rjenni.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:c5:d5:ab:2f:2c:b2:33:50:a6:39:5a:d3:84:a4:d9:3b:27 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=rjenni.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c5:d5:ab:2f:2c:b2:33:50:a6:39:5a:d3:84:a4:d9:3b:27Serial Number (int): 328656498481385054668686237332308122745639
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 52:5b:7e:7a:73:f1:78:19:3a:d8:f4:a4:c6:3c:17:52:73:0e:f6:f9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d6:58:ee:25:7b:47:1c:b7:a4:d8:8b:2e:07:98:40:fc:52:b9:69:9c
Fingerprint (sha256): 1c:0c:de:4b:01:4c:59:b4:f0:c6:ec:86:bc:55:9f:ef:1c:fc:ab:e6:8c:d4:ad:fa:66:c9:7e:46:84:cf:74:66
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate rjenni.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rjenni.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rjenni.ch
Other certificates including the domain name rjenni.ch
(limited to 100 certificates)
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
blog.rjenni.ch
blog.rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
home.rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
projects.rjenni.ch
sni215581.cloudflaressl.com
sni.cloudflaressl.com
sni215581.cloudflaressl.com
blog.rjenni.ch
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
phpmyadmin.rjenni.ch
mail.rjenni.ch
sni215581.cloudflaressl.com
git.rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
mail.rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
mail.rjenni.ch
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
dev.logbee.com.br
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
blog.rjenni.ch
blog.rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
home.rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
projects.rjenni.ch
sni215581.cloudflaressl.com
sni.cloudflaressl.com
sni215581.cloudflaressl.com
blog.rjenni.ch
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
phpmyadmin.rjenni.ch
mail.rjenni.ch
sni215581.cloudflaressl.com
git.rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
mail.rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
mail.rjenni.ch
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
rjenni.ch
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
sni215581.cloudflaressl.com
dev.logbee.com.br
Certificate
The complete raw certificate details for rjenni.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgISA8XVqy8ssjNQpjla04Sk2TsnMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MjEwMjM1MTRaFw0x OTA3MjAwMjM1MTRaMBQxEjAQBgNVBAMTCXJqZW5uaS5jaDCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBANc9timrzHskAlP8z2H4sYl0cucz0Em8TwEyNMWG sj9CsXgQ0FPks1JG7uCC34KEp7sJTAJArEAZ6/PyaKTE8JxFyTKTaREc9YuVxYqK VjqrPDsdTskP6Z4xujVz+DUhXjDjqfFcu0dV9M/Ss1aknO4mfKiPy5x9ZSCYLAkS YmSYW2tajSw3iYCfw2sEUfVSXrRa5dTOdStFwZzwQRZd8PD1tnRxB+xOIvO5tkZF tRiz6DLp0WXWwH84Faauf5ylYfNnsg6mV9gnWAoq1x1HCAaMMzx6EXAwMgFD5NGm Lo4/W0ijJwgJfRELtfreT7aB59YT2Tdb1v+vGsUGwAHudlEf+eX8CnhYDHjfdjDB U7w5XAVvksqsFHuTircGRGWpiJeYM4b32hKsnp5U6UYLi5w4BQe5U+OChOPFSQie RdDHtHqaf1YMXq4QZ9Fs3u31YkyyyWkoRKgvV3kh1iHDxCBT6SFZYRos49M+QR5D pfvIie6IriUjmv72VnKIHK9JapCfew3evnEQ1UmIXrzmigHGrApd1PsBpCXzskSF sHHzQjjDsj3ZhrSWL9YTYe7ypwlVeOwdwAJu+OHghjFtU1hnd3eTYf7TTdE2fdRX ayAyCFAuNkpkgUJX5FkpzOesu7o2z5FOktdHkQOZEbxAGd8Yd16q3A46G33/zB3t p/OnAgMBAAGjggJfMIICWzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFJbfnpz8XgZ Otj0pMY8F1JzDvb5MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJcmplbm5pLmNoMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAdH7a gzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFqPfZTBQAABAMASDBGAiEA pRcUeL3P7EJe5Ut6EK9fyA46jPNq3OPbz5i4XM3sSlQCIQD7yCnkZsMCvA3PYXsf 2a8dmzhzFI1FHA+yb9PYqDDyFQB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjix x2hUS9iNAAABaj32VPkAAAQDAEcwRQIgdlKTMvASQU5JMzGIJDnnLWHRiE4r8bzq u/pjwcKH46ACIQC8YOfUOpbfTG38VfQMxsmEYF5e7ArYfN1JfR7iMsoGczANBgkq hkiG9w0BAQsFAAOCAQEAL7YCA/wDyjxV37plr81Hb9NfxVGYAvNNp1YCVrE32Mm9 /T2cmfncpCxGr1IynBoPDy2nV5+DXl75r0RkokuvLyjj47cjU2M2N7Usuov1Yi/E JH4rwucu5hT1Lo8Jovx82BPHcmZ/+KWvqJYLorBkxgwvTEcFrPO9Ixd/44sO8waL njdtGTQ/8QtWBIT9oO6sESGoVw0aBepdh5nuf9L8aUS+laQ5iQ3UTRC6HYWUF//T gl4N9YQX/TlxedA28xewoU6M1PYmFSA82n6+gK2MD0CA6VfBsMel0AWgX3WpPaCJ yJBdmckOdr3GyAY56e4RJbUsF6JgEO89vsHrqsv1OA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1z22KavMeyQCU/zPYfix iXRy5zPQSbxPATI0xYayP0KxeBDQU+SzUkbu4ILfgoSnuwlMAkCsQBnr8/JopMTw nEXJMpNpERz1i5XFiopWOqs8Ox1OyQ/pnjG6NXP4NSFeMOOp8Vy7R1X0z9KzVqSc 7iZ8qI/LnH1lIJgsCRJiZJhba1qNLDeJgJ/DawRR9VJetFrl1M51K0XBnPBBFl3w 8PW2dHEH7E4i87m2RkW1GLPoMunRZdbAfzgVpq5/nKVh82eyDqZX2CdYCirXHUcI BowzPHoRcDAyAUPk0aYujj9bSKMnCAl9EQu1+t5PtoHn1hPZN1vW/68axQbAAe52 UR/55fwKeFgMeN92MMFTvDlcBW+SyqwUe5OKtwZEZamIl5gzhvfaEqyenlTpRguL nDgFB7lT44KE48VJCJ5F0Me0epp/VgxerhBn0Wze7fViTLLJaShEqC9XeSHWIcPE IFPpIVlhGizj0z5BHkOl+8iJ7oiuJSOa/vZWcogcr0lqkJ97Dd6+cRDVSYhevOaK AcasCl3U+wGkJfOyRIWwcfNCOMOyPdmGtJYv1hNh7vKnCVV47B3AAm744eCGMW1T WGd3d5Nh/tNN0TZ91FdrIDIIUC42SmSBQlfkWSnM56y7ujbPkU6S10eRA5kRvEAZ 3xh3XqrcDjobff/MHe2n86cCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 328656498481385054668686237332308122745639 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-21 02:35:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-20 02:35:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rjenni.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 878106917023338885756365258898830012363027400111783563968754767182696765736102368862124434620233136283019258885950388500251032923104438027292150977437980315976990975735106820601891101512759574234789680872282081463278310038123994660092727971826575267412093378514157226656768877228444654462188145567593564347144504987713087779416350209900736894528067294767474817029277264092901349129393606157825833531429923324523243905775052638075982523842669273884055800693600463559247595266365649506866063309265286270523057311528355787408202014569438157502668360835057469577142352466342779961812992396487935011873296856240964749447923302140657623045933814818647683694231148694443090196110135706212916609088680285769680932975469255207517593708754974338404600893208947170850451269135362639910042552748591440893184397466547943396883953634207337534217525026890147262576752692482248502553130934724811608270035289573049351194495333078996214866523030566052225304968201709775680976298786713101807104508985483913168216914234389517475166650624234061665604809993703563164955359007010276808630399348177348353614344316994569712413437054209804408819126352550382752059064536915447055692279108891524974687388359898370560265969949321666808703346883432082191673717671 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 525b7e7a73f178193ad8f4a4c63c1752730ef6f9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjenni.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a3df653050000040300483046022100a5171478bdcfec425ee54b7a10af5fc80e3a8cf36adce3dbcf98b85ccdec4a54022100fbc829e466c302bc0dcf617b1fd9af1d9b3873148d451c0fb26fd3d8a830f21500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a3df654f90000040300473045022076529332f012414e493331882439e72d61d1884e2bf1bceabbfa63c1c287e3a0022100bc60e7d43a96df4c6dfc55f40cc6c984605e5eec0ad87cdd497d1ee232ca0673 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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