eficst.ercim.eu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:25:03:1d:fb:72:e7:e7:6b:45:36:ab:ec:29:5b:5a:bb:b4 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=eficst.ercim.eu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:25:03:1d:fb:72:e7:e7:6b:45:36:ab:ec:29:5b:5a:bb:b4Serial Number (int): 273931448731940307194534948884886096362420
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e2:7c:bd:e6:20:3c:47:80:67:73:88:ff:55:ec:d9:5b:1b:d4:53:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 63:c3:c8:3c:02:3d:a1:90:e0:f5:9f:c0:f5:9d:af:db:30:5c:38:d8
Fingerprint (sha256): 16:33:2a:b4:02:b8:14:4f:1f:e4:9f:3f:bb:38:89:f2:88:ad:0c:fb:09:9a:f2:16:46:2b:0b:c9:75:f6:22:90
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate eficst.ercim.eu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for eficst.ercim.eu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
eficst.ercim.eu
Other certificates including the domain name ercim.eu
(limited to 100 certificates)
eficst.ercim.eu
bscw.ercim.eu
bscw.ercim.eu
webmail.sophia.ercim.eu
webmail.sophia.ercim.eu
ercim-news.ercim.eu
www.ercim.eu
wiki.ercim.eu
strews.ercim.eu
paasage.ercim.eu
ercim-news.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
www.ercim.eu
openmediaweb.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
paasage.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
svn.ercim.eu
bscw.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
gitlab.ercim.eu
eficst.ercim.eu
strews.ercim.eu
ercim.eu
easyts-egi-old.ercim.eu
svn.ercim.eu
ercim-news.ercim.eu
svn.ercim.eu
lists.ercim.eu
eficst.ercim.eu
bscw.ercim.eu
ercim-news.ercim.eu
trac.ercim.eu
trac.ercim.eu
wiki.ercim.eu
fellowship.ercim.eu
easyts-egi-test.ercim.eu
webmail.sophia.ercim.eu
fellowship.ercim.eu
ercim-news.ercim.eu
fellowship.ercim.eu
bscw.ercim.eu
stats.ercim.eu
www.ercim.eu
bscw.ercim.eu
svn.ercim.eu
eficst.ercim.eu
lists.ercim.eu
bscw.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
strews.ercim.eu
vre4eic.ercim.eu
stats.ercim.eu
stats.ercim.eu
easyts-test.ercim.eu
easyts-egi-old.ercim.eu
trac.ercim.eu
bscw.ercim.eu
www.ercim.eu
ercim.eu
stats.ercim.eu
lists.ercim.eu
wiki.ercim.eu
trac.ercim.eu
svn.ercim.eu
trac.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
lists.ercim.eu
paasage.ercim.eu
fellowship.ercim.eu
paasage.ercim.eu
strews.ercim.eu
svn.ercim.eu
lists.ercim.eu
www.ercim.eu
ercim-news.ercim.eu
eficst.ercim.eu
strews.ercim.eu
strews.ercim.eu
ercim.eu
lists.ercim.eu
webmail.sophia.ercim.eu
*.ercim.eu
lists.ercim.eu
wiki.ercim.eu
easyts-egi.ercim.eu
lists.ercim.eu
wiki.ercim.eu
stats.ercim.eu
trac.ercim.eu
www.ercim.eu
fellowship.ercim.eu
bscw.ercim.eu
bscw.ercim.eu
webmail.sophia.ercim.eu
webmail.sophia.ercim.eu
ercim-news.ercim.eu
www.ercim.eu
wiki.ercim.eu
strews.ercim.eu
paasage.ercim.eu
ercim-news.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
www.ercim.eu
openmediaweb.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
paasage.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
svn.ercim.eu
bscw.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
gitlab.ercim.eu
eficst.ercim.eu
strews.ercim.eu
ercim.eu
easyts-egi-old.ercim.eu
svn.ercim.eu
ercim-news.ercim.eu
svn.ercim.eu
lists.ercim.eu
eficst.ercim.eu
bscw.ercim.eu
ercim-news.ercim.eu
trac.ercim.eu
trac.ercim.eu
wiki.ercim.eu
fellowship.ercim.eu
easyts-egi-test.ercim.eu
webmail.sophia.ercim.eu
fellowship.ercim.eu
ercim-news.ercim.eu
fellowship.ercim.eu
bscw.ercim.eu
stats.ercim.eu
www.ercim.eu
bscw.ercim.eu
svn.ercim.eu
eficst.ercim.eu
lists.ercim.eu
bscw.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
strews.ercim.eu
vre4eic.ercim.eu
stats.ercim.eu
stats.ercim.eu
easyts-test.ercim.eu
easyts-egi-old.ercim.eu
trac.ercim.eu
bscw.ercim.eu
www.ercim.eu
ercim.eu
stats.ercim.eu
lists.ercim.eu
wiki.ercim.eu
trac.ercim.eu
svn.ercim.eu
trac.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
lists.ercim.eu
paasage.ercim.eu
fellowship.ercim.eu
paasage.ercim.eu
strews.ercim.eu
svn.ercim.eu
lists.ercim.eu
www.ercim.eu
ercim-news.ercim.eu
eficst.ercim.eu
strews.ercim.eu
strews.ercim.eu
ercim.eu
lists.ercim.eu
webmail.sophia.ercim.eu
*.ercim.eu
lists.ercim.eu
wiki.ercim.eu
easyts-egi.ercim.eu
lists.ercim.eu
wiki.ercim.eu
stats.ercim.eu
trac.ercim.eu
www.ercim.eu
fellowship.ercim.eu
Certificate
The complete raw certificate details for eficst.ercim.eu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgISAyUDHfty5+drRTar7ClbWru0MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MTYwMzE5MzFaFw0x OTA5MTQwMzE5MzFaMBoxGDAWBgNVBAMTD2VmaWNzdC5lcmNpbS5ldTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBANhMB/Z41HDqSna+5OpJoQKTImFHcsBP 6IHUvuDYAEDyNSNUXxDyD6YNQv4JOgCPZjH/8UI61FkTP2UElV+wAsC9Ye+Py+0A znCexSOt25YgKnXJmySTBP+zibEdDxiSYV9lW41IYKm+BRuZTKIR1+Z5K2vXSwXN N/u2YRifjFxmYkIF1cTFqfe8fguvGwLTkGYoutcr3DHDeqjwcPhrWX3EGt+o7uK1 79DUKDAfnXlEFfJeIviTBVfWd6p8aU7UtU+9sKDiPO9QfzCe5dHIp+JuDJnZUU1b tuPfVT4IESetaocm/9F0yz4mckbjUBk+c/5xX0VppwLH6SGJWObseDHsya22Z9X3 zz2AASzrEDKAtsh39qAxTmDWOkGHsNuicXX13Q7HAJI3PYbiO7q18M1PJNJxHqL0 1wJ/EaHHHuNs76nhtBClQ+F+HsmvT0eDUxq2Iih3DNQ02i9NKYXoV5Tmj8IGDdeH CfA7zdhR0AcKmoj8ZWBfrOyh1ZQbk4U4Z5wKPp2YTWGXOk+FUJzvL9bPktNRR1L9 +Wsl1bc9xKPkOu8+uhdyScoR8l0LNNyftDNc3yctwHyMcsunPobqJkcRDNpRPGX2 rWX2bDNEmeeJ72Lr2accCxs6MKUS+5XGOu6FTaqSiV5CIrvXWqPHUMZp+g9vRFFJ PO4KiShxAUAlAgMBAAGjggJlMIICYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOJ8 veYgPEeAZ3OI/1Xs2Vsb1FOuMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPZWZpY3N0LmVyY2ltLmV1 MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB 9gSB8wDxAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFrXoL+ JAAABAMARzBFAiEA05sO2m3KZG3fjvMGPif7+dQTJVsvR3287dlkyTdYem0CICx6 hrfU76ZEz8tq4HvMt4RUzI8vuO50TvcsA15wiSuuAHcAY/Lbzeg7zCzPC3KEJ1dr M6SNYXePvXWmOLHHaFRL2I0AAAFrXoL9SgAABAMASDBGAiEAnfEEMRFRFkRABrs8 t+dafBpo+i0cVF8gzMbUR0gJhqwCIQDKKw/CtkcWNkQwF4msJN7RvfSajB4ZPj/z xbsgSDNRUjANBgkqhkiG9w0BAQsFAAOCAQEAkaMF5IiBAsKYCPQbP4Bu/rlD7FFS VY9IVXHmCDKV9cYp2iydn2722HZOk2x4XLqAuaP4hRRMAHEEJzr2ZMctNTB8ZG9r f3FQfERuNfHXI27NB7ebbYpd2INN90eZpZf07ZlB8y6O58s6cph3SlJgBnXzLrGL HA7vdGbahpCHGHxwyRHC0xx4Gvr1nLQOHrsQILdRSNeu1cEmLNVZW7buxmfuhy2T fXuaC89fu13y+ywFEzreimtxPfUYq25ktCfMcXcoifVQuqYcNypc39KBc6RX/ryW 0YWbkK83T5GNkVxklkkmNwzyCieljqvaUUzFrhesJAfSyToTFbTaiLvHuw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2EwH9njUcOpKdr7k6kmh ApMiYUdywE/ogdS+4NgAQPI1I1RfEPIPpg1C/gk6AI9mMf/xQjrUWRM/ZQSVX7AC wL1h74/L7QDOcJ7FI63bliAqdcmbJJME/7OJsR0PGJJhX2VbjUhgqb4FG5lMohHX 5nkra9dLBc03+7ZhGJ+MXGZiQgXVxMWp97x+C68bAtOQZii61yvcMcN6qPBw+GtZ fcQa36ju4rXv0NQoMB+deUQV8l4i+JMFV9Z3qnxpTtS1T72woOI871B/MJ7l0cin 4m4MmdlRTVu2499VPggRJ61qhyb/0XTLPiZyRuNQGT5z/nFfRWmnAsfpIYlY5ux4 MezJrbZn1ffPPYABLOsQMoC2yHf2oDFOYNY6QYew26JxdfXdDscAkjc9huI7urXw zU8k0nEeovTXAn8Rocce42zvqeG0EKVD4X4eya9PR4NTGrYiKHcM1DTaL00phehX lOaPwgYN14cJ8DvN2FHQBwqaiPxlYF+s7KHVlBuThThnnAo+nZhNYZc6T4VQnO8v 1s+S01FHUv35ayXVtz3Eo+Q67z66F3JJyhHyXQs03J+0M1zfJy3AfIxyy6c+huom RxEM2lE8ZfatZfZsM0SZ54nvYuvZpxwLGzowpRL7lcY67oVNqpKJXkIiu9dao8dQ xmn6D29EUUk87gqJKHEBQCUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 273931448731940307194534948884886096362420 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-16 03:19:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-14 03:19:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eficst.ercim.eu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 882414758711582002851004553606785552556295810473445525984049124921728074863568444774492497552289825826204372362639416789379123604293603603312328981109024793596059444481877070987870085278868256834046741929037290286488127875530915596191801303430793117915268230584153212129803681810300263556967509382410965198802894682455458138823768396103215157990130940306268408064267959567739275170535189597164857766576001260350511854222049767135906462111970536070715624440029882939246979679167647276928430520115778122389017429739922151777654619368400041772871562309624292274918295562900005407645696155726629372828836407595450905043243864791894129902848200064107724308535949853754216416677777098113983789803450137175588976034842614880914506955628634832190528962201067020510535227594590172122144110818676010883174719826185272611055761775727570657612848404904440786947168790060824083095330219819751759020442578900262154957255807038600728829895724362292926455782223159300417842502739337151953399708604021764326067263121599805521751465407132749689581816869186387388472890461041138956509034237929305769299967955035056060422081657006403572545099465691847727290772993821321169044650550414441821107978347063355636218219519302342811677771419689779877027856421 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e27cbde6203c4780677388ff55ecd95b1bd453ae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eficst.ercim.eu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b5e82fe240000040300473045022100d39b0eda6dca646ddf8ef3063e27fbf9d413255b2f477dbcedd964c937587a6d02202c7a86b7d4efa644cfcb6ae07bccb78454cc8f2fb8ee744ef72c035e70892bae00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b5e82fd4a00000403004830460221009df10431115116444006bb3cb7e75a7c1a68fa2d1c545f20ccc6d447480986ac022100ca2b0fc2b647163644301789ac24ded1bdf49a8c1e193e3ff3c5bb2048335152 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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