faturamento.bemacash.com.br
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:c4:7d:d8:5b:c8:ec:cf:a4:54:50:13:45:79:18:7f:25:f9 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=faturamento.bemacash.com.br
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c4:7d:d8:5b:c8:ec:cf:a4:54:50:13:45:79:18:7f:25:f9Serial Number (int): 328199478608997432706714633521080993523193
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a2:8d:4f:e9:c2:73:39:23:84:98:75:53:df:f3:42:88:35:2d:54:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f4:04:dc:67:c9:95:5a:a6:97:69:17:80:14:fc:df:c3:e6:99:53:98
Fingerprint (sha256): 0f:ca:36:2e:02:ea:04:60:16:55:a5:a1:8b:b5:f4:b8:3a:57:df:08:9a:fe:19:b7:bf:e9:39:fa:d7:8a:60:72
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate faturamento.bemacash.com.br
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for faturamento.bemacash.com.br
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
faturamento.bemacash.com.br
mpn-faturamento-web.azurewebsites.net
mpn-faturamento-web.azurewebsites.net
Other certificates including the domain name bemacash.com.br
(limited to 100 certificates)
info.bemacash.com.br
financeiro.bemacash.com.br
faturamento.bemacash.com.br
*.bemacash.com.br
meu.bemacash.com.br
bemacash.com.br
meu.bemacash.com.br
bemacash.com.br
info.bemacash.com.br
*.bemacash.com.br
*.meueleve.com.br
www.bemacash.com.br
financeiro.bemacash.com.br
financeiro.bemacash.com.br
bemacash.com.br
bemacash.com.br
*.bemacash.com.br
compras.bemacash.com.br
*.bemacash.com.br
cadastro.meueleve.com.br
meu.bemacash.com.br
*.meueleve.com.br
info.bemacash.com.br
blog.bemacash.com.br
*.meueleve.com.br
meu.bemacash.com.br
ordemservico.bemacash.com.br
bemacash.com.br
faturamento.bemacash.com.br
*.bemacash.com.br
meu.bemacash.com.br
blog.bemacash.com.br
*.bemacash.com.br
ordemservico.bemacash.com.br
bemacash.com.br
info.bemacash.com.br
meu.bemacash.com.br
www.bemacash.com.br
info.bemacash.com.br
*.bemacash.com.br
bemacash.com.br
www.bemacash.com.br
*.bemacash.com.br
bemacash.com.br
bemacash.com.br
info.bemacash.com.br
meu.bemacash.com.br
bemacash.com.br
bemacash.com.br
financeiro.bemacash.com.br
faturamento.bemacash.com.br
*.bemacash.com.br
meu.bemacash.com.br
bemacash.com.br
meu.bemacash.com.br
bemacash.com.br
info.bemacash.com.br
*.bemacash.com.br
*.meueleve.com.br
www.bemacash.com.br
financeiro.bemacash.com.br
financeiro.bemacash.com.br
bemacash.com.br
bemacash.com.br
*.bemacash.com.br
compras.bemacash.com.br
*.bemacash.com.br
cadastro.meueleve.com.br
meu.bemacash.com.br
*.meueleve.com.br
info.bemacash.com.br
blog.bemacash.com.br
*.meueleve.com.br
meu.bemacash.com.br
ordemservico.bemacash.com.br
bemacash.com.br
faturamento.bemacash.com.br
*.bemacash.com.br
meu.bemacash.com.br
blog.bemacash.com.br
*.bemacash.com.br
ordemservico.bemacash.com.br
bemacash.com.br
info.bemacash.com.br
meu.bemacash.com.br
www.bemacash.com.br
info.bemacash.com.br
*.bemacash.com.br
bemacash.com.br
www.bemacash.com.br
*.bemacash.com.br
bemacash.com.br
bemacash.com.br
info.bemacash.com.br
meu.bemacash.com.br
bemacash.com.br
bemacash.com.br
Certificate
The complete raw certificate details for faturamento.bemacash.com.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgISA8R92FvI7M+kVFATRXkYfyX5MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTMxMjE4NTNaFw0y MDAzMTIxMjE4NTNaMCYxJDAiBgNVBAMTG2ZhdHVyYW1lbnRvLmJlbWFjYXNoLmNv bS5icjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAIZKcOIkTOo6UxD8 uARw70/awGBb6DrErd3s5nN6R4EuNCzSHYLMrEXV88jEsZO7+A1/g4x/SUXyR4Vi NaMARLWSOjtwyJ1xcOUwrklehBrNnqN/opjSvwlMdXkjrtttax+1+gOSx0qqHfPX m3FC37MlZIWXT5ruZyVVYAYdeKYcexeMmYSlnKpSOdXc9mFabzWZrFt1kiifGOI0 tzDhSWhit4fIRzxm5jNcKYAMzCQt+zu643OVvlju9lAoyDxZKoVf+yBcolVhGNh2 okTepk+1JE/gc5npcEzCFScFwM8L1sW6h2xM5rrWJv08DhK5sFKNQR8PTE7zkmF8 AiIE5Qsp9qIQE5VQcAv2clrZaIU4dcfswnXZHjP6mNHlZ/Br33K0LCjfaNyRjNzh JOdL2E3E0noR4SSZijmPSibgS+yP6K9YMHcV+aOGv6ZET+g94MwivJZYBH4iyIEi 2LUOHPe3oCYQhGvDFnABfSbEUFUEfCiK3pEGoXwHXjonYD5PAALeu2iVHBYR9fDq ZX00O8f+IC4RHaXM5IHLB3o3QtUcBq/Ht4l8BdSLtHWM+xm/ykUdHKGo1EgzO7K+ Iwaay0tekTM17R7uqI4MXyvtAxhKRSlbMrDfUJfs7qHnTlkb7JuSluwd2+4UDJAO n9jLO8DitxDdyEkklWzM6mCg26z3AgMBAAGjggKXMIICkzAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFKKNT+nCczkjhJh1U9/zQog1LVS+MB8GA1UdIwQYMBaAFKhKamME fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0 cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0 cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wTQYDVR0RBEYwRIIbZmF0 dXJhbWVudG8uYmVtYWNhc2guY29tLmJygiVtcG4tZmF0dXJhbWVudG8td2ViLmF6 dXJld2Vic2l0ZXMubmV0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDn sklTLe+LkF4AAAFu/2l90QAABAMARzBFAiEA+t6/kBKAHJMhqhLwh0lAkPQYLie4 JojuWC9ChpsOvEQCIFzMOf1RAAPgAk5aTPjgZNJgVhc3Na97wTx21aXukesxAHYA b1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFu/2l+BgAABAMARzBF AiB8GeS3mSGFKGldvc5FYayFuPasbx3J1eB1RYI9y0/TrgIhAPcX25QG6OXBjMQm juIJunkc1hFZ0FVo5BY5tjZUvLVBMA0GCSqGSIb3DQEBCwUAA4IBAQCRJ5WWfWg9 61lLkhnMoH3wDOdoXTKc396Wgw2Va1ppWsA4zRcsV9/bFZgSKrj/4avWL1v/u6rH KR8TV+ifNNwkWzQMtVjdi9tIanjMztKudnz1UVZ7qAGOgoX7WdkifaKIBG9MgJ43 5NPVGcw3gsQSNHFDpM3zZeOhdYwBFJqu5cT/Epglq8DTGkes0ZMpR6RRdj/H2q5X l69NC6ld7XudQAX/dO6UEJI7wxFw0XHBlQD1VaZiYze7JhTJqAosPCc1SjaN6EKu 9B99fNk0QvtOMTB1urnYvUzqb4G4DeYqpLWWpx46SXTsEZevH3OGjbpCkvZLs6T+ jjEnTB1gwBJU -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAhkpw4iRM6jpTEPy4BHDv T9rAYFvoOsSt3ezmc3pHgS40LNIdgsysRdXzyMSxk7v4DX+DjH9JRfJHhWI1owBE tZI6O3DInXFw5TCuSV6EGs2eo3+imNK/CUx1eSOu221rH7X6A5LHSqod89ebcULf syVkhZdPmu5nJVVgBh14phx7F4yZhKWcqlI51dz2YVpvNZmsW3WSKJ8Y4jS3MOFJ aGK3h8hHPGbmM1wpgAzMJC37O7rjc5W+WO72UCjIPFkqhV/7IFyiVWEY2HaiRN6m T7UkT+BzmelwTMIVJwXAzwvWxbqHbEzmutYm/TwOErmwUo1BHw9MTvOSYXwCIgTl Cyn2ohATlVBwC/ZyWtlohTh1x+zCddkeM/qY0eVn8GvfcrQsKN9o3JGM3OEk50vY TcTSehHhJJmKOY9KJuBL7I/or1gwdxX5o4a/pkRP6D3gzCK8llgEfiLIgSLYtQ4c 97egJhCEa8MWcAF9JsRQVQR8KIrekQahfAdeOidgPk8AAt67aJUcFhH18OplfTQ7 x/4gLhEdpczkgcsHejdC1RwGr8e3iXwF1Iu0dYz7Gb/KRR0coajUSDM7sr4jBprL S16RMzXtHu6ojgxfK+0DGEpFKVsysN9Ql+zuoedOWRvsm5KW7B3b7hQMkA6f2Ms7 wOK3EN3ISSSVbMzqYKDbrPcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 328199478608997432706714633521080993523193 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-13 12:18:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 12:18:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'faturamento.bemacash.com.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 547858604266013678398101035873578477329649629129757995242580712568631558800650539896446675659508028612842220508169214020811633487126092260893855474026660389353630287024635444833338685141928451549017416889039420987332947169789093131767536186778039695288332608763511675535752312756695756110110049493394357559347388528687249335419708796709658032743059395318637817103923855034003103237343197596409666637077772799555255047411170153681631849107705417778242653473225919399576529183331588568825253649767846939826280372477204268994991928202233528457625077374559071496180036508306936087854975089397039814880401053857683812680301173005606426144094888785762613386104982897988622081461495977233079414058421703005506956297513248214881987908586028253299557482475151646211775972256414805961781422874924143821491670840695044929724871526712445349697961470639783136029181305688160744862178566702761528949864377208111153902365782592570508711226578883639902579339655683847391464753771836838945633024609424247468124255788144923206471706529363168389692837595063701509064578904745269515370715220013466762976232448347625486752038167007775432034112233022878723606655372358945903239173682789825404767979280234491482223028341511649842898903510332782041030700279 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a28d4fe9c273392384987553dff34288352d54be . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faturamento.bemacash.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpn-faturamento-web.azurewebsites.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eff697dd10000040300473045022100fadebf9012801c9321aa12f087494090f4182e27b82688ee582f42869b0ebc4402205ccc39fd510003e0024e5a4cf8e064d26056173735af7bc13c76d5a5ee91eb310076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016eff697e06000004030047304502207c19e4b799218528695dbdce4561ac85b8f6ac6f1dc9d5e07545823dcb4fd3ae022100f717db9406e8e5c18cc4268ee209ba791cd61159d05568e41639b63654bcb541 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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