shop.kinepolis.be
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:fd:0a:9e:32:16:bd:17:f5:cf:24:a0:74:4a:63:55:4e:c1 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=shop.kinepolis.be
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:fd:0a:9e:32:16:bd:17:f5:cf:24:a0:74:4a:63:55:4e:c1Serial Number (int): 434554696236821936895072045121836795907777
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 3d:c2:25:99:84:54:02:da:57:b5:10:2a:e0:ce:38:29:12:d3:21:c8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a7:e2:07:2f:8d:24:c9:6f:24:35:ca:7b:da:d2:f4:49:61:52:ed:41
Fingerprint (sha256): 14:ac:2f:26:0b:2b:e4:00:a9:4e:e7:ec:d6:25:fa:01:9b:1b:c8:35:b6:05:d0:69:f3:7e:c0:0c:d3:05:d1:b4
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate shop.kinepolis.be
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for shop.kinepolis.be
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bono10.elsmillorscines.com
shop.kinepolis.be
shop.kinepolis.es
shop.kinepolis.fr
shop.kinepolis.lu
shop.kinepolis.be
shop.kinepolis.es
shop.kinepolis.fr
shop.kinepolis.lu
Other certificates including the domain name kinepolis.be
(limited to 100 certificates)
kinepolis.lu
kinepolis.lu
hrfr.kinepolis.be
business.kinepolis.be
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.be
kinepolis.lu
kinepolis.lu
secure0010.hubspot.com
shop-dev.kinepolis.be
corporate.kinepolis.be
www.kinepolis.be
tickets.kinepolis.be
shop-dev.kinepolis.be
business.kinepolis.be
kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.fr
shop.kinepolis.be
kfd.kinepolis.be
kinepolis.lu
tickets.kinepolis.be
shop.kinepolis.be
kinepolis.megatix.be
shop.kinepolis.be
kinepolis.megatix.be
shop.kinepolis.be
tickets.kinepolis.be
secure0010.hubspot.com
shop-dev.kinepolis.be
hrfr.kinepolis.be
kinepolis.be
corporate.kinepolis.be
*.kinepolis.be
shop.kinepolis.be
hrfr.kinepolis.be
shop-dev.kinepolis.fr
corporate.kinepolis.be
kinepolis.lu
hrfr.kinepolis.be
corporate.kinepolis.be
www.business.kinepolis.be
shop.kinepolis.be
stage-kinepolis.megatix.be
kinepolis.lu
secure0010.hubspot.com
secure0010.hubspot.com
kinepolis.lu
corporate.kinepolis.be
corporate.kinepolis.be
*.kinepolis.be
corporate.kinepolis.be
shop.kinepolis.be
www.business.kinepolis.be
secure0010.hubspot.com
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop.kinepolis.be
kinepolis.be
kinepolis.be
secure0010.hubspot.com
secure0010.hubspot.com
secure0010.hubspot.com
corporate.kinepolis.be
shop.kinepolis.be
shop-dev.kinepolis.be
business.kinepolis.be
business.kinepolis.be
kinepolis.lu
business.kinepolis.be
secure0010.hubspot.com
kinepolis.megatix.be
corporate.kinepolis.be
www.business.kinepolis.be
business.kinepolis.be
*.kinepolis.be
kinepolis.megatix.be
greatescape-leuven.be
kinepolis.be
secure0010.hubspot.com
hrfr.kinepolis.be
secure0010.hubspot.com
tickets.kinepolis.be
corporate.kinepolis.be
business.kinepolis.be
kinepolis.megatix.be
shop.kinepolis.be
corporate.kinepolis.be
hrfr.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
business.kinepolis.be
secure0010.hubspot.com
hrfr.kinepolis.be
hrfr.kinepolis.be
kinepolis.be
shop-dev.kinepolis.be
shop-dev.kinepolis.be
secure0010.hubspot.com
kinepolis.lu
hrfr.kinepolis.be
business.kinepolis.be
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.be
kinepolis.lu
kinepolis.lu
secure0010.hubspot.com
shop-dev.kinepolis.be
corporate.kinepolis.be
www.kinepolis.be
tickets.kinepolis.be
shop-dev.kinepolis.be
business.kinepolis.be
kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.fr
shop.kinepolis.be
kfd.kinepolis.be
kinepolis.lu
tickets.kinepolis.be
shop.kinepolis.be
kinepolis.megatix.be
shop.kinepolis.be
kinepolis.megatix.be
shop.kinepolis.be
tickets.kinepolis.be
secure0010.hubspot.com
shop-dev.kinepolis.be
hrfr.kinepolis.be
kinepolis.be
corporate.kinepolis.be
*.kinepolis.be
shop.kinepolis.be
hrfr.kinepolis.be
shop-dev.kinepolis.fr
corporate.kinepolis.be
kinepolis.lu
hrfr.kinepolis.be
corporate.kinepolis.be
www.business.kinepolis.be
shop.kinepolis.be
stage-kinepolis.megatix.be
kinepolis.lu
secure0010.hubspot.com
secure0010.hubspot.com
kinepolis.lu
corporate.kinepolis.be
corporate.kinepolis.be
*.kinepolis.be
corporate.kinepolis.be
shop.kinepolis.be
www.business.kinepolis.be
secure0010.hubspot.com
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop.kinepolis.be
kinepolis.be
kinepolis.be
secure0010.hubspot.com
secure0010.hubspot.com
secure0010.hubspot.com
corporate.kinepolis.be
shop.kinepolis.be
shop-dev.kinepolis.be
business.kinepolis.be
business.kinepolis.be
kinepolis.lu
business.kinepolis.be
secure0010.hubspot.com
kinepolis.megatix.be
corporate.kinepolis.be
www.business.kinepolis.be
business.kinepolis.be
*.kinepolis.be
kinepolis.megatix.be
greatescape-leuven.be
kinepolis.be
secure0010.hubspot.com
hrfr.kinepolis.be
secure0010.hubspot.com
tickets.kinepolis.be
corporate.kinepolis.be
business.kinepolis.be
kinepolis.megatix.be
shop.kinepolis.be
corporate.kinepolis.be
hrfr.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
business.kinepolis.be
secure0010.hubspot.com
hrfr.kinepolis.be
hrfr.kinepolis.be
kinepolis.be
shop-dev.kinepolis.be
shop-dev.kinepolis.be
secure0010.hubspot.com
Certificate
The complete raw certificate details for shop.kinepolis.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgISBP0KnjIWvRf1zySgdEpjVU7BMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA4MDcwNzE4MTJaFw0y MDExMDUwNzE4MTJaMBwxGjAYBgNVBAMTEXNob3Aua2luZXBvbGlzLmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGbi/Mx0Z28pzF5Q5RPiT4oLp5I1 aSzshYaGcYNS1GiQNSIhFEeKpCn8Pwvd3nHtyd/3NpNSn8fjPSDj6GqkOLl3gXdl JTM6Qx4JK9VKgLBVI8kdmeC9fLWdI/bYyeOSJPiOXbevBbA7HDkdOQKuQRwxg7If UARbVSCc2WJknyjvWcibNMSHcYzFQgEDHWmVAsHNMBq8K9aBWUymPyUEfqWYFTa6 HWEd9urfoVi521RgBR0vvsung+XrogS46++rjA4y8RRLMPPiwvVgUtPhK4303hDw fl2cUWg2+jXXVIM/94cTla7fqGGa/JRr5bF34xV6R23x/WW7MDbq15OGZQIDAQAB o4IByDCCAcQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ9wiWZhFQC2le1ECrgzjgp EtMhyDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw dC5vcmcvMHEGA1UdEQRqMGiCGmJvbm8xMC5lbHNtaWxsb3JzY2luZXMuY29tghFz aG9wLmtpbmVwb2xpcy5iZYIRc2hvcC5raW5lcG9saXMuZXOCEXNob3Aua2luZXBv bGlzLmZyghFzaG9wLmtpbmVwb2xpcy5sdTBMBgNVHSAERTBDMAgGBmeBDAECATA3 BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy eXB0Lm9yZzATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA KT80cqzjyp6bLrFEFTFAcxpuqm/VQ6Uqv+XqFo0qpJ3hn93X/UpqXcm9rXYEQR5u ocOSSDOXJ5MUEvJ5yrVQQjWfZOiDcvBgrjfnX0lDdTyS9xANj55sjhUomWRaLq3O z0s9+bsWMBBC+NYCj7+g8bf50VW2DZ1EcX3jgNyUOkI9AsVAVxeHRWnG35vXwpAe gb7l1OsTBgj7Ipmybb1+5G54a9kr63E5LZSiFjUFU2J+NTRLunbrDL5f22RAPrie CS7g2C1TdXLA1zIeW4C8DoG+wuwiUkbfELYyMTnse+4tZs6s6AcFU67ToQi0wiKX DW2LZnLpk+e3oW5FCLHTUg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGbi/Mx0Z28pzF5Q5RPi T4oLp5I1aSzshYaGcYNS1GiQNSIhFEeKpCn8Pwvd3nHtyd/3NpNSn8fjPSDj6Gqk OLl3gXdlJTM6Qx4JK9VKgLBVI8kdmeC9fLWdI/bYyeOSJPiOXbevBbA7HDkdOQKu QRwxg7IfUARbVSCc2WJknyjvWcibNMSHcYzFQgEDHWmVAsHNMBq8K9aBWUymPyUE fqWYFTa6HWEd9urfoVi521RgBR0vvsung+XrogS46++rjA4y8RRLMPPiwvVgUtPh K4303hDwfl2cUWg2+jXXVIM/94cTla7fqGGa/JRr5bF34xV6R23x/WW7MDbq15OG ZQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 434554696236821936895072045121836795907777 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-07 07:18:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-05 07:18:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.kinepolis.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24288489861342402819868877995069669445527897600968072795791366185438779135343787006239549548297984927344744740403486641918970594711144149899781542666892740876522899334495221304141931066194338331903971731242636712293207367790997802105969071896752839277550019979667189969070268944633184963374242738775066609630151023831602348682333757650152352872087309104354445809436975962353112748333422334078019003497591006930853423192140969404057858816334957563232906705382175568926424917167644473855865355959184982191976531810058029255576016751242882418920715814955659282997694729709846141287503126055707269777035657400972691605093 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3dc22599845402da57b5102ae0ce382912d321c8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bono10.elsmillorscines.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kinepolis.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kinepolis.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kinepolis.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kinepolis.lu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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