saint-nicolas.kinepolis.lu
Issued by R3
About this certificate
This digital certificate with serial number 03:c0:e9:e9:2d:88:91:a9:76:94:c6:3b:52:73:a5:57:2d:3d was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=saint-nicolas.kinepolis.lu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c0:e9:e9:2d:88:91:a9:76:94:c6:3b:52:73:a5:57:2d:3dSerial Number (int): 326981993095815391399200033885658348465469
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: cd:a9:d6:a3:8e:b3:05:75:7c:f3:21:d6:b1:cb:90:99:8c:9b:b3:1e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 59:b9:14:9d:5d:7a:d0:c0:f3:b4:81:cb:e9:c3:b8:b1:ca:7d:96:d7
Fingerprint (sha256): 26:c3:fa:38:5c:ef:ae:5d:2f:03:97:74:d1:56:ad:16:24:41:ab:2a:b8:12:6e:0d:e9:fe:a7:01:72:5e:44:16
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate saint-nicolas.kinepolis.lu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for saint-nicolas.kinepolis.lu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
saint-nicolas.kinepolis.lu
Other certificates including the domain name kinepolis.lu
(limited to 100 certificates)
kinepolis.lu
kinepolis.lu
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
*.kinepolis.lu
kinepolis.lu
dev.business.kinepolis.lu
business.kinepolis.lu
tickets.kinepolis.be
shop-dev.kinepolis.be
saint-nicolas.kinepolis.lu
kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.fr
shop.kinepolis.be
business.kinepolis.lu
kinepolis.lu
kinepolis.lu
tickets.kinepolis.be
shop.kinepolis.be
kinepolis.megatix.be
kinepolis.lu
shop.kinepolis.be
kinepolis.lu
kinepolis.megatix.be
dev.business.kinepolis.lu
tickets.kinepolis.be
shop-dev.kinepolis.be
shop.kinepolis.be
saint-nicolas.kinepolis.lu
shop-dev.kinepolis.fr
saint-nicolas.kinepolis.lu
dev.business.kinepolis.lu
kinepolis.lu
shop.kinepolis.be
saint-nicolas.kinepolis.lu
stage-kinepolis.megatix.be
kinepolis.lu
kinepolis.lu
shop.kinepolis.be
dev.business.kinepolis.lu
saint-nicolas.kinepolis.lu
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop.kinepolis.be
kinepolis.lu
business.kinepolis.lu
kinepolis.lu
shop.kinepolis.be
shop-dev.kinepolis.be
www.kinepolis.lu
saint-nicolas.kinepolis.lu
kinepolis.lu
dev.business.kinepolis.lu
kinepolis.megatix.be
dev.business.kinepolis.lu
*.kinepolis.lu
business.kinepolis.lu
saint-nicolas.kinepolis.lu
business.kinepolis.lu
kinepolis.megatix.be
saint-nicolas.kinepolis.lu
saint-nicolas.kinepolis.lu
business.kinepolis.lu
dev.business.kinepolis.lu
tickets.kinepolis.be
www.kinepolis.lu
kinepolis.lu
kinepolis.megatix.be
dev.business.kinepolis.lu
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
business.kinepolis.lu
saint-nicolas.kinepolis.lu
shop-dev.kinepolis.be
shop-dev.kinepolis.be
kinepolis.lu
dev.business.kinepolis.lu
kinepolis.lu
www.kinepolis.lu
dev.business.kinepolis.lu
kinepolis.megatix.be
kinepolis.megatix.be
shop-dev.kinepolis.fr
kinepolis.megatix.be
saint-nicolas.kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.be
kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.be
kinepolis.megatix.be
business.kinepolis.lu
kinepolis.lu
kinepolis.megatix.be
kinepolis.lu
kinepolis.lu
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
*.kinepolis.lu
kinepolis.lu
dev.business.kinepolis.lu
business.kinepolis.lu
tickets.kinepolis.be
shop-dev.kinepolis.be
saint-nicolas.kinepolis.lu
kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.fr
shop.kinepolis.be
business.kinepolis.lu
kinepolis.lu
kinepolis.lu
tickets.kinepolis.be
shop.kinepolis.be
kinepolis.megatix.be
kinepolis.lu
shop.kinepolis.be
kinepolis.lu
kinepolis.megatix.be
dev.business.kinepolis.lu
tickets.kinepolis.be
shop-dev.kinepolis.be
shop.kinepolis.be
saint-nicolas.kinepolis.lu
shop-dev.kinepolis.fr
saint-nicolas.kinepolis.lu
dev.business.kinepolis.lu
kinepolis.lu
shop.kinepolis.be
saint-nicolas.kinepolis.lu
stage-kinepolis.megatix.be
kinepolis.lu
kinepolis.lu
shop.kinepolis.be
dev.business.kinepolis.lu
saint-nicolas.kinepolis.lu
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop.kinepolis.be
kinepolis.lu
business.kinepolis.lu
kinepolis.lu
shop.kinepolis.be
shop-dev.kinepolis.be
www.kinepolis.lu
saint-nicolas.kinepolis.lu
kinepolis.lu
dev.business.kinepolis.lu
kinepolis.megatix.be
dev.business.kinepolis.lu
*.kinepolis.lu
business.kinepolis.lu
saint-nicolas.kinepolis.lu
business.kinepolis.lu
kinepolis.megatix.be
saint-nicolas.kinepolis.lu
saint-nicolas.kinepolis.lu
business.kinepolis.lu
dev.business.kinepolis.lu
tickets.kinepolis.be
www.kinepolis.lu
kinepolis.lu
kinepolis.megatix.be
dev.business.kinepolis.lu
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
business.kinepolis.lu
saint-nicolas.kinepolis.lu
shop-dev.kinepolis.be
shop-dev.kinepolis.be
kinepolis.lu
dev.business.kinepolis.lu
kinepolis.lu
www.kinepolis.lu
dev.business.kinepolis.lu
kinepolis.megatix.be
kinepolis.megatix.be
shop-dev.kinepolis.fr
kinepolis.megatix.be
saint-nicolas.kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.be
kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.be
kinepolis.megatix.be
business.kinepolis.lu
kinepolis.lu
kinepolis.megatix.be
kinepolis.lu
Certificate
The complete raw certificate details for saint-nicolas.kinepolis.lu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGOTCCBSGgAwIBAgISA8Dp6S2Ikal2lMY7UnOlVy09MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA2MDIyMTM0MDhaFw0yMjA4MzEyMTM0MDdaMCUxIzAhBgNVBAMT GnNhaW50LW5pY29sYXMua2luZXBvbGlzLmx1MIICIjANBgkqhkiG9w0BAQEFAAOC Ag8AMIICCgKCAgEAzopyJzNbWMuHs6PzbrbR2HhddcdsCWKz4PMSEH7+WDuTUFaQ vGXRaH4B3uDukK5YeQrMqW/QB00WGI70SrQ6BnQowNiLH6enI4+JoBcLg0zTspqb RlgNbX4TYYfwH4+cgvu+GSyB7tp5NZSt4LU21jR4og9leO7jqcZ5nUygtGJJI8qE R4dLFqAWhji3/Kzx93s44enbGJja6OsUQHyVnfHuC8cps0G5u8evR9PLHb53JNZh B6uZRq8dpOpAKnLOWWS5oG5tqLz0Bm/58LEknWsACiD+kXsxb7Qzyxertvi9KiRO CHe+fNk083j6WjCcanJjU5jX2DvmDpukMZjRdgA+yOWD3BKZqaXag8+DZ/yGil1D mrA/dpv9OnLi3d+XwPECExANwmAu9qu9azfyWrb0r4B3djArCAHhX4a6XScSspLg Gvl6Ea0hrLUpStjRTB7t2QILYADlElkClN77DzYI1jeomEY3HGgrOAVbj4S66njS 4tTqCzvsyd+MHZm8oeE9wjORz8lvoUlyau3e91zV/G+LjWpdOMSRKp9a7YH0DLr7 0undmvpxkgVt6KM/MiJ3/3pP9xj0S43cQI8a6KmyGVdRCyhyV8LKzxCaqzFN6TcU XvCylo0T5Gba8nlny+J/3aoUbR65L3miECS0If7uGKhj4EUwfQzcrfWMsOMCAwEA AaOCAlQwggJQMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUzanWo46zBXV88yHWscuQ mYybsx4wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUH AQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYB BQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wJQYDVR0RBB4wHIIac2FpbnQt bmljb2xhcy5raW5lcG9saXMubHUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBGpVXrdfqRIDC1oolp9PN9ESxB dL79SbiFq/L8cP5tRwAAAYEmjf0XAAAEAwBHMEUCIQDqlcwnBL52CZremsvKq5Zn IdCEtDUo8kbd6krIe1fwEAIga4j0wtnDPTpkudhN+PrwO3ddkrs7VJBFmAKclbsy uesAdQDfpV6raIJPH2yt7rhfTj5a6s2iEqRqXo47EsAgRFwqcwAAAYEmjf7jAAAE AwBGMEQCIFRHQd3K3F1pTx98y7pmwr0GQpKTnzNIJUXmD7EldOOzAiBzA7uxiFX0 j3RPIHI8/1nOoR4n5dwNOAEPwMrJ3AsRMzANBgkqhkiG9w0BAQsFAAOCAQEAGohl LZChWgwaTUv0xNrG+2dal5ZSDxmGEQTzu0WppWw/fL2aTC+f6+6HfK9BPmVJG8YM Pv9idWbOE7RW7dJA7QGhTHvLOsI4jFBoZmGvVNzSPYXJM/cDchZL5KsCLEVTtqQ9 9UKQv5elr4B4OCDtMS/genKmWgC6+BpGlMltb7cVGk+ht+90iFPolAru6EO3voii TqeJe8ShNv35c39xsdVi3guRqNRMC43VPc/TdVpLbDeICn5XzVIVt4DskYgpGSil 2ab1FUys2mIbcbbNNxeYbEFVoc4G4UkM70xV3hzDqCw2RZx/7MHBt9XF1WJe/pYK E6FkXJ4AciQw+UpbSg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzopyJzNbWMuHs6PzbrbR 2HhddcdsCWKz4PMSEH7+WDuTUFaQvGXRaH4B3uDukK5YeQrMqW/QB00WGI70SrQ6 BnQowNiLH6enI4+JoBcLg0zTspqbRlgNbX4TYYfwH4+cgvu+GSyB7tp5NZSt4LU2 1jR4og9leO7jqcZ5nUygtGJJI8qER4dLFqAWhji3/Kzx93s44enbGJja6OsUQHyV nfHuC8cps0G5u8evR9PLHb53JNZhB6uZRq8dpOpAKnLOWWS5oG5tqLz0Bm/58LEk nWsACiD+kXsxb7Qzyxertvi9KiROCHe+fNk083j6WjCcanJjU5jX2DvmDpukMZjR dgA+yOWD3BKZqaXag8+DZ/yGil1DmrA/dpv9OnLi3d+XwPECExANwmAu9qu9azfy Wrb0r4B3djArCAHhX4a6XScSspLgGvl6Ea0hrLUpStjRTB7t2QILYADlElkClN77 DzYI1jeomEY3HGgrOAVbj4S66njS4tTqCzvsyd+MHZm8oeE9wjORz8lvoUlyau3e 91zV/G+LjWpdOMSRKp9a7YH0DLr70undmvpxkgVt6KM/MiJ3/3pP9xj0S43cQI8a 6KmyGVdRCyhyV8LKzxCaqzFN6TcUXvCylo0T5Gba8nlny+J/3aoUbR65L3miECS0 If7uGKhj4EUwfQzcrfWMsOMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 326981993095815391399200033885658348465469 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-02 21:34:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-31 21:34:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saint-nicolas.kinepolis.lu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 842612967223633425728640364383696612582660549121327485292031658734037125273795179769683458392738262028716417152499042393091178510175055549280117939137793893576350114706764134374626836582483403124410637934814505774883001492902269155923422215732414186803939156963740886816891235269399530238396549971319700453992697561420825596870354055464324966963340968780628750414486551501171977103471558708208269545128488431669506153705933242408837122171118831775592907249370108659991490928114348603910595157008791981240323238340137008136587291752354438907183576296325073253158681668114021851223599771095785897470989714799185938990716857213056847569045456302866821767737122508271230255058678248955506996770359001078726363638748331394187081367758769580569465476970829790025682118934897490390660284633216672082737714361499835242447611640765773160546582519375061241188804138890146363404649997556448310707450198955468093235819622003917345180912697562255821677972495801817283442211892012065159457730592120247181976064131913460716415109474193059764810889459535524507271215195372482695114403153472887428408488225670800377261012138908709204588115683614484071679801184401117745207042352004722153413749262997385066234095998550106532987559154919849717477978339 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cda9d6a38eb305757cf321d6b1cb90998c9bb31e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-nicolas.kinepolis.lu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000181268dfd170000040300473045022100ea95cc2704be76099ade9acbcaab966721d084b43528f246ddea4ac87b57f01002206b88f4c2d9c33d3a64b9d84df8faf03b775d92bb3b54904598029c95bb32b9eb007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000181268dfee300000403004630440220544741ddcadc5d694f1f7ccbba66c2bd064292939f33482545e60fb12574e3b302207303bbb18855f48f744f20723cff59cea11e27e5dc0d38010fc0cac9dc0b1133 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001a88652d90a15a0c1a4d4bf4c4dac6fb675a9796520f19861104f3bb45a9a56c3f7cbd9a4c2f9febee877caf413e65491bc60c3eff627566ce13b456edd240ed01a14c7bcb3ac2388c50686661af54dcd23d85c933f70372164be4ab022c4553b6a43df54290bf97a5af80783820ed312fe07a72a65a00baf81a4694c96d6fb7151a4fa1b7ef748853e8940aeee843b7be88a24ea7897bc4a136fdf9737f71b1d562de0b91a8d44c0b8dd53dcfd3755a4b6c37880a7e57cd5215b780ec9188291928a5d9a6f5154cacda621b71b6cd3717986c4155a1ce06e1490cef4c55de1cc3a82c36459c7fecc1c1b7d5c5d5625efe960a13a1645c9e00722430f94a5b4a