comprascomfandi.itbid.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:92:bc:d1:40:90:15:3b:a0:1e:90:47:d0:68:df:1e:09:19 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=comprascomfandi.itbid.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:92:bc:d1:40:90:15:3b:a0:1e:90:47:d0:68:df:1e:09:19Serial Number (int): 398381350660238641518961582640661425686809
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 74:ef:c3:b2:b6:1e:78:03:ca:2f:03:43:a3:1a:15:57:be:96:ca:f3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6d:d7:b8:64:d6:27:2d:38:92:6c:64:de:e2:96:ba:59:8a:c0:88:b0
Fingerprint (sha256): 13:31:b7:4a:23:81:63:be:a5:16:3b:85:d8:d4:40:b7:90:8b:ef:c5:8f:93:0d:b8:4a:54:4d:45:07:2f:1d:dd
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate comprascomfandi.itbid.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for comprascomfandi.itbid.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
comprascomfandi.itbid.org
portalproveedores.comfandi.com.co
portalproveedores.comfandi.com.co
Other certificates including the domain name itbid.org
(limited to 100 certificates)
red.itbid.org
itbid.com
actum.itbid.org
test.itbid.org
dev.itbid.org
cajamar.itbid.org
id-logistics.itbid.org
sinea.itbid.org
actum.itbid.org
beta.itbid.org
prod.itbid.org
sos.itbid.org
beta.itbid.org
sinea.itbid.org
adp.itbid.org
cajamar.itbid.org
comprascomfandi.itbid.org
gbfoods.itbid.org
compraslafayette.itbid.org
wottoline.itbid.org
vocento.itbid.org
actum.itbid.org
wottoline.itbid.org
sos.itbid.org
std.itbid.org
comprasbancow.itbid.org
db.itbid.org
hooks.itbid.org
compraslafayette.itbid.org
itbid.com
ws.itbid.org
std.itbid.org
actum.itbid.org
comprascomfandi.itbid.org
testbw.itbid.org
std.itbid.org
actum.itbid.org
*.itbid.org
sos.itbid.org
actum.itbid.org
compraslafayette.itbid.org
red.itbid.org
testactum.itbid.org
sinea.itbid.org
*.itbid.org
cajamar.itbid.org
adp.itbid.org
wottoline.itbid.org
sos.itbid.org
testaffinity.itbid.org
compraslafayette.itbid.org
db2.itbid.org
dev.itbid.org
compraslafayette.itbid.org
gbfoods.itbid.org
test.itbid.org
dev.itbid.org
*.itbid.org
vocento.itbid.org
agoracsc.itbid.org
crtve.itbid.org
affinity.itbid.org
test.itbid.org
gbfoods.itbid.org
dinet.itbid.org
testactum.itbid.org
sinea.itbid.org
opain.itbid.org
test.itbid.org
sinea.itbid.org
vocento.itbid.org
arubia.itbid.org
adp.itbid.org
testactum.itbid.org
vocento.itbid.org
std.itbid.org
testcolombia.itbid.org
adp.itbid.org
sinea.itbid.org
beta.itbid.org
wottoline.itbid.org
gbfoods.itbid.org
adp.itbid.org
ws.itbid.org
dinet.itbid.org
cajamar.itbid.org
affinity.itbid.org
id-logistics.itbid.org
gbfoods.itbid.org
actum.itbid.org
sinea.itbid.org
*.itbid.org
cajamar.itbid.org
itbid.com
*.itbid.org
cajamar.itbid.org
gbfoods.itbid.org
gbfoods.itbid.org
financieraconfianza.itbid.org
dev.itbid.org
itbid.com
actum.itbid.org
test.itbid.org
dev.itbid.org
cajamar.itbid.org
id-logistics.itbid.org
sinea.itbid.org
actum.itbid.org
beta.itbid.org
prod.itbid.org
sos.itbid.org
beta.itbid.org
sinea.itbid.org
adp.itbid.org
cajamar.itbid.org
comprascomfandi.itbid.org
gbfoods.itbid.org
compraslafayette.itbid.org
wottoline.itbid.org
vocento.itbid.org
actum.itbid.org
wottoline.itbid.org
sos.itbid.org
std.itbid.org
comprasbancow.itbid.org
db.itbid.org
hooks.itbid.org
compraslafayette.itbid.org
itbid.com
ws.itbid.org
std.itbid.org
actum.itbid.org
comprascomfandi.itbid.org
testbw.itbid.org
std.itbid.org
actum.itbid.org
*.itbid.org
sos.itbid.org
actum.itbid.org
compraslafayette.itbid.org
red.itbid.org
testactum.itbid.org
sinea.itbid.org
*.itbid.org
cajamar.itbid.org
adp.itbid.org
wottoline.itbid.org
sos.itbid.org
testaffinity.itbid.org
compraslafayette.itbid.org
db2.itbid.org
dev.itbid.org
compraslafayette.itbid.org
gbfoods.itbid.org
test.itbid.org
dev.itbid.org
*.itbid.org
vocento.itbid.org
agoracsc.itbid.org
crtve.itbid.org
affinity.itbid.org
test.itbid.org
gbfoods.itbid.org
dinet.itbid.org
testactum.itbid.org
sinea.itbid.org
opain.itbid.org
test.itbid.org
sinea.itbid.org
vocento.itbid.org
arubia.itbid.org
adp.itbid.org
testactum.itbid.org
vocento.itbid.org
std.itbid.org
testcolombia.itbid.org
adp.itbid.org
sinea.itbid.org
beta.itbid.org
wottoline.itbid.org
gbfoods.itbid.org
adp.itbid.org
ws.itbid.org
dinet.itbid.org
cajamar.itbid.org
affinity.itbid.org
id-logistics.itbid.org
gbfoods.itbid.org
actum.itbid.org
sinea.itbid.org
*.itbid.org
cajamar.itbid.org
itbid.com
*.itbid.org
cajamar.itbid.org
gbfoods.itbid.org
gbfoods.itbid.org
financieraconfianza.itbid.org
dev.itbid.org
Certificate
The complete raw certificate details for comprascomfandi.itbid.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISBJK80UCQFTugHpBH0GjfHgkZMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMDQwODAwNTNaFw0x OTAzMDQwODAwNTNaMCQxIjAgBgNVBAMTGWNvbXByYXNjb21mYW5kaS5pdGJpZC5v cmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpeoZQ4/c97KP4aSug Vka31TMCLRjaqhUiZfpXy8G6qhKOpbQo6qBG30AzAjoubuOJ/0CyffpWqfeLWYjP OowDom0P7DsI8dzSid++Xz0aIhcois+QxRJANLpfyeIe43iv087VHh31hom/Gn1V 2jUxYJcMFCXxsbybfRwDeEpwpgLerxRG86llm5nbJmIN6vm+BgJRE6Svyc6IZKxs y8TMDc/xjzSgI4d1f2NnF24MNWX2Q7FjpbhC7SmRUWc/vU2IdLzUA0khQHhsY+rj ZyLhSSPblymWiuCFQHv75jhbeGr16VPDxfGDdsqq8JJwUQD7cBAB2Pk6qj24vctL 2kC5AgMBAAGjggKRMIICjTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHTvw7K2HngD yi8DQ6MaFVe+lsrzMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wRwYDVR0RBEAwPoIZY29tcHJhc2NvbWZhbmRpLml0Ymlk Lm9yZ4IhcG9ydGFscHJvdmVlZG9yZXMuY29tZmFuZGkuY29tLmNvMEwGA1UdIARF MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6 Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUA dH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFneHLgbQAABAMARjBE AiAHkZf4feDl5JOGe7usNkCOD8FjWBAThPgzMyPhfUuwWgIgPUKEW2qb/MDHRlHN kI87+tfHDXoWgiR2OL4QAZLu76cAdwBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4 scdoVEvYjQAAAWd4cuBrAAAEAwBIMEYCIQDG03SoLTsmCZrSPjT29+thH1nJbMoi MSrrdIFmTXGH5QIhALQqFqI8GhCMG0dpXry9j/qEZu0tanfI5/B8R52ubduzMA0G CSqGSIb3DQEBCwUAA4IBAQAsbyQLH5WAnHbSvtSPaqja16u4895JW+dbObhJMMhW yJQeerlAFoZBhgHHDWC3W2SQiYJLhAS/uF0wW6K5zPOKwuSp4ux2eDRjb2VEh6oM talzxECAf5SsKFxbPucEjFEgbPv2uZ9frYdI7PrcsBWLaxWARkaAZekd3alcMrCA jpyc/ruAStSal86ubyr86m2EcPQFuPbs5Rz/m8/atYw1+cUyaq9NEBRtUPcrlrSW Uf4N3tN3HPKJ7Pq1WjxF5l0UutGC13mbPBuDUEVRVgAUPHOAqIkHZBmwld56NxTs q2l+FXElXDY51c5bCE3cW4ltO9up2PtNBxnZr0VpGIv0 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXqGUOP3Peyj+GkroFZG t9UzAi0Y2qoVImX6V8vBuqoSjqW0KOqgRt9AMwI6Lm7jif9Asn36Vqn3i1mIzzqM A6JtD+w7CPHc0onfvl89GiIXKIrPkMUSQDS6X8niHuN4r9PO1R4d9YaJvxp9Vdo1 MWCXDBQl8bG8m30cA3hKcKYC3q8URvOpZZuZ2yZiDer5vgYCUROkr8nOiGSsbMvE zA3P8Y80oCOHdX9jZxduDDVl9kOxY6W4Qu0pkVFnP71NiHS81ANJIUB4bGPq42ci 4Ukj25cplorghUB7++Y4W3hq9elTw8Xxg3bKqvCScFEA+3AQAdj5Oqo9uL3LS9pA uQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 398381350660238641518961582640661425686809 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-04 08:00:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-04 08:00:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'comprascomfandi.itbid.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21394692706777233477466000656983006421491724337978723216586939570933969936824451669914477140874871177458215850453689427554414392431918873354748800942941527005813641934560513492717163281385949755398662250813684745729763453185790323736409787126912166398917023845156469453969999377985095626887449566369860842941624767577854612868953021362972703552305140516516303728627434991809036981966097995244286340614196228728413494434928842180263184719583522746450795264219972946432530356143077456495809993507421424278439955434005651860398122504104498473390213829911877659239201424304255550039851997795407674066139828036359436255417 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 74efc3b2b61e7803ca2f0343a31a1557be96caf3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comprascomfandi.itbid.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalproveedores.comfandi.com.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001677872e06d00000403004630440220079197f87de0e5e493867bbbac36408e0fc16358101384f8333323e17d4bb05a02203d42845b6a9bfcc0c74651cd908f3bfad7c70d7a1682247638be100192eeefa700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001677872e06b0000040300483046022100c6d374a82d3b26099ad23e34f6f7eb611f59c96cca22312aeb7481664d7187e5022100b42a16a23c1a108c1b47695ebcbd8ffa8466ed2d6a77c8e7f07c479dae6ddbb3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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