presse.vous.sncf-connect.com
Issued by R3
About this certificate
This digital certificate with serial number 03:97:24:9d:4e:f0:36:e2:f1:e6:86:3f:5c:64:96:42:72:43 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=presse.vous.sncf-connect.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:97:24:9d:4e:f0:36:e2:f1:e6:86:3f:5c:64:96:42:72:43Serial Number (int): 312768164199857189500565547262778932359747
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b1:38:f4:ae:e4:01:bd:e8:cd:d2:c3:ee:f0:93:ae:33:8e:44:17:18
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): e4:92:32:0e:3f:c0:e6:00:c3:a0:b1:21:09:1d:fa:13:7d:01:23:f0
Fingerprint (sha256): 1f:e8:e6:4d:b7:75:2e:fb:cf:9e:b9:4a:c5:e6:4f:b7:1b:28:cb:bf:82:00:49:5b:e8:a1:5e:ae:b5:f5:5c:0a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate presse.vous.sncf-connect.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for presse.vous.sncf-connect.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
presse.ouitalk.oui.sncf
presse.vous.sncf-connect.com
presse.vous.sncf-connect.com
Other certificates including the domain name sncf-connect.com
(limited to 100 certificates)
wiz.sncf-connect.com
hiflow.sncf-connect.com
sncfconnect.com
m3.mail.sncf-connect.com
hiflow.sncf-connect.com
wiz.sncf-connect.com
sncf.com
sncf.com
wiz.sncf-connect.com
preprod.partenaires.sncf-connect.com
r.satisfaction.sncf-connect.com
juniorcie.sncf-connect.com
wiz.sncf-connect.com
monchauffeur.sncf-connect.com
presse.ouitalk.oui.sncf
ibis.sncf-connect.com
mirror.avis.co.uk
m.mail.sncf-connect.com
juniorcie.sncf-connect.com
r.satisfaction.sncf-connect.com
wiz.sncf-connect.com
wiz.sncf-connect.com
m4.mail.sncf-connect.com
vous.sncf-connect.com
res4.mail.sncf-connect.com
all.sncf-connect.com
presse.ouitalk.oui.sncf
wiz.sncf-connect.com
wiz.sncf-connect.com
presse.vous.sncf-connect.com
m7.service.sncf-connect.com
hiflow.sncf-connect.com
wiz.sncf-connect.com
vous.sncf-connect.com
wiz.sncf-connect.com
wiz.sncf-connect.com
vous.sncf-connect.com
forms.sncf-connect.com
sncf-connect.com
presse.ouitalk.oui.sncf
hiflow.sncf-connect.com
sncfconnect.com
ibis.sncf-connect.com
*.reseau.sncf.fr
sncf.com
monchauffeur.sncf-connect.com
lebar.sncf-connect.com
vous.sncf-connect.com
*.sncf-connect.com
monchauffeur.sncf-connect.com
all.sncf-connect.com
mirror.avis.co.uk
hiflow.sncf-connect.com
hiflow.sncf-connect.com
hiflow.sncf-connect.com
hiflow.sncf-connect.com
*.reseau.sncf.fr
preprod.ibis.sncf-connect.com
*.monidentifiant.sncf
uat.avis.co.uk
hiflow.sncf-connect.com
t.mail.sncf-connect.com
presse.ouitalk.oui.sncf
wildcard.sncf-connect.com
vous.sncf-connect.com
monchauffeur.sncf-connect.com
restaurationabord.sncf-connect.com
presse.vous.sncf-connect.com
preprod-inspirations.sncf-connect.com
vous.sncf-connect.com
forms.sncf-connect.com
partenaires.sncf-connect.com
sncf-connect.com
presse.vous.sncf-connect.com
r.satisfaction.sncf-connect.com
r.satisfaction.sncf-connect.com
vous.sncf-connect.com
mesbagages.sncf-connect.com
monchauffeur.sncf-connect.com
vous.sncf-connect.com
uat.vous.sncf-connect.com
mesbagages.sncf-connect.com
preprod-inspirations.sncf-connect.com
r.satisfaction.sncf-connect.com
lebar.sncf-connect.com
presse.ouitalk.oui.sncf
*.sncf-connect.com
all.sncf-connect.com
hiflow.sncf-connect.com
ibis.sncf-connect.com
monchauffeur.sncf-connect.com
r.satisfaction.sncf-connect.com
presse.vous.sncf-connect.com
sncf.com
sncfconnect.com
r.satisfaction.sncf-connect.com
*.avisworld.com
res.mail.sncf-connect.com
t5.mail.sncf-connect.com
r.satisfaction.sncf-connect.com
hiflow.sncf-connect.com
sncfconnect.com
m3.mail.sncf-connect.com
hiflow.sncf-connect.com
wiz.sncf-connect.com
sncf.com
sncf.com
wiz.sncf-connect.com
preprod.partenaires.sncf-connect.com
r.satisfaction.sncf-connect.com
juniorcie.sncf-connect.com
wiz.sncf-connect.com
monchauffeur.sncf-connect.com
presse.ouitalk.oui.sncf
ibis.sncf-connect.com
mirror.avis.co.uk
m.mail.sncf-connect.com
juniorcie.sncf-connect.com
r.satisfaction.sncf-connect.com
wiz.sncf-connect.com
wiz.sncf-connect.com
m4.mail.sncf-connect.com
vous.sncf-connect.com
res4.mail.sncf-connect.com
all.sncf-connect.com
presse.ouitalk.oui.sncf
wiz.sncf-connect.com
wiz.sncf-connect.com
presse.vous.sncf-connect.com
m7.service.sncf-connect.com
hiflow.sncf-connect.com
wiz.sncf-connect.com
vous.sncf-connect.com
wiz.sncf-connect.com
wiz.sncf-connect.com
vous.sncf-connect.com
forms.sncf-connect.com
sncf-connect.com
presse.ouitalk.oui.sncf
hiflow.sncf-connect.com
sncfconnect.com
ibis.sncf-connect.com
*.reseau.sncf.fr
sncf.com
monchauffeur.sncf-connect.com
lebar.sncf-connect.com
vous.sncf-connect.com
*.sncf-connect.com
monchauffeur.sncf-connect.com
all.sncf-connect.com
mirror.avis.co.uk
hiflow.sncf-connect.com
hiflow.sncf-connect.com
hiflow.sncf-connect.com
hiflow.sncf-connect.com
*.reseau.sncf.fr
preprod.ibis.sncf-connect.com
*.monidentifiant.sncf
uat.avis.co.uk
hiflow.sncf-connect.com
t.mail.sncf-connect.com
presse.ouitalk.oui.sncf
wildcard.sncf-connect.com
vous.sncf-connect.com
monchauffeur.sncf-connect.com
restaurationabord.sncf-connect.com
presse.vous.sncf-connect.com
preprod-inspirations.sncf-connect.com
vous.sncf-connect.com
forms.sncf-connect.com
partenaires.sncf-connect.com
sncf-connect.com
presse.vous.sncf-connect.com
r.satisfaction.sncf-connect.com
r.satisfaction.sncf-connect.com
vous.sncf-connect.com
mesbagages.sncf-connect.com
monchauffeur.sncf-connect.com
vous.sncf-connect.com
uat.vous.sncf-connect.com
mesbagages.sncf-connect.com
preprod-inspirations.sncf-connect.com
r.satisfaction.sncf-connect.com
lebar.sncf-connect.com
presse.ouitalk.oui.sncf
*.sncf-connect.com
all.sncf-connect.com
hiflow.sncf-connect.com
ibis.sncf-connect.com
monchauffeur.sncf-connect.com
r.satisfaction.sncf-connect.com
presse.vous.sncf-connect.com
sncf.com
sncfconnect.com
r.satisfaction.sncf-connect.com
*.avisworld.com
res.mail.sncf-connect.com
t5.mail.sncf-connect.com
r.satisfaction.sncf-connect.com
Certificate
The complete raw certificate details for presse.vous.sncf-connect.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISA5cknU7wNuLx5oY/XGSWQnJDMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA0MDQwNDEyNTJaFw0yMjA3MDMwNDEyNTFaMCcxJTAjBgNVBAMT HHByZXNzZS52b3VzLnNuY2YtY29ubmVjdC5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD3Dbnb2V+MWy5ClMgv83OKlwsWDUByX+Wgjx10zOT2E/4D Rm3z0xBPbhkd299zjPAtrQwVyGTYT+KOWEargop//5oZ8pkR2iAVPyItmJ/V/4Pu WHlGgjaJmBTeuWUR8M3cpV9POXapdu0PXBA8kIJId/Pnpz9pO1Kw7PsbrrwGjS6/ pCRxBggsj8huhqQe5CtLhCCav6WxxJj4japRQFclIsd1wgWWWlXi3t+uP3ECqiO5 5d1DbSJ3AJnqt6M8JW0mzym7OYn3PrZrinT4M4b6stb6EBrzCivvqGXmYDv+spFE yvrBe6UqqaYl5HQH+ApvFXjBBARj7tz3G/BXX8mvAgMBAAGjggJwMIICbDAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFLE49K7kAb3ozdLD7vCTrjOORBcYMB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMEAGA1UdEQQ5MDeCF3ByZXNzZS5vdWl0YWxrLm91aS5z bmNmghxwcmVzc2Uudm91cy5zbmNmLWNvbm5lY3QuY29tMEwGA1UdIARFMEMwCAYG Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu bGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcAKXm+8J45 OSHwVnOfY6V35b5XfZxgCvj5TV0mXCVdx4QAAAF/8v16agAABAMASDBGAiEAsoRY AyShK72BH6lLb8gl1yln31+PAcJoC59LPxTgdE4CIQDrdPX0BPtEnbvQRKic+vXg nk4Nt2UFe14wrfV1/DpZtgB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgia N9kTAAABf/L9etoAAAQDAEYwRAIgTiUaEWkiXTXfy4tlpJKn/PIcLk+Hlh07ckce YDOu4PwCIHIfp/oxMahHm+QBzn1z1tngbG6WlpaId/DGFgwmDCpQMA0GCSqGSIb3 DQEBCwUAA4IBAQB10I/acYuh8duG2xSQIRCR53NIG0VfsXG4UmjUVlcShdvw2NEk Y5ADq83f59woBapxGemAoUopKnZWdJCb78mxwYHutjn1CF24//gLdDXR16DDiS7H WTcoJvfgyJcvNxMHaq3nQmxG40PGYTP4KmG6egLUGtKO7Fq96uKA16JiJJMvmT6n cwRwnCx4Qytr5KbSwbvlVZ8bIyhAju7b79m13/C22ZcBe87Ej8hYF0fTeIqExoze LZDUnQa/43UE84lxi5qyS7ENamelyt/I/DFJSdFWabHzt0/9d4preYXYrDfigYNV BmAm6w+LJT/v0IG7vhX9Ps/I1iupMo0bg6Kd -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9w2529lfjFsuQpTIL/Nz ipcLFg1Acl/loI8ddMzk9hP+A0Zt89MQT24ZHdvfc4zwLa0MFchk2E/ijlhGq4KK f/+aGfKZEdogFT8iLZif1f+D7lh5RoI2iZgU3rllEfDN3KVfTzl2qXbtD1wQPJCC SHfz56c/aTtSsOz7G668Bo0uv6QkcQYILI/IboakHuQrS4Qgmr+lscSY+I2qUUBX JSLHdcIFllpV4t7frj9xAqojueXdQ20idwCZ6rejPCVtJs8puzmJ9z62a4p0+DOG +rLW+hAa8wor76hl5mA7/rKRRMr6wXulKqmmJeR0B/gKbxV4wQQEY+7c9xvwV1/J rwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 312768164199857189500565547262778932359747 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-04 04:12:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-03 04:12:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'presse.vous.sncf-connect.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31187629874849275926576847635776837411564125878416504502218499024802603453656981352463828316384409000741433233612110640731393303912282968370216405456747905505648953398116029883161875864868176889644626767709263472151944595935066903070080655387739540605541783881146636415204449139424162805595049357287875128606133139630857523405231289178177601976660420477699114103235639259975177953099196632892561303774365024651354847274846518400646812487948801607005850962584189531388086154986697029900612581163408149166197041574560428000034026531996304626775651937169027781867139052400791849587949500734297336151840195037096902117807 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b138f4aee401bde8cdd2c3eef093ae338e441718 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presse.ouitalk.oui.sncf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presse.vous.sncf-connect.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017ff2fd7a6a0000040300483046022100b284580324a12bbd811fa94b6fc825d72967df5f8f01c2680b9f4b3f14e0744e022100eb74f5f404fb449dbbd044a89cfaf5e09e4e0db765057b5e30adf575fc3a59b60075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017ff2fd7ada000004030046304402204e251a1169225d35dfcb8b65a492a7fcf21c2e4f87961d3b72471e6033aee0fc0220721fa7fa3131a8479be401ce7d73d6d9e06c6e9696968877f0c6160c260c2a50 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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