makler.de
support.unique-it.at
welcome.cefim.eu
visa.cefim.eu
support.candjapparel.co.uk
support.unique-it.at
desk.ascent-makler.de
propertymaintenance.ssphealth.com
help.rjcortel.co.uk
welcome.cefim.eu
welcome.cefim.eu
intra.cefim.eu
campus.cefim.eu
support.netmechanics.gr
mysupport.gauri.com
welcome.cefim.eu
support.polikatikia.gr
cefim.eu
cefim.eu
cefim.eu
support.tadiplus.de
visa.cefim.eu
supporto.cgshop.it
mysupport.gauri.com
desk.ascent-makler.de
desk.ascent-makler.de
cefim.eu
support.edclass.com
ifragasatt.support.automat-it.io
technical.subrosagroup.co.uk
campus.cefim.eu
service.werobot.de
support.e4p-shipper.easy4pro.com
visa.cefim.eu
visa.cefim.eu
www3.cefim.eu
desk.ascent-makler.de
desk.ascent-makler.de
desk.ascent-makler.de
cefim.eu
support.kleeberg.studio
intra.cefim.eu
support.flylumo.co.uk
intra.cefim.eu
campus.cefim.eu
help.rjcortel.co.uk
cefim.eu
support.kleeberg.studio
servicedesk.atraxo.com
brillplace.zephyrcomplete.com
portal.sbusinesslondon.ac.uk
ifragasatt.support.automat-it.io
desk.ascent-makler.de
desk.ascent-makler.de
glpi.cefim.eu
welcome.cefim.eu
servicedesk.atraxo.com
desk.ascent-makler.de
campus.cefim.eu
support.cefim.eu
support.oddly.digital
welcome.cefim.eu
support.candjapparel.co.uk
supporto.cgshop.it
campus.cefim.eu
cefim.eu
desk.ascent-makler.de
brillplace.zephyrcomplete.com
forms.wimenetwork.com
support.edclass.com
desk.ascent-makler.de
glpi.cefim.eu
assistenza.spaziopromozionale.it
support.kleeberg.studio
visa.cefim.eu
campus.cefim.eu
help.simplylearn.com
cefim.eu
welcome.cefim.eu
support.tadiplus.de
help.rjcortel.co.uk
ithelpdesk.heart-england.co.uk
campus.cefim.eu
assistenza.spaziopromozionale.it
welcome.cefim.eu
mysupport.gauri.com
cefim.eu
visa.cefim.eu
job.cefim.eu
propertymaintenance.ssphealth.com
portal.sbusinesslondon.ac.uk
portal.sbusinesslondon.ac.uk
cefim.eu
termin.markustebel.de
cefim.eu
desk.ascent-makler.de
visa.cefim.eu
brillplace.zephyrcomplete.com
visa.cefim.eu
desk.ascent-makler.de
support.unique-it.at
welcome.cefim.eu
visa.cefim.eu
support.candjapparel.co.uk
support.unique-it.at
desk.ascent-makler.de
propertymaintenance.ssphealth.com
help.rjcortel.co.uk
welcome.cefim.eu
welcome.cefim.eu
intra.cefim.eu
campus.cefim.eu
support.netmechanics.gr
mysupport.gauri.com
welcome.cefim.eu
support.polikatikia.gr
cefim.eu
cefim.eu
cefim.eu
support.tadiplus.de
visa.cefim.eu
Certificate
The complete raw certificate details for visa.cefim.eu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISA7A3VmxXLY1Tu2jKl+IidkQSMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDQxNDIxMzhaFw0y MDA2MDIxNDIxMzhaMBgxFjAUBgNVBAMTDXZpc2EuY2VmaW0uZXUwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWHBntW+kJmRGqVspKwU4zLpolzAXkxYD4 4Q9s/5E0yVyJS99S9Rvo1NYQamikFds4DET3Me95Hia6dIVs6CfC34KNlUOt7Drh 083U/dh0OtqMsQhWhjcUnyt+ZlEB+azqgIaF/P4JW1sAgAvNxhCRkombUsqH5fJv KqUAEKMHqkbVM+6nnnjEObXcleL4sFQ61BD4unqbR7NBLIzJ7nzrAhb5QB/Y3+kC 1MdfInbUWV3y3CQdyD+hQwjdsNYNElJIfLH8Ql4EelhbaNzCXyMYCVsiuVZSh09Q UN4719UTB84+1rJiv6mr2O6tryCXUvYv7YpGROy+qmBlejBW4A7jAgMBAAGjggJh MIICXTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCTHWjpdPvl4fU8c6xtWMuP8wurZ MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wGAYDVR0RBBEwD4INdmlzYS5jZWZpbS5ldTBMBgNVHSAERTBDMAgGBmeBDAEC ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl bmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AF6nc/nfVsDntTZI fdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABcKYjVd4AAAQDAEcwRQIgLosa7OF+5bBy Xh9dsQ/fitD1I+UoF1caCNnTXhYJZl0CIQCLs22nupMyb/BSSZZhYEzrRLfH9nE0 Pbr9DwjDEToBlgB1ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAAB cKYjVccAAAQDAEYwRAIgcRrJt4KO0P7pkAmVbUQSk5L9mdcSukifiq8ayNms83oC IHxyGWglygov7HZwd6mECNCpQVbXaZ8YR1rgvLdKmlXDMA0GCSqGSIb3DQEBCwUA A4IBAQAaQU9voUCwgvm9S+y0R+0PxO/Cl72Z1hQy6tqgYK/vN3L7qwzb8S7wB11V 1CIY5tHIG6z7xfjrjNlv/Ba+3B528GG26Z0Xmb+pKxw9xjybp+95CC0MZFW3zZve 6SkONxNWJNmSo9fZuAR2/JB6Xn33XB5dPSWtavLl6rTf0GibnJ0VxnrOQV7dbwty G9zGTnz5Q7BuVEpP02xmlDrIEVQuThXeFju1An4mQ9IoAgQQ55QHrFuJr/1QsNil okDtFzpkZF+tEnFUN67rpt7tfLRJ7a358VhCyVAd7jtpCWR0eHF/N7yMdBftouTU EKp36sA0n0X0FQicbfEDreukIAaA -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhwZ7VvpCZkRqlbKSsFO My6aJcwF5MWA+OEPbP+RNMlciUvfUvUb6NTWEGpopBXbOAxE9zHveR4munSFbOgn wt+CjZVDrew64dPN1P3YdDrajLEIVoY3FJ8rfmZRAfms6oCGhfz+CVtbAIALzcYQ kZKJm1LKh+XybyqlABCjB6pG1TPup554xDm13JXi+LBUOtQQ+Lp6m0ezQSyMye58 6wIW+UAf2N/pAtTHXyJ21Fld8twkHcg/oUMI3bDWDRJSSHyx/EJeBHpYW2jcwl8j GAlbIrlWUodPUFDeO9fVEwfOPtayYr+pq9jura8gl1L2L+2KRkTsvqpgZXowVuAO 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321300110648071098890128832009023610307602 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 14:21:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 14:21:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'visa.cefim.eu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18949603001587844053609362827587381447946291414399126641618466352681332914365255433801147953586682832295583168706073685741768137164757143959129656538957170883307426160680333779056198796729261810675765835509791299550226831917569793884514259722676140243575794662296062337789594087552433880091907737862023042052912864632015552576989916047265012162415701977877795623236745228944271354583716758230677909120603403711787485906588962103668599991647011678080371806793694402791613553948975902517140851542270299895939690728324503621369634526205147403592961454204004425502420054830370521222845679181857621206929203855757768920803 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 24c75a3a5d3ef9787d4f1ceb1b5632e3fcc2ead9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visa.cefim.eu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170a62355de000004030047304502202e8b1aece17ee5b0725e1f5db10fdf8ad0f523e52817571a08d9d35e1609665d0221008bb36da7ba93326ff052499661604ceb44b7c7f671343dbafd0f08c3113a0196007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a62355c700000403004630440220711ac9b7828ed0fee99009956d44129392fd99d712ba489f8aaf1ac8d9acf37a02207c72196825ca0a2fec767077a98408d0a94156d7699f18475ae0bcb74a9a55c3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001a414f6fa140b082f9bd4becb447ed0fc4efc297bd99d61432eadaa060afef3772fbab0cdbf12ef0075d55d42218e6d1c81bacfbc5f8eb8cd96ffc16bedc1e76f061b6e99d1799bfa92b1c3dc63c9ba7ef79082d0c6455b7cd9bdee9290e37135624d992a3d7d9b80476fc907a5e7df75c1e5d3d25ad6af2e5eab4dfd0689b9c9d15c67ace415edd6f0b721bdcc64e7cf943b06e544a4fd36c66943ac811542e4e15de163bb5027e2643d228020410e79407ac5b89affd50b0d8a5a240ed173a64645fad12715437aeeba6deed7cb449edadf9f15842c9501dee3b6909647478717f37bc8c7417eda2e4d410aa77eac0349f45f415089c6df103adeba4200680