magservei.bewin.altabox.net
Issued by R3
About this certificate
This digital certificate with serial number 03:5d:bb:fb:bc:a5:d7:0b:b2:46:25:92:71:ad:6f:d8:6c:28 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=magservei.bewin.altabox.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:5d:bb:fb:bc:a5:d7:0b:b2:46:25:92:71:ad:6f:d8:6c:28Serial Number (int): 293232990646883494270471783816590471490600
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 8f:e5:3a:39:da:1b:08:8a:d2:96:f9:78:a3:f6:3c:d4:11:09:42:18
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 10:72:ee:df:10:cb:04:37:8d:14:58:91:8c:8d:d7:4a:dc:9c:3c:0d
Fingerprint (sha256): 1f:5b:70:b6:76:50:bf:34:da:76:b6:bd:16:4e:ba:86:08:d3:c2:05:0c:82:44:d1:fa:c8:ef:aa:84:fc:cb:dd
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate magservei.bewin.altabox.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for magservei.bewin.altabox.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
magservei.bewin.altabox.net
magserveis.bewin.altabox.net
magserveis.bewin.altabox.net
Other certificates including the domain name altabox.net
(limited to 100 certificates)
altabox.net
orbea.altabox.net
psa.bewin.altabox.net
sat.stats.altabox.net
flightinfo.altabox.net
noq01.altabox.net
tracking.altabox.net
psa.bewin.altabox.net
altabox.net
coviran.altabox.net
inaem.bewin.altabox.net
sodexo.altabox.net
altabox.net
mdm.altabox.net
qmatic-app.altabox.net
altabox.net
noq01.altabox.net
altabox.net
magservei.bewin.altabox.net
yoigo.stats.altabox.net
orange.bewin.altabox.net
altabox.net
inaem.stats.altabox.net
psa.stats.altabox.net
juul.stats.altabox.net
server02.altabox.net
cdn.altabox.net
eci.bewin.altabox.net
fira.altabox.net
eci.bewin.altabox.net
magservei.stats.altabox.net
altabox.net
server01.altabox.net
eci.bewin.altabox.net
sodexo-connector.altabox.net
kentia.altabox.net
count.altabox.net
sat.stats.altabox.net
edp.stats.altabox.net
orbeawebvert.altabox.net
count.altabox.net
orange.bewin.altabox.net
masymas.stats.altabox.net
sodexo-connector.altabox.net
kentia.altabox.net
altabox.net
aspy.stats.altabox.net
dev03.altabox.net
altabox.net
inaem.stats.altabox.net
qmatic-app.altabox.net
edp.bewin.altabox.net
slucia.stats.altabox.net
streaming.altabox.net
kentia.altabox.net
sodexo-connector.altabox.net
kentia.altabox.net
caixa-connector.altabox.net
psa.bewin.altabox.net
server02.altabox.net
noq01.altabox.net
ikea.stats.altabox.net
kentia.altabox.net
eci.bewin.altabox.net
qmatic-app.altabox.net
orange.stats.altabox.net
sodexo-connector.altabox.net
orbea.altabox.net
orbeaweb.altabox.net
orange.bewin.altabox.net
edp.api.altabox.net
magservei.bewin.altabox.net
altabox.net
orbea.altabox.net
kentia.altabox.net
orbea.altabox.net
sodexo-connector.altabox.net
altabox.net
orbea.altabox.net
server01.altabox.net
server02.altabox.net
server02.altabox.net
inaem.stats.altabox.net
noc.altabox.net
eci.stats.altabox.net
flightinfo.altabox.net
edp.api.altabox.net
sodexo-connector.altabox.net
samsung.altabox.net
slucia.bewin.altabox.net
s3.altabox.net
altabox.net
fira.altabox.net
mesh.altabox.net
altabox.net
server02.altabox.net
psa.stats.altabox.net
showroom.noq01.altabox.net
altabox.net
altabox.net
orbea.altabox.net
psa.bewin.altabox.net
sat.stats.altabox.net
flightinfo.altabox.net
noq01.altabox.net
tracking.altabox.net
psa.bewin.altabox.net
altabox.net
coviran.altabox.net
inaem.bewin.altabox.net
sodexo.altabox.net
altabox.net
mdm.altabox.net
qmatic-app.altabox.net
altabox.net
noq01.altabox.net
altabox.net
magservei.bewin.altabox.net
yoigo.stats.altabox.net
orange.bewin.altabox.net
altabox.net
inaem.stats.altabox.net
psa.stats.altabox.net
juul.stats.altabox.net
server02.altabox.net
cdn.altabox.net
eci.bewin.altabox.net
fira.altabox.net
eci.bewin.altabox.net
magservei.stats.altabox.net
altabox.net
server01.altabox.net
eci.bewin.altabox.net
sodexo-connector.altabox.net
kentia.altabox.net
count.altabox.net
sat.stats.altabox.net
edp.stats.altabox.net
orbeawebvert.altabox.net
count.altabox.net
orange.bewin.altabox.net
masymas.stats.altabox.net
sodexo-connector.altabox.net
kentia.altabox.net
altabox.net
aspy.stats.altabox.net
dev03.altabox.net
altabox.net
inaem.stats.altabox.net
qmatic-app.altabox.net
edp.bewin.altabox.net
slucia.stats.altabox.net
streaming.altabox.net
kentia.altabox.net
sodexo-connector.altabox.net
kentia.altabox.net
caixa-connector.altabox.net
psa.bewin.altabox.net
server02.altabox.net
noq01.altabox.net
ikea.stats.altabox.net
kentia.altabox.net
eci.bewin.altabox.net
qmatic-app.altabox.net
orange.stats.altabox.net
sodexo-connector.altabox.net
orbea.altabox.net
orbeaweb.altabox.net
orange.bewin.altabox.net
edp.api.altabox.net
magservei.bewin.altabox.net
altabox.net
orbea.altabox.net
kentia.altabox.net
orbea.altabox.net
sodexo-connector.altabox.net
altabox.net
orbea.altabox.net
server01.altabox.net
server02.altabox.net
server02.altabox.net
inaem.stats.altabox.net
noc.altabox.net
eci.stats.altabox.net
flightinfo.altabox.net
edp.api.altabox.net
sodexo-connector.altabox.net
samsung.altabox.net
slucia.bewin.altabox.net
s3.altabox.net
altabox.net
fira.altabox.net
mesh.altabox.net
altabox.net
server02.altabox.net
psa.stats.altabox.net
showroom.noq01.altabox.net
altabox.net
altabox.net
Certificate
The complete raw certificate details for magservei.bewin.altabox.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISA127+7yl1wuyRiWSca1v2GwoMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA1MDgyMjAwMDZaFw0yMjA4MDYyMjAwMDVaMCYxJDAiBgNVBAMT G21hZ3NlcnZlaS5iZXdpbi5hbHRhYm94Lm5ldDCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANyyZhQAxdON/MbWUMu3ZqTe8YmgkW3vqXu5z6FO6M6z9cq8 zgbWDsP98w+BIR9N3kO55lYDuoDZIApdy+ME17w+G355LolWLiP6PS2NoIs8wIj1 j++K+MNRvOJ3Xe/rxQzswCCSDWS5yA8F0AoDME6vSHRDTLPM6n9CSNn/TQ4FAKlv 1LJ462H+FkIOMGaLe1dQc8lus1KBkuv6bCqheLBelp8no1U3FuYG5v+MfOWyU1em NeTqjxYgQAqMQ5FP9JKVYd6HFGcRId+XADbJjinw9RKSc9liCnsRoQJZVNHwoowe 3hfiUH0EY1YZDMblwouW+xrGLMIxv6mSIsrgSSkCAwEAAaOCAnUwggJxMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUj+U6OdobCIrSlvl4o/Y81BEJQhgwHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wRAYDVR0RBD0wO4IbbWFnc2VydmVpLmJld2luLmFsdGFi b3gubmV0ghxtYWdzZXJ2ZWlzLmJld2luLmFsdGFib3gubmV0MEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAQcjK sd8iRkoQxqE6CUKHXk4xixsD6+tLx2jwkGKWBvYAAAGApebFtgAABAMARzBFAiAq QnuqCVYZ62rDh8V/fdKZNQ372z1sbq3+86JNw7h4JgIhAKEjOdSO6K63kp33Y1c1 EiIDxI7JHLIdRk2yjCZkB/soAHcARqVV63X6kSAwtaKJafTzfREsQXS+/Um4havy /HD+bUcAAAGApebFzAAABAMASDBGAiEA/0zf94TyXppjSDhJYOMhWyf2YsLi1Ylc Znl0Ca2rHYYCIQCc0fh98XbFvPeykud7cMcfOiCe0xyVv7NFyBLg6F2ThDANBgkq hkiG9w0BAQsFAAOCAQEAbAPeOxNkCkLD32OsQyl88DfF/B7rQ6vZhfEvhhJ71eUa UGCo2jRFG7EWtPewPzptfq0xnNjl0CFZWwTXuZ9H+MV8Mr3jedVqkXNQmk4933h/ 2Oj2DJ7XwKV7BYZO0GuPaINL5iR0X6ht9Zrq+dX+aVDk0jmKEAQn2o06HPhiYjY+ r+M0CW8FUCuqCehGX+vlUh+XkJwGicWJf+X0AvqhhbhoxvfxR6RNawOQ9vgroh1d y9O+PIlnmDjPH2TtG7XlLIqFdwxziS2GBHzNseKX5ki7Y10MbHTkskVB6jWjlPOW c4TMMMCued4kS7v5mKSIGxvSoOsXs0tZyeX5Frb43A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LJmFADF0438xtZQy7dm pN7xiaCRbe+pe7nPoU7ozrP1yrzOBtYOw/3zD4EhH03eQ7nmVgO6gNkgCl3L4wTX vD4bfnkuiVYuI/o9LY2gizzAiPWP74r4w1G84ndd7+vFDOzAIJINZLnIDwXQCgMw Tq9IdENMs8zqf0JI2f9NDgUAqW/UsnjrYf4WQg4wZot7V1BzyW6zUoGS6/psKqF4 sF6WnyejVTcW5gbm/4x85bJTV6Y15OqPFiBACoxDkU/0kpVh3ocUZxEh35cANsmO KfD1EpJz2WIKexGhAllU0fCijB7eF+JQfQRjVhkMxuXCi5b7GsYswjG/qZIiyuBJ KQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 293232990646883494270471783816590471490600 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-08 22:00:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-06 22:00:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magservei.bewin.altabox.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27860398791319151713108832182221488562166942862734166210725090841718067887509236707637239572448808201567578758244104797832507431684195266168197024807940517514901334306235709092027185137210961652429425953323900774711283060015960036649306033045641859589296483483793014130622422247355624230023055190998473883477778828797587502479205355858324305738769088792463339312267448556635411848283490009920925961295730739085401771966230059355406328444234999507385596728356087275518606096019425183005489203222757228517825397121773877790774462251456081104391700753861575559403924154614147185748769530133596105319015348310239107631401 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8fe53a39da1b088ad296f978a3f63cd411094218 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magservei.bewin.altabox.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magserveis.bewin.altabox.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000180a5e6c5b6000004030047304502202a427baa095619eb6ac387c57f7dd299350dfbdb3d6c6eadfef3a24dc3b87826022100a12339d48ee8aeb7929df7635735122203c48ec91cb21d464db28c266407fb2800770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000180a5e6c5cc0000040300483046022100ff4cdff784f25e9a6348384960e3215b27f662c2e2d5895c66797409adab1d860221009cd1f87df176c5bcf7b292e77b70c71f3a209ed31c95bfb345c812e0e85d9384 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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