mail.msqpartners.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:25:c9:ad:47:6f:20:c3:af:de:b0:75:b3:e1:da:9b:5b:50 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mail.msqpartners.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:25:c9:ad:47:6f:20:c3:af:de:b0:75:b3:e1:da:9b:5b:50Serial Number (int): 274195379914720305693373036399038194998096
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ab:cf:04:8c:0d:21:db:04:2d:66:ea:fb:b9:9b:44:3b:03:63:fe:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 59:89:26:2f:60:e4:74:69:92:4b:c9:93:f7:15:12:2e:39:bb:39:a0
Fingerprint (sha256): 22:c6:53:07:07:08:32:79:aa:29:03:83:7b:a3:45:cf:3a:fe:b0:4d:25:d4:9c:5f:a9:95:89:f2:72:29:8a:02
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate mail.msqpartners.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.msqpartners.com
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.msqpartners.com
autodiscover.smartscommunicate.com
mail.msqpartners.com
ms-250-ex2010-1.mediasquare.net
autodiscover.smartscommunicate.com
mail.msqpartners.com
ms-250-ex2010-1.mediasquare.net
Other certificates including the domain name msqpartners.com
(limited to 100 certificates)
msqpartners.com
msqpartners.com
tcr.msqpartners.com
email.msqpartners.com
msqpartners.com
stats.msqpartners.com
msqpartners.com
chat.msqpartners.com
msqpartners.com
*.msqpartners.com
msqpartners.com
zimbra1.msqpartners.com
helpdesk.msqpartners.com
mail.msqpartners.com
mail.msqpartners.com
pbx.msqpartners.com
stats.msqpartners.com
helpdesk.msqpartners.com
pbx.msqpartners.com
twentysixdigital.com
email.msqpartners.com
stats.msqpartners.com
msqpartners.com
helpdesk.msqpartners.com
www.msqpartners.com
mail.msqpartners.com
*.msqpartners.com
mail.msqpartners.com
stats.msqpartners.com
email.msqpartners.com
tcr.msqpartners.com
zimbra1.msqpartners.com
cloud.msqpartners.com
stats.msqpartners.com
twentysixdigital.com
cloud.msqpartners.com
helpdesk.msqpartners.com
msqpartners.com
karisma.biz
karisma.biz
twentysixdigital.com
karisma.biz
*.msqpartners.com
msqpartners.com
helpdesk.msqpartners.com
www.msqpartners.com
helpdesk.msqpartners.com
orangescrum.msqpartners.com
msqpartners.com
stats.msqpartners.com
procurefest.msqit.com
msqpartners.com
*.msqpartners.com
metabase.msqpartners.com
msqpartners.com
zimbra1.msqpartners.com
karisma.biz
helpdesk.msqpartners.com
chat.msqpartners.com
nextcloud.msqpartners.com
onlyoffice.msqpartners.com
helpdesk.msqpartners.com
msqpartners.com
www.msqpartners.com
karisma.biz
mail.msqpartners.com
mail.msqpartners.com
*.msqpartners.com
nextcloud.msqpartners.com
tcr.msqpartners.com
email.msqpartners.com
msqpartners.com
tcr.msqpartners.com
email.msqpartners.com
msqpartners.com
stats.msqpartners.com
msqpartners.com
chat.msqpartners.com
msqpartners.com
*.msqpartners.com
msqpartners.com
zimbra1.msqpartners.com
helpdesk.msqpartners.com
mail.msqpartners.com
mail.msqpartners.com
pbx.msqpartners.com
stats.msqpartners.com
helpdesk.msqpartners.com
pbx.msqpartners.com
twentysixdigital.com
email.msqpartners.com
stats.msqpartners.com
msqpartners.com
helpdesk.msqpartners.com
www.msqpartners.com
mail.msqpartners.com
*.msqpartners.com
mail.msqpartners.com
stats.msqpartners.com
email.msqpartners.com
tcr.msqpartners.com
zimbra1.msqpartners.com
cloud.msqpartners.com
stats.msqpartners.com
twentysixdigital.com
cloud.msqpartners.com
helpdesk.msqpartners.com
msqpartners.com
karisma.biz
karisma.biz
twentysixdigital.com
karisma.biz
*.msqpartners.com
msqpartners.com
helpdesk.msqpartners.com
www.msqpartners.com
helpdesk.msqpartners.com
orangescrum.msqpartners.com
msqpartners.com
stats.msqpartners.com
procurefest.msqit.com
msqpartners.com
*.msqpartners.com
metabase.msqpartners.com
msqpartners.com
zimbra1.msqpartners.com
karisma.biz
helpdesk.msqpartners.com
chat.msqpartners.com
nextcloud.msqpartners.com
onlyoffice.msqpartners.com
helpdesk.msqpartners.com
msqpartners.com
www.msqpartners.com
karisma.biz
mail.msqpartners.com
mail.msqpartners.com
*.msqpartners.com
nextcloud.msqpartners.com
tcr.msqpartners.com
email.msqpartners.com
Certificate
The complete raw certificate details for mail.msqpartners.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgISAyXJrUdvIMOv3rB1s+Ham1tQMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDMxMzU0NTdaFw0y MDA2MDExMzU0NTdaMB8xHTAbBgNVBAMTFG1haWwubXNxcGFydG5lcnMuY29tMIIB ojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAp0qkfMJpcXLlQvAhaHqlyfPf dxkZizs+EbvUv7okEhnRdor8o1lbR5e+soJHMbYyNKTLeNKBFHTT+qJAoCnk8gq0 wni1PWLwN5ghWYTtfGYeySjuVKlayuM5QHo2x2lDMFxZWTUfU+Rww6I1jjdMaPti 8Tmy8UkRGw5IMn2bQ/GYp5vgKm1Xajj4pkMRb7oJjLLVjvOqNiFJqjxvUD5LPpBD vkxfCqcGFJ7nvbZIBSNWaSvC5od8XJJvJpzjyaOp6s+Na8CJD8utDq9ZaDTlvQVM ja+kL8maeQAk6tX6P53oJz0QiM3vHBeIeok+2+XJFFkinVmzQKTgsxcJAMahapTJ jonbNOyrsAozH9d/7aKNGA18b8BJrNEH4SBFdsfEXKrbyY2BFFuGLOLpTG4jwkq0 lkMePrM9ECCcQbtyqIE1nYSMTWz8ib/qBOE+E73zIE/O7OBN6+GN57hFjiy595gU W6FTEr7gKNcPndkRRgPA+RsVW4+Q+PqT8m8md/T3AgMBAAGjggLMMIICyDAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFKvPBIwNIdsELWbq+7mbRDsDY/44MB8GA1UdIwQY MBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEF BQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEF BQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wgYIGA1Ud EQR7MHmCHGF1dG9kaXNjb3Zlci5tc3FwYXJ0bmVycy5jb22CImF1dG9kaXNjb3Zl ci5zbWFydHNjb21tdW5pY2F0ZS5jb22CFG1haWwubXNxcGFydG5lcnMuY29tgh9t cy0yNTAtZXgyMDEwLTEubWVkaWFzcXVhcmUubmV0MEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA8JWkWfIA0YJA EC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFwoOSNWwAABAMARjBEAiBgsnah7KGa K6nB9XbFJ8qfPkfmsB6QEr1vFpgdhlUdugIgEiY/RDmubGZYpo0MwBuM01fUl4RK Dv5ofP0aBus30isAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAA AXCg5I1SAAAEAwBHMEUCIFBmxebWmEUdACav0XEkM8v2FafAzU8uAxj24QbIzT7p AiEA+WulS5wy2YXf65JcVbmzjFn6Ej9xEouLZ5BePa2quiQwDQYJKoZIhvcNAQEL BQADggEBAETgwneX6XktlkBw91FCJ1DZqfmGaw7+/wFF2T72lDRcGt6z4cRPBeoo cIrQrt2ArxpimiT4dp0r1znxv8jBHeGHEGDVLCOjYd4a+/terKUMbflrgPmYfONu zC17+Wif88RFvUWvQJDVGXWgnTXpwlWQ7si8NEsGqyEBjGFobZ/OubVGqrfQ2W6p Y6GMdOG288PuBIJ9fWAOhcvH3XzOAyoc0Pq4oIBO/MPDmFmm+2FgV3rQWwo7xAfC B7jSi8GorUbiVl+UU/MAGyz9ujn/jHv/7fIlUjjiuXa90R6AvV0W602lzdw/CSlS rQKTqcWfKTM6y6arkeCJwRXqc0w2F8A= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAp0qkfMJpcXLlQvAhaHql yfPfdxkZizs+EbvUv7okEhnRdor8o1lbR5e+soJHMbYyNKTLeNKBFHTT+qJAoCnk 8gq0wni1PWLwN5ghWYTtfGYeySjuVKlayuM5QHo2x2lDMFxZWTUfU+Rww6I1jjdM aPti8Tmy8UkRGw5IMn2bQ/GYp5vgKm1Xajj4pkMRb7oJjLLVjvOqNiFJqjxvUD5L PpBDvkxfCqcGFJ7nvbZIBSNWaSvC5od8XJJvJpzjyaOp6s+Na8CJD8utDq9ZaDTl vQVMja+kL8maeQAk6tX6P53oJz0QiM3vHBeIeok+2+XJFFkinVmzQKTgsxcJAMah apTJjonbNOyrsAozH9d/7aKNGA18b8BJrNEH4SBFdsfEXKrbyY2BFFuGLOLpTG4j wkq0lkMePrM9ECCcQbtyqIE1nYSMTWz8ib/qBOE+E73zIE/O7OBN6+GN57hFjiy5 95gUW6FTEr7gKNcPndkRRgPA+RsVW4+Q+PqT8m8md/T3AgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 274195379914720305693373036399038194998096 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 13:54:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 13:54:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.msqpartners.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3796477038515807485493713180681227272136044975021136906813823070138381519596529700586730940986938227227224531908141012722294843011081541512267283816316480879215193045025683294239889030009586568955451341302441984809494495051245171760391260748996515750979526096433757700018103712965516351493547050342111981452891362745009645569600603535454400367768993926711805482473638366486430912097470066025548897133734799790901844933115270610455023861109559140750444610010026383821785246077466792490619827721876151644169419856701251465937306249722098072723225563580853806648410756264098349610794706792661459824947068858716683996236730836606994463970122270652391485757200994996333754101677001599333860310388773655313658518095287967869001123856847651815224176874568409097407133122715143517367598710006304033511379125001793764293835259462475228365447304422246705377032688123534388075568876833074272572633754278438552426604327095791735421793527 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) abcf048c0d21db042d66eafbb99b443b0363fe38 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.msqpartners.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.smartscommunicate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.msqpartners.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms-250-ex2010-1.mediasquare.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170a0e48d5b0000040300463044022060b276a1eca19a2ba9c1f576c527ca9f3e47e6b01e9012bd6f16981d86551dba022012263f4439ae6c6658a68d0cc01b8cd357d497844a0efe687cfd1a06eb37d22b007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a0e48d52000004030047304502205066c5e6d698451d0026afd1712433cbf615a7c0cd4f2e0318f6e106c8cd3ee9022100f96ba54b9c32d985dfeb925c55b9b38c59fa123f71128b8b67905e3dadaaba24 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0044e0c27797e9792d964070f751422750d9a9f9866b0efeff0145d93ef694345c1adeb3e1c44f05ea28708ad0aedd80af1a629a24f8769d2bd739f1bfc8c11de1871060d52c23a361de1afbfb5eaca50c6df96b80f9987ce36ecc2d7bf9689ff3c445bd45af4090d51975a09d35e9c25590eec8bc344b06ab21018c61686d9fceb9b546aab7d0d96ea963a18c74e1b6f3c3ee04827d7d600e85cbc7dd7cce032a1cd0fab8a0804efcc3c39859a6fb6160577ad05b0a3bc407c207b8d28bc1a8ad46e2565f9453f3001b2cfdba39ff8c7bffedf2255238e2b976bdd11e80bd5d16eb4da5cddc3f092952ad0293a9c59f29333acba6ab91e089c115ea734c3617c0