mail.kinten.net
Issued by R3
About this certificate
This digital certificate with serial number 03:7e:e9:cd:c2:d7:20:e9:74:ae:f5:28:2c:38:71:00:53:81 was issued on by Let's Encrypt.
With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mail.kinten.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:7e:e9:cd:c2:d7:20:e9:74:ae:f5:28:2c:38:71:00:53:81Serial Number (int): 304523214523024575174350393819832782967681
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 33:3d:c3:d9:4f:5f:94:a9:4e:03:6f:ae:4d:16:7e:9e:27:34:64:31
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): a4:fd:e9:4c:8d:1c:4a:71:db:15:24:46:51:bd:10:c4:52:d3:d4:8c
Fingerprint (sha256): 11:8a:dc:e7:37:89:3f:52:7b:e0:d0:f6:c6:4f:6e:58:fb:a8:70:74:c1:12:cf:5e:6a:0e:0e:8d:cf:9a:d9:d8
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate mail.kinten.net
16
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.kinten.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
en.saiseido.co.jp
koso.sumire-corp.co.jp
m.kinten.net
m.saiseido.jp
mail.kinten.net
saiseido.co.jp
saiseido.hk
skr.tokyo-u.org
sumire-corp.co.jp
sumire-corp.com
sumire.cn
www.saiseido.co.jp
www.saiseido.hk
www.sumire-corp.co.jp
www.sumire-corp.com
www.sumire.cn
koso.sumire-corp.co.jp
m.kinten.net
m.saiseido.jp
mail.kinten.net
saiseido.co.jp
saiseido.hk
skr.tokyo-u.org
sumire-corp.co.jp
sumire-corp.com
sumire.cn
www.saiseido.co.jp
www.saiseido.hk
www.sumire-corp.co.jp
www.sumire-corp.com
www.sumire.cn
Other certificates including the domain name kinten.net
(limited to 100 certificates)
h.zstbio.com
mail.kinten.net
mail.kinten.net
h.zstbio.com
kinten.net
saiseido.co.jp
mail.kinten.net
zstbio.com
kinten.net
zstbio.com
kinten.net
nbc.zstbio.com
zstbio.com
zstbio.com
tk.zstbio.com
zstbio.com
tk.zstbio.com
nbc.zstbio.com
tk.zstbio.com
nbc.zstbio.com
nbc.zstbio.com
tk.zstbio.com
nbc.zstbio.com
nbc.zstbio.com
tk.zstbio.com
kinten.net
zstbio.com
zstbio.com
zstbio.com
tk.zstbio.com
nbc.zstbio.com
saiseido.co.jp
nbc.zstbio.com
hbktk.tokyo-u.org
tk.zstbio.com
kinten.net
mail.kinten.net
mail.kinten.net
kinten.net
zstbio.com
zstbio.com
tk.zstbio.com
saiseido.co.jp
h.zstbio.com
tk.zstbio.com
zstbio.com
tk.zstbio.com
h.zstbio.com
tk.zstbio.com
tk.zstbio.com
kinten.net
kinten.net
mail.kinten.net
mail.kinten.net
h.zstbio.com
kinten.net
saiseido.co.jp
mail.kinten.net
zstbio.com
kinten.net
zstbio.com
kinten.net
nbc.zstbio.com
zstbio.com
zstbio.com
tk.zstbio.com
zstbio.com
tk.zstbio.com
nbc.zstbio.com
tk.zstbio.com
nbc.zstbio.com
nbc.zstbio.com
tk.zstbio.com
nbc.zstbio.com
nbc.zstbio.com
tk.zstbio.com
kinten.net
zstbio.com
zstbio.com
zstbio.com
tk.zstbio.com
nbc.zstbio.com
saiseido.co.jp
nbc.zstbio.com
hbktk.tokyo-u.org
tk.zstbio.com
kinten.net
mail.kinten.net
mail.kinten.net
kinten.net
zstbio.com
zstbio.com
tk.zstbio.com
saiseido.co.jp
h.zstbio.com
tk.zstbio.com
zstbio.com
tk.zstbio.com
h.zstbio.com
tk.zstbio.com
tk.zstbio.com
kinten.net
kinten.net
Certificate
The complete raw certificate details for mail.kinten.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgISA37pzcLXIOl0rvUoLDhxAFOBMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA1MTYxNzAyNTdaFw0yMzA4MTQxNzAyNTZaMBoxGDAWBgNVBAMT D21haWwua2ludGVuLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOqqckV6+6PMHlPpzThKkLumcHjmE+x695+9amQ6h/93w/bYxWSlt3BM/nAfY3/o ko9vIWSbir8CYcy4sFRCXh1h1HJ4UOGp7DK7ubPLU73nlNjjzZZy21p/LvfmnCJB zEJeh3LZAhk8sqIbFgZhR271w69tgkrwQ4pwHOwcaaW/zP0z3vYWk0f9E9tjCn7b FtOO/NvWRomNon8EL5B2HiIBbJdnWSNUZxjN8rxAQF7h1PNnpDDOEzCWTvZJCQnb 1YztOfKOLOwsGmTwAk4iatycN6TFQrY2L0bepwnVfrNMyJO8HHCjHM0m+5O5DcdW xXmoPrwsDg7x09VsjJiEYH0CAwEAAaOCA1QwggNQMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUMz3D2U9flKlOA2+uTRZ+nic0ZDEwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wggEjBgNVHREEggEaMIIBFoIRZW4uc2Fpc2VpZG8uY28uanCCFmtvc28uc3Vt aXJlLWNvcnAuY28uanCCDG0ua2ludGVuLm5ldIINbS5zYWlzZWlkby5qcIIPbWFp bC5raW50ZW4ubmV0gg5zYWlzZWlkby5jby5qcIILc2Fpc2VpZG8uaGuCD3Nrci50 b2t5by11Lm9yZ4IRc3VtaXJlLWNvcnAuY28uanCCD3N1bWlyZS1jb3JwLmNvbYIJ c3VtaXJlLmNughJ3d3cuc2Fpc2VpZG8uY28uanCCD3d3dy5zYWlzZWlkby5oa4IV d3d3LnN1bWlyZS1jb3JwLmNvLmpwghN3d3cuc3VtaXJlLWNvcnAuY29tgg13d3cu c3VtaXJlLmNuMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYB BAHWeQIEAgSB9ASB8QDvAHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXt tJkAAAGIJbrEmwAABAMARzBFAiEAq8PeOLrqEwFNhvKLVvivkVnms8ehtz5em7wE qzLwVkkCIDyBHIoMRgpM1AoE7cZ+VsnHMxGW8P8mVc77pUn/UbFyAHUAejKMVNi3 LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGIJbrEqwAABAMARjBEAiAXNPo4 YQ1ailqY7Yn6gkUnYvCCVWNjtAFVPJu8MJ3oIgIgYy+rA0//QNI+vIKLeaapruEx guTMhBdCEQ0ua5OQFecwDQYJKoZIhvcNAQELBQADggEBAGT5V2hpZGnjPYO7LVkK AWggthb6yeW9DOpfvs89tCcia6tyT5kORepsTuTWM61v8X6+AD2fRl3OFdcHWJTX Zc7exQkBLfW40DgmnjCbM5LRCvufxGmNCYp5dib1tLl3L1tEK2F5NcVVme03Mdcq /TprdPZcOhfe25gkj6G4xukeZCnaM73xfNX8HoIx+pVWmt5ysimtrTxhSyk70iJI XEirussS2vKxRdg55hkhBZOH5yDXjxByrtzWKPaeDvK7uesx/I20furblu6D4sGM PsbmBhaeMO8OHR8bqBC1IyK6IPGAEVj8d2j3o4NLrMPfRKuveA1upVwYCIzPD7uU Sug= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qpyRXr7o8weU+nNOEqQ u6ZweOYT7Hr3n71qZDqH/3fD9tjFZKW3cEz+cB9jf+iSj28hZJuKvwJhzLiwVEJe HWHUcnhQ4ansMru5s8tTveeU2OPNlnLbWn8u9+acIkHMQl6HctkCGTyyohsWBmFH bvXDr22CSvBDinAc7Bxppb/M/TPe9haTR/0T22MKftsW047829ZGiY2ifwQvkHYe IgFsl2dZI1RnGM3yvEBAXuHU82ekMM4TMJZO9kkJCdvVjO058o4s7CwaZPACTiJq 3Jw3pMVCtjYvRt6nCdV+s0zIk7wccKMczSb7k7kNx1bFeag+vCwODvHT1WyMmIRg fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 304523214523024575174350393819832782967681 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-16 17:02:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-14 17:02:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.kinten.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29623813601024885286088448336890508814569473347181932431960601398719294578611764907714765106963359183495432861079434740965004512702605552652214625630396851365614436741058738580021871495013225176854229913644164035784697485811347322912968726282993962488691010211150486000555682623549749199040567980369746073061971402812953866996460868380014237547163956007891910027001454342077392020439093296119231882221578709816826777921998071042823861244587436624552547264987595475904309199675056792215833573166893410535771492814430240186200816561948880757723814912638789583617724958175582817537018352343597899423891928791080002412669 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 333dc3d94f5f94a94e036fae4d167e9e27346431 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (282 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.saiseido.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koso.sumire-corp.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.kinten.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.saiseido.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kinten.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saiseido.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saiseido.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skr.tokyo-u.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumire-corp.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumire-corp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumire.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saiseido.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saiseido.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumire-corp.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumire-corp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumire.cn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018825bac49b0000040300473045022100abc3de38baea13014d86f28b56f8af9159e6b3c7a1b73e5e9bbc04ab32f0564902203c811c8a0c460a4cd40a04edc67e56c9c7331196f0ff2655cefba549ff51b1720075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018825bac4ab000004030046304402201734fa38610d5a8a5a98ed89fa82452762f082556363b401553c9bbc309de8220220632fab034fff40d23ebc828b79a6a9aee13182e4cc841742110d2e6b939015e7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0064f95768696469e33d83bb2d590a016820b616fac9e5bd0cea5fbecf3db427226bab724f990e45ea6c4ee4d633ad6ff17ebe003d9f465dce15d7075894d765cedec509012df5b8d038269e309b3392d10afb9fc4698d098a797626f5b4b9772f5b442b617935c55599ed3731d72afd3a6b74f65c3a17dedb98248fa1b8c6e91e6429da33bdf17cd5fc1e8231fa95569ade72b229adad3c614b293bd222485c48abbacb12daf2b145d839e61921059387e720d78f1072aedcd628f69e0ef2bbb9eb31fc8db47eeadb96ee83e2c18c3ec6e606169e30ef0e1d1f1ba810b52322ba20f1801158fc7768f7a3834bacc3df44abaf780d6ea55c18088ccf0fbb944ae8