gatec.com.br
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:23:37:b6:1f:8d:cd:1d:e4:e9:8b:cc:5d:9e:db:4d:a9:0e was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gatec.com.br
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:23:37:b6:1f:8d:cd:1d:e4:e9:8b:cc:5d:9e:db:4d:a9:0eSerial Number (int): 360433079747059605713934733508135827122446
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e1:7d:f2:75:c0:3a:82:83:a0:2b:07:c1:e1:9c:cf:47:26:5f:34:70
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 04:e1:cf:4c:d2:5a:93:ce:09:c2:bb:bd:8d:db:1e:5f:c1:23:0a:3c
Fingerprint (sha256): 22:e6:55:74:c6:e2:18:6b:d3:d0:86:35:ba:97:ab:3c:a4:19:09:b7:0c:8a:96:b5:53:e6:2e:cb:e2:93:22:db
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate gatec.com.br
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gatec.com.br
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gatec.com.br
www.gatec.com.br
www.gatec.com.br
Other certificates including the domain name gatec.com.br
(limited to 100 certificates)
testportal.dlocal.com
help.rmgcardservices.org
soporte.exalta.com.mx
testportal.dlocal.com
support.launchify.net
support.zendure.com
testportal.dlocal.com
testportal.dlocal.com
simpleviewer.gatec.com.br
desk.unisight.one
testportal.dlocal.com
gatec.com.br
support.wibu.jp
testportal.dlocal.com
tst-tileproxy.gatec.com.br
support.zendure.com
testportal.dlocal.com
gatec.com.br
tst-mapfy-app.gatec.com.br
desk.unisight.one
help.rmgcardservices.org
testportal.dlocal.com
help.trufab.biz
help.trufab.biz
hma-mapfy-app.gatec.com.br
support.heerraad.ir
testportal.dlocal.com
help.rmgleasing.org
testportal.dlocal.com
support.wibu.jp
desk.unisight.one
testportal.dlocal.com
testportal.dlocal.com
testportal.dlocal.com
support.heerraad.ir
help.rmgcardservices.org
hma-mapfy-app.gatec.com.br
testportal.dlocal.com
support.tiger-rack.co.jp
testportal.dlocal.com
tst-shield.gatec.com.br
testportal.dlocal.com
help.bornincredible.com
helpdesk.gatec.com.br
*.simplefarmweb.com.br
help.bornincredible.com
gatec.com.br
*.lynxdashboard.com
help.elynx.com.au
gatec.com.br
testportal.dlocal.com
testportal.dlocal.com
helpdesk.mpminformatique.com
helpdesk.mpminformatique.com
gatec.com.br
help.elynx.com.au
testportal.dlocal.com
testportal.dlocal.com
commercesf.com.br
helpdesk.mpminformatique.com
www.orange.jameshoty.com
helpdesk.mpminformatique.com
support.launchify.net
support.zendure.com
support.launchify.net
*.simplefarmweb.com.br
commercesf.com.br
help.innocalls.com
support.zendure.com
www.orange.jameshoty.com
support.heerraad.ir
testportal.dlocal.com
help.bornincredible.com
support.tiger-rack.co.jp
testportal.dlocal.com
gatec.com.br
helpdesk.gatec.com.br
soporte.exalta.com.mx
support.tiger-rack.co.jp
testportal.dlocal.com
testportal.dlocal.com
lynxdashboard.com
testportal.dlocal.com
help.rmgcardservices.org
help.innocalls.com
*.commerce.agr.br
testportal.dlocal.com
testportal.dlocal.com
gatec.com.br
helpdesk.gatec.com.br
support.neductless.com
testportal.dlocal.com
www.orange.jameshoty.com
help.bornincredible.com
support.wibu.jp
gatec.com.br
helpdesk.gatec.com.br
help.rmgleasing.org
gatec.com.br
desk.unisight.one
help.rmgcardservices.org
soporte.exalta.com.mx
testportal.dlocal.com
support.launchify.net
support.zendure.com
testportal.dlocal.com
testportal.dlocal.com
simpleviewer.gatec.com.br
desk.unisight.one
testportal.dlocal.com
gatec.com.br
support.wibu.jp
testportal.dlocal.com
tst-tileproxy.gatec.com.br
support.zendure.com
testportal.dlocal.com
gatec.com.br
tst-mapfy-app.gatec.com.br
desk.unisight.one
help.rmgcardservices.org
testportal.dlocal.com
help.trufab.biz
help.trufab.biz
hma-mapfy-app.gatec.com.br
support.heerraad.ir
testportal.dlocal.com
help.rmgleasing.org
testportal.dlocal.com
support.wibu.jp
desk.unisight.one
testportal.dlocal.com
testportal.dlocal.com
testportal.dlocal.com
support.heerraad.ir
help.rmgcardservices.org
hma-mapfy-app.gatec.com.br
testportal.dlocal.com
support.tiger-rack.co.jp
testportal.dlocal.com
tst-shield.gatec.com.br
testportal.dlocal.com
help.bornincredible.com
helpdesk.gatec.com.br
*.simplefarmweb.com.br
help.bornincredible.com
gatec.com.br
*.lynxdashboard.com
help.elynx.com.au
gatec.com.br
testportal.dlocal.com
testportal.dlocal.com
helpdesk.mpminformatique.com
helpdesk.mpminformatique.com
gatec.com.br
help.elynx.com.au
testportal.dlocal.com
testportal.dlocal.com
commercesf.com.br
helpdesk.mpminformatique.com
www.orange.jameshoty.com
helpdesk.mpminformatique.com
support.launchify.net
support.zendure.com
support.launchify.net
*.simplefarmweb.com.br
commercesf.com.br
help.innocalls.com
support.zendure.com
www.orange.jameshoty.com
support.heerraad.ir
testportal.dlocal.com
help.bornincredible.com
support.tiger-rack.co.jp
testportal.dlocal.com
gatec.com.br
helpdesk.gatec.com.br
soporte.exalta.com.mx
support.tiger-rack.co.jp
testportal.dlocal.com
testportal.dlocal.com
lynxdashboard.com
testportal.dlocal.com
help.rmgcardservices.org
help.innocalls.com
*.commerce.agr.br
testportal.dlocal.com
testportal.dlocal.com
gatec.com.br
helpdesk.gatec.com.br
support.neductless.com
testportal.dlocal.com
www.orange.jameshoty.com
help.bornincredible.com
support.wibu.jp
gatec.com.br
helpdesk.gatec.com.br
help.rmgleasing.org
gatec.com.br
desk.unisight.one
Certificate
The complete raw certificate details for gatec.com.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgISBCM3th+NzR3k6YvMXZ7bTakOMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDUyMjQzMDZaFw0y MDAxMDMyMjQzMDZaMBcxFTATBgNVBAMTDGdhdGVjLmNvbS5icjCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAMJR5CmlJn5obU1E913HJhkArIfPWpJze7e5 I+Gi+SsCb8P7Zdd0Luae0x0Lbjo2sUb7lGE2phxyG8J9db+pAX8GGMESyXoKMXcU xz9hATvnhmfKcgsu1PZGUCamaIG+lnQqLR6sjJ2+YyNL+pWpfkV7oNeD9wS3CCCn x3tQydak1cGGQ7nzalA+T+9ooEqvk22Xvn58KBdaGI8gtJ9CeDPW25AQB8dTH3Zn 0ZK4EJw57oLT2MZW+//M1ZyamD9sS358fTwlvrchbQoZBnTXE73I6iv3TtskCDkO kOlzpENMZeGAekRafLxrBCFdonWK8oxqNFQ2XoldU3E4ZU8tkjsCAwEAAaOCAnMw ggJvMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU4X3ydcA6goOgKwfB4ZzPRyZfNHAw HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzApBgNVHREEIjAgggxnYXRlYy5jb20uYnKCEHd3dy5nYXRlYy5jb20uYnIwTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdQBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW2eTiu1AAAE AwBGMEQCIAlPzu4P62/NxxA+STkKYG95bRJHcF/iZIyhEe9os0gjAiAXN87XDea/ DWfaNthwohoHRZ7k3O9QDkCgmcUseyNvLgB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6 KXLcpMMM9OVFR/R4AAABbZ5OLa0AAAQDAEgwRgIhAJ84ef27jSqVrIKCkSh9H801 eSlSkj+b8IAp/n7SMY7PAiEAqnzO/zIYtbVPW+I/aDtDgNnHWyN17Z+cU8712TWp 8XgwDQYJKoZIhvcNAQELBQADggEBAB8i51DwS5spPJWkeXInC2pCb/HUTOSBrMR5 ze8xUlcCE4bpurszN5b88N3cg6UHv2qJ3EOv5lgLvGki9Aqw4TJsuPr4X22O6kao NY4xo9WqOcZ6TgZc3KyFeOVgP9jD9tk91bZSLEdhYu991rTFnuVTSAyUw9tImmDT 50i4JTwNjdVlfld8+VYRdjGny/l3imvjePokkCBJYoNYeA0C/xeT3/AilSyBRJ1i IMXjTvQGonxeHhbvClohQJ/8ZO2WPruh1PWGMzuy3oW1DSkqwAfMBbwFe69v7Q07 4tWzJkP0KB6OB7DD5p7TYYa5NHDLIjvLVKvbHvwY0/QTnmojxIM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlHkKaUmfmhtTUT3Xccm GQCsh89aknN7t7kj4aL5KwJvw/tl13Qu5p7THQtuOjaxRvuUYTamHHIbwn11v6kB fwYYwRLJegoxdxTHP2EBO+eGZ8pyCy7U9kZQJqZogb6WdCotHqyMnb5jI0v6lal+ RXug14P3BLcIIKfHe1DJ1qTVwYZDufNqUD5P72igSq+TbZe+fnwoF1oYjyC0n0J4 M9bbkBAHx1MfdmfRkrgQnDnugtPYxlb7/8zVnJqYP2xLfnx9PCW+tyFtChkGdNcT vcjqK/dO2yQIOQ6Q6XOkQ0xl4YB6RFp8vGsEIV2idYryjGo0VDZeiV1TcThlTy2S OwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 360433079747059605713934733508135827122446 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-05 22:43:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-03 22:43:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gatec.com.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24530613249006220955253800946608924380135084443608566444402258340887781453276228577681596878675146899246134126562367156954052314718495201186020660123340049039947634415552411961127646886528083976695113310842010244108539220820951744823802953858519655230403280635581933949681631075526353479053803655751439307954325860901472120606063651851337389326585095389359439249472991946158383410541148520499320445145406055682024477700562378825658379674765089003026185895149957855455313973340605388196708627051639985681531506512042240905187505280827438271552016605144600476981829971261307863105936967109899535053135292332308345754171 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e17df275c03a8283a02b07c1e19ccf47265f3470 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatec.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gatec.com.br' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016d9e4e2bb500000403004630440220094fceee0feb6fcdc7103e49390a606f796d1247705fe2648ca111ef68b3482302201737ced70de6bf0d67da36d870a21a07459ee4dcef500e40a099c52c7b236f2e007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d9e4e2dad00000403004830460221009f3879fdbb8d2a95ac828291287d1fcd35792952923f9bf08029fe7ed2318ecf022100aa7cceff3218b5b54f5be23f683b4380d9c75b2375ed9f9c53cef5d935a9f178 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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