basarpcsi.eg.refer.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:59:e6:b0:a3:b6:3c:d9:98:71:37:4a:7a:1c:f5:62:96:2e was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=basarpcsi.eg.refer.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:59:e6:b0:a3:b6:3c:d9:98:71:37:4a:7a:1c:f5:62:96:2eSerial Number (int): 291928628054993019098741232791925544883758
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9c:6b:9e:87:95:95:c5:14:b6:75:af:5d:d5:04:e4:ce:17:67:a2:60
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): fc:ea:05:42:0a:18:04:b2:0b:09:df:9d:fc:ff:6a:bd:cd:15:ea:6a
Fingerprint (sha256): 1f:8e:cc:44:b4:1d:27:61:9c:4b:c4:14:15:83:7e:58:bf:ee:14:fa:79:05:31:9f:fb:5a:ce:17:c8:99:4b:aa
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate basarpcsi.eg.refer.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for basarpcsi.eg.refer.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
basarpcsi.eg.refer.org
tice.eg.refer.org
tice.eg.refer.org
Other certificates including the domain name refer.org
(limited to 100 certificates)
senghor.refer.org
basarpcsi.eg.refer.org
examens.refer.org
listes.cm.refer.org
*.refer.org
foad.refer.org
fad-damanhour.eg.refer.org
senghor.refer.org
listes.cm.refer.org
examens.refer.org
listes.cm.refer.org
listes.cm.refer.org
listes.cm.refer.org
basarpcsi.eg.refer.org
www.eg.auf.org
adip.eg.refer.org
foad.refer.org
fad-damanhour.eg.refer.org
examens.refer.org
examens.refer.org
foad.refer.org
foad.refer.org
cnf-tripoli.eg.refer.org
senghor.refer.org
*.refer.org
www.eg.auf.org
mooc.refer.org
www.eg.auf.org
tg.refer.org
adip.eg.refer.org
foad.refer.org
examens.refer.org
listes.cm.refer.org
mooc.refer.org
foad.refer.org
senghor.refer.org
adip.eg.refer.org
mooc.refer.org
cnf-tripoli.eg.refer.org
www.eg.auf.org
mooc.refer.org
senghor.refer.org
www.eg.auf.org
fad-damanhour.eg.refer.org
listes.cm.refer.org
www.eg.auf.org
www.eg.auf.org
foad.refer.org
mooc.refer.org
examens.refer.org
basarpcsi.eg.refer.org
tg.refer.org
critique-mediatique.eg.refer.org
*.refer.org
basarpcsi.eg.refer.org
certificationtice102.refer.org
mooc.refer.org
basarpcsi.eg.refer.org
adip.eg.refer.org
examens.refer.org
foad.refer.org
listes.cm.refer.org
senghor.refer.org
examens.refer.org
critique-mediatique.eg.refer.org
mooc.refer.org
critique-mediatique.eg.refer.org
mooc.refer.org
tg.refer.org
examens.refer.org
*.refer.org
listes.cm.refer.org
listes.cm.refer.org
listes.cm.refer.org
adip.eg.refer.org
critique-mediatique.eg.refer.org
adip.eg.refer.org
foad.refer.org
critique-mediatique.eg.refer.org
fad-damanhour.eg.refer.org
fad-damanhour.eg.refer.org
foad.refer.org
senghor.refer.org
listes.cm.refer.org
refer.org
fad-damanhour.eg.refer.org
adip.eg.refer.org
senghor.refer.org
basarpcsi.eg.refer.org
fad-damanhour.eg.refer.org
veilleauf.refer.org
senghor.refer.org
listes.cm.refer.org
mooc.refer.org
*.refer.org
*.refer.org
basarpcsi.eg.refer.org
cnf-tripoli.eg.refer.org
critique-mediatique.eg.refer.org
www.eg.auf.org
basarpcsi.eg.refer.org
examens.refer.org
listes.cm.refer.org
*.refer.org
foad.refer.org
fad-damanhour.eg.refer.org
senghor.refer.org
listes.cm.refer.org
examens.refer.org
listes.cm.refer.org
listes.cm.refer.org
listes.cm.refer.org
basarpcsi.eg.refer.org
www.eg.auf.org
adip.eg.refer.org
foad.refer.org
fad-damanhour.eg.refer.org
examens.refer.org
examens.refer.org
foad.refer.org
foad.refer.org
cnf-tripoli.eg.refer.org
senghor.refer.org
*.refer.org
www.eg.auf.org
mooc.refer.org
www.eg.auf.org
tg.refer.org
adip.eg.refer.org
foad.refer.org
examens.refer.org
listes.cm.refer.org
mooc.refer.org
foad.refer.org
senghor.refer.org
adip.eg.refer.org
mooc.refer.org
cnf-tripoli.eg.refer.org
www.eg.auf.org
mooc.refer.org
senghor.refer.org
www.eg.auf.org
fad-damanhour.eg.refer.org
listes.cm.refer.org
www.eg.auf.org
www.eg.auf.org
foad.refer.org
mooc.refer.org
examens.refer.org
basarpcsi.eg.refer.org
tg.refer.org
critique-mediatique.eg.refer.org
*.refer.org
basarpcsi.eg.refer.org
certificationtice102.refer.org
mooc.refer.org
basarpcsi.eg.refer.org
adip.eg.refer.org
examens.refer.org
foad.refer.org
listes.cm.refer.org
senghor.refer.org
examens.refer.org
critique-mediatique.eg.refer.org
mooc.refer.org
critique-mediatique.eg.refer.org
mooc.refer.org
tg.refer.org
examens.refer.org
*.refer.org
listes.cm.refer.org
listes.cm.refer.org
listes.cm.refer.org
adip.eg.refer.org
critique-mediatique.eg.refer.org
adip.eg.refer.org
foad.refer.org
critique-mediatique.eg.refer.org
fad-damanhour.eg.refer.org
fad-damanhour.eg.refer.org
foad.refer.org
senghor.refer.org
listes.cm.refer.org
refer.org
fad-damanhour.eg.refer.org
adip.eg.refer.org
senghor.refer.org
basarpcsi.eg.refer.org
fad-damanhour.eg.refer.org
veilleauf.refer.org
senghor.refer.org
listes.cm.refer.org
mooc.refer.org
*.refer.org
*.refer.org
basarpcsi.eg.refer.org
cnf-tripoli.eg.refer.org
critique-mediatique.eg.refer.org
www.eg.auf.org
Certificate
The complete raw certificate details for basarpcsi.eg.refer.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgISA1nmsKO2PNmYcTdKehz1YpYuMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjcwNDU4NDBaFw0x OTExMjUwNDU4NDBaMCExHzAdBgNVBAMTFmJhc2FycGNzaS5lZy5yZWZlci5vcmcw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg/Dac+9zK6cFbZDIGwM52 7SMqAiYMeZJfcXkO3Fqt+oTkm0C4okxPTOAiLU6sjQ9NiLM3x/BDpDl3GPz8wt5T woH3H3blHrKZiitCv0DfNG59yUhAQ+oAogXjtmqfYYUn3X5ckWwMtW8omtVahoDL 50gxpdroL24TMOPT9uTHApl79u2b/c0PhDs8lwHXWh+g8uL+Z+7+ZLAn2zztj6nb 0MfPem0f0sJmOC3JaVPmdjSrxF20xN57iq483X8gOu/fgr/wABWQ8/4SfGiXgpH4 hbx7mo3LXFUnaAsabJ4FgyvEBqoqGMKyrNJE/KetczvlUt+hUr4W40tRV1ln1xhD AgMBAAGjggJ9MIICeTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJxrnoeVlcUUtnWv XdUE5M4XZ6JgMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wNAYDVR0RBC0wK4IWYmFzYXJwY3NpLmVnLnJlZmVyLm9yZ4IR dGljZS5lZy5yZWZlci5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC 3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIg CMY3NXnmEHvMVgAAAWzRp6R9AAAEAwBGMEQCIGtrLW/C6Heqy5gTQx7N7qOiBBVl u0Zg+epkFmkafBwmAiA8RD/1gw4eNwJnFzqrD0AyXFPMRfAr2GOuIJvZFP86LwB2 ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABbNGnppAAAAQDAEcw RQIhAJzJjqaijvaxTi1mm8gDeC2GU27MLZWkSNQUXPzfMMJNAiADzsIdth5BltCc qLWkjKWKQ4WST8YbF4GjYduPpafYOTANBgkqhkiG9w0BAQsFAAOCAQEAcA+2vHB6 4NORQtZluuzjqr2jf8jtBjb5pJujoBUn6vnEDJofemUNglKfT2BN5T5zAEaab6zN QVH+ZlF1G+BhDTr0agTrYhWEJ2G1/5ccFeEN8w7OxRl50Gjw1AVrUpalX0hp7Gar 1IIJlsMYGaz1rWmBHWBJLsswScgow69dwU82SfYMYWfq9NKDkg6UOxMmN3ids8pz 6tlsHwMAZ9P+xUXRhT6jz71pn3ehrycWP6LMHpOA8/oCXZTZEByFMMAz/+zBxxCg RMCIlB4aj4E165jrwfb4VTAUaIw8AwnpJyXywih84ERzzV2Gy0GkrZuX/pe8YJjg vveWtp8tY2o8ZQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Pw2nPvcyunBW2QyBsDO du0jKgImDHmSX3F5DtxarfqE5JtAuKJMT0zgIi1OrI0PTYizN8fwQ6Q5dxj8/MLe U8KB9x925R6ymYorQr9A3zRufclIQEPqAKIF47Zqn2GFJ91+XJFsDLVvKJrVWoaA y+dIMaXa6C9uEzDj0/bkxwKZe/btm/3ND4Q7PJcB11ofoPLi/mfu/mSwJ9s87Y+p 29DHz3ptH9LCZjgtyWlT5nY0q8RdtMTee4quPN1/IDrv34K/8AAVkPP+Enxol4KR +IW8e5qNy1xVJ2gLGmyeBYMrxAaqKhjCsqzSRPynrXM75VLfoVK+FuNLUVdZZ9cY QwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 291928628054993019098741232791925544883758 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 04:58:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 04:58:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'basarpcsi.eg.refer.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28401751342213631019452036389101674233711707561912192165448450264570363816108790712364548785239712848719582121123587055906159281197093336186706097396088647515318746744755407795006570608133335351811335128551267858258530514971301317735738789528650980128116502984154163991679651554716450694153188898078240941092645339614178010976565010130325171309934439002866919892407768171581761062284829680164267006944613281598670330501746084993488720363085087533119762096026199720713738228757139832257062659422714131240998400200296174015841054263373629780098412706040310472800150376438942486249688409473096662901632179984332735584323 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9c6b9e879595c514b675af5dd504e4ce1767a260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basarpcsi.eg.refer.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tice.eg.refer.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cd1a7a47d000004030046304402206b6b2d6fc2e877aacb9813431ecdeea3a2041565bb4660f9ea6416691a7c1c2602203c443ff5830e1e370267173aab0f40325c53cc45f02bd863ae209bd914ff3a2f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cd1a7a69000000403004730450221009cc98ea6a28ef6b14e2d669bc803782d86536ecc2d95a448d4145cfcdf30c24d022003cec21db61e4196d09ca8b5a48ca58a4385924fc61b1781a361db8fa5a7d839 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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