mailsn.rodenstock.com
Issued by R3
About this certificate
This digital certificate with serial number 03:73:cb:13:43:78:ee:7f:39:5d:a7:0d:30:0e:4c:89:dd:60 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mailsn.rodenstock.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:73:cb:13:43:78:ee:7f:39:5d:a7:0d:30:0e:4c:89:dd:60Serial Number (int): 300739263296475947505276877427513060089184
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c8:32:10:08:d5:63:e3:ae:03:39:b7:22:3e:18:46:f4:32:5b:40:e4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c0:c2:8b:43:d3:74:de:03:2d:fc:01:e0:f2:1f:a2:d0:59:e7:e6:d4
Fingerprint (sha256): 25:0f:34:17:b8:76:ae:40:f6:e2:fb:ad:cb:a1:40:ec:6f:7e:3c:a4:5c:1d:92:3d:9e:ec:e8:c7:ed:9d:e2:02
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate mailsn.rodenstock.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mailsn.rodenstock.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mailsn.rodenstock.com
Other certificates including the domain name rodenstock.com
(limited to 100 certificates)
*.rodenstock.com
sf6-staging.cnxt.rodenstock.com
ftp3.rodenstock.com
analytics.cnxt.rodenstock.com
cnxt.rodenstock.com
erpc-cl1.rodenstock.com
develop.cnxt.rodenstock.com
scopia.rodenstock.com
wifi.rodenstock.com
countdown.rodenstock.com
api-staging.cnxt.rodenstock.com
countdown.rodenstock.com
dsa.rodenstock.com
cnxt-hub-preview.cnxt.rodenstock.com
develop.cnxt.rodenstock.com
select-api.cnxt.rodenstock.com
webmail.rodenstock.com
hub-staging.cnxt.rodenstock.com
develop.cnxt.rodenstock.com
dsa.rodenstock.com
gateway-develop.cnxt.rodenstock.com
consumer-api-develop.cnxt.rodenstock.com
consumer-api-develop.cnxt.rodenstock.com
consumer-api-staging.cnxt.rodenstock.com
mailsn.rodenstock.com
wifi.rodenstock.com
mailsn.rodenstock.com
payment.rodenstock.com
develop.cnxt.rodenstock.com
sf6-develop.cnxt.rodenstock.com
api-develop.cnxt.rodenstock.com
select-api-staging.cnxt.rodenstock.com
webservices.rodenstock.com
winfitb2b.rodenstock.com
dsa.rodenstock.com
select-api.cnxt.rodenstock.com
select-api-develop.cnxt.rodenstock.com
css.rodenstock.com
sf6-develop.cnxt.rodenstock.com
mailsn.rodenstock.com
analytics.cnxt.rodenstock.com
sf6.cnxt.rodenstock.com
dsa.rodenstock.com
*.rodenstock.com
sso.cnxt.rodenstock.com
staging.cnxt.rodenstock.com
backend.events.rodenstock.com
sf6.cnxt.rodenstock.com
cnxt.rodenstock.com
trustcenter.cnxt.rodenstock.com
expertenfilm.rodenstock.com
www.rodenstock.com
bignorm.rodenstock.com
payment.rodenstock.com
api-develop.cnxt.rodenstock.com
sso.cnxt.rodenstock.com
consumer-api.cnxt.rodenstock.com
mailsn.rodenstock.com
semis.rodenstock.com
hub.cnxt.rodenstock.com
*.rodenstock.com
api-staging.cnxt.rodenstock.com
expertmovie.rodenstock.com
staging.cnxt.rodenstock.com
cnxt-frontend-preview.cnxt.rodenstock.com
tool.rodenstock.com
gateway-develop.cnxt.rodenstock.com
vst.rodenstock.com
backend.events.rodenstock.com
hub.cnxt.rodenstock.com
cnxt-postgraphile-production.cnxt.rodenstock.com
analytics.cnxt.rodenstock.com
api.cnxt.rodenstock.com
cnxt-postgraphile-production.cnxt.rodenstock.com
select-api.cnxt.rodenstock.com
cnxt.rodenstock.com
sf6-preview.cnxt.rodenstock.com
dsa.rodenstock.com
cnxt-sf6-backend-staging.cnxt.rodenstock.com
api-develop.cnxt.rodenstock.com
payment.rodenstock.com
wiki.cnxt.rodenstock.com
tool.rodenstock.com
sf6-staging.cnxt.rodenstock.com
dsa-develop.cnxt.rodenstock.com
www.rodenstock.com
tool.rodenstock.com
shop-develop.cnxt.rodenstock.com
api-staging.cnxt.rodenstock.com
api-staging.cnxt.rodenstock.com
tool.rodenstock.com
trustcenter.cnxt.rodenstock.com
dsa.cnxt.rodenstock.com
www.rodenstock.com
cnxt-consumer-api-preview.cnxt.rodenstock.com
css.rodenstock.com
consumer-api-staging.cnxt.rodenstock.com
gateway-preview.cnxt.rodenstock.com
api.cnxt.rodenstock.com
cnxt-postgraphile-staging.cnxt.rodenstock.com
sf6-staging.cnxt.rodenstock.com
ftp3.rodenstock.com
analytics.cnxt.rodenstock.com
cnxt.rodenstock.com
erpc-cl1.rodenstock.com
develop.cnxt.rodenstock.com
scopia.rodenstock.com
wifi.rodenstock.com
countdown.rodenstock.com
api-staging.cnxt.rodenstock.com
countdown.rodenstock.com
dsa.rodenstock.com
cnxt-hub-preview.cnxt.rodenstock.com
develop.cnxt.rodenstock.com
select-api.cnxt.rodenstock.com
webmail.rodenstock.com
hub-staging.cnxt.rodenstock.com
develop.cnxt.rodenstock.com
dsa.rodenstock.com
gateway-develop.cnxt.rodenstock.com
consumer-api-develop.cnxt.rodenstock.com
consumer-api-develop.cnxt.rodenstock.com
consumer-api-staging.cnxt.rodenstock.com
mailsn.rodenstock.com
wifi.rodenstock.com
mailsn.rodenstock.com
payment.rodenstock.com
develop.cnxt.rodenstock.com
sf6-develop.cnxt.rodenstock.com
api-develop.cnxt.rodenstock.com
select-api-staging.cnxt.rodenstock.com
webservices.rodenstock.com
winfitb2b.rodenstock.com
dsa.rodenstock.com
select-api.cnxt.rodenstock.com
select-api-develop.cnxt.rodenstock.com
css.rodenstock.com
sf6-develop.cnxt.rodenstock.com
mailsn.rodenstock.com
analytics.cnxt.rodenstock.com
sf6.cnxt.rodenstock.com
dsa.rodenstock.com
*.rodenstock.com
sso.cnxt.rodenstock.com
staging.cnxt.rodenstock.com
backend.events.rodenstock.com
sf6.cnxt.rodenstock.com
cnxt.rodenstock.com
trustcenter.cnxt.rodenstock.com
expertenfilm.rodenstock.com
www.rodenstock.com
bignorm.rodenstock.com
payment.rodenstock.com
api-develop.cnxt.rodenstock.com
sso.cnxt.rodenstock.com
consumer-api.cnxt.rodenstock.com
mailsn.rodenstock.com
semis.rodenstock.com
hub.cnxt.rodenstock.com
*.rodenstock.com
api-staging.cnxt.rodenstock.com
expertmovie.rodenstock.com
staging.cnxt.rodenstock.com
cnxt-frontend-preview.cnxt.rodenstock.com
tool.rodenstock.com
gateway-develop.cnxt.rodenstock.com
vst.rodenstock.com
backend.events.rodenstock.com
hub.cnxt.rodenstock.com
cnxt-postgraphile-production.cnxt.rodenstock.com
analytics.cnxt.rodenstock.com
api.cnxt.rodenstock.com
cnxt-postgraphile-production.cnxt.rodenstock.com
select-api.cnxt.rodenstock.com
cnxt.rodenstock.com
sf6-preview.cnxt.rodenstock.com
dsa.rodenstock.com
cnxt-sf6-backend-staging.cnxt.rodenstock.com
api-develop.cnxt.rodenstock.com
payment.rodenstock.com
wiki.cnxt.rodenstock.com
tool.rodenstock.com
sf6-staging.cnxt.rodenstock.com
dsa-develop.cnxt.rodenstock.com
www.rodenstock.com
tool.rodenstock.com
shop-develop.cnxt.rodenstock.com
api-staging.cnxt.rodenstock.com
api-staging.cnxt.rodenstock.com
tool.rodenstock.com
trustcenter.cnxt.rodenstock.com
dsa.cnxt.rodenstock.com
www.rodenstock.com
cnxt-consumer-api-preview.cnxt.rodenstock.com
css.rodenstock.com
consumer-api-staging.cnxt.rodenstock.com
gateway-preview.cnxt.rodenstock.com
api.cnxt.rodenstock.com
cnxt-postgraphile-staging.cnxt.rodenstock.com
Certificate
The complete raw certificate details for mailsn.rodenstock.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISA3PLE0N47n85XacNMA5Mid1gMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTEyMTAwMDM4MzVaFw0yMjAzMTAwMDM4MzRaMCAxHjAcBgNVBAMT FW1haWxzbi5yb2RlbnN0b2NrLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAKLSlxf1R3CEAPCZNM4A0LVoLqqoYu2rMY5n6LMaYQbKP3oclAhmkp2Y p0dhsnQ4YsB2BBn/vd7H/OvoZ11n6IIZsYUc4Ve2ziMN63ohK8TtSSrCLmEh3oSH YXvFO9O2ZbgHZuKTcsJG+F3uZlccISzl7nIzEw5AyzC3d/JU50SmddW+YdwStF13 G01reucuJiIqNzzwdPv3CMp1tV8O17e7O4ERZr7/dmEWU9f2C99npVFWwYGQpce/ XwFP3w3BKAz6kKsN5RKRb7/U0qoRFkilpdfxmZ7sUsPXE1q4NgX/+i33HTlXswyn cY6JXKuZDK8LZoWW10fyJTtOjw1E5eUCAwEAAaOCAlEwggJNMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQUyDIQCNVj464DObciPhhG9DJbQOQwHwYDVR0jBBgwFoAUFC6z F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl bmNyLm9yZy8wIAYDVR0RBBkwF4IVbWFpbHNuLnJvZGVuc3RvY2suY29tMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx AHcAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAF9of35hwAABAMA SDBGAiEA1vI9p99pcdGEh9//emp1HE7iLVHWLw7U03gn0e/tPJACIQDcQMCktl9c 7dx1vTzPiGexk2NEph95hWi3n2ZAxRTYTwB2AEalVet1+pEgMLWiiWn0830RLEF0 vv1JuIWr8vxw/m1HAAABfaH9+YQAAAQDAEcwRQIgYBJ16vJ/fmE1p62KeYz2LnSX jaI20UTOr7OivJ3BgqECIQCmALvnJ652rKS8HCtGyArzhG4K0Nx+6cVsZr9X6yBo wjANBgkqhkiG9w0BAQsFAAOCAQEAMMLYbACtnZohInbZSfaduGVN+Y/Nt3yX6Dri W5cGJuqX4EZ0MXngq8vlyI5winBAu6T/7BaEMS4mXeEL0W8cMBQWzIQdD5vY9rsc mX9GygpaHpDTxacatQ0+bMyXysRqrn4UGmRZ0IwyEtJ6YHgdXcjankrFEJHeQCy9 +amYJU0di52XaNRI3stRcVForTKSG9mATjdSkpXR/s+LUBorF9LfdC855rYVqS3N 0h5z5toEOgsFg6m9EKjsZE2cw/sfpjTakjZit/SWntJPHd4bJdKs5L8MjeWlOZqG rr40XlBXRCYOXYy/yehP5hCda+RpcFOWTI4HgceKsbJUyZTazg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotKXF/VHcIQA8Jk0zgDQ tWguqqhi7asxjmfosxphBso/ehyUCGaSnZinR2GydDhiwHYEGf+93sf86+hnXWfo ghmxhRzhV7bOIw3reiErxO1JKsIuYSHehIdhe8U707ZluAdm4pNywkb4Xe5mVxwh LOXucjMTDkDLMLd38lTnRKZ11b5h3BK0XXcbTWt65y4mIio3PPB0+/cIynW1Xw7X t7s7gRFmvv92YRZT1/YL32elUVbBgZClx79fAU/fDcEoDPqQqw3lEpFvv9TSqhEW SKWl1/GZnuxSw9cTWrg2Bf/6LfcdOVezDKdxjolcq5kMrwtmhZbXR/IlO06PDUTl 5QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 300739263296475947505276877427513060089184 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-10 00:38:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-10 00:38:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mailsn.rodenstock.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20554451307107928926216797718935388419101032098435696449839791229583509730435716850824846572571707732171326903964378953393802689133392314264507589032382884081262273131846472618207976171124034285023927935786168911019051194958468597626238379150942047821768656460958600493760191595162021313068234514688819416367966826614031882010170871553279338659130203638207865999468367164725856308073899477253654770892151165793237219207005776743092373051035640101909796332878408055372961520447285018223453918387844090619481356912342870293627132309604865002416275562074146630399518025058869868013142445001397538792835038349758440990181 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c8321008d563e3ae0339b7223e1846f4325b40e4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailsn.rodenstock.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017da1fdf9870000040300483046022100d6f23da7df6971d18487dfff7a6a751c4ee22d51d62f0ed4d37827d1efed3c90022100dc40c0a4b65f5ceddc75bd3ccf8867b1936344a61f798568b79f6640c514d84f00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017da1fdf98400000403004730450220601275eaf27f7e6135a7ad8a798cf62e74978da236d144ceafb3a2bc9dc182a1022100a600bbe727ae76aca4bc1c2b46c80af3846e0ad0dc7ee9c56c66bf57eb2068c2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0030c2d86c00ad9d9a212276d949f69db8654df98fcdb77c97e83ae25b970626ea97e046743179e0abcbe5c88e708a7040bba4ffec1684312e265de10bd16f1c301416cc841d0f9bd8f6bb1c997f46ca0a5a1e90d3c5a71ab50d3e6ccc97cac46aae7e141a6459d08c3212d27a60781d5dc8da9e4ac51091de402cbdf9a998254d1d8b9d9768d448decb51715168ad32921bd9804e37529295d1fecf8b501a2b17d2df742f39e6b615a92dcdd21e73e6da043a0b0583a9bd10a8ec644d9cc3fb1fa634da923662b7f4969ed24f1dde1b25d2ace4bf0c8de5a5399a86aebe345e505744260e5d8cbfc9e84fe6109d6be4697053964c8e0781c78ab1b254c994dace