besj.realnet.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b9:94:58:fd:9a:47:b1:bb:ff:e4:d3:ab:91:bf:09:8b:0c was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=besj.realnet.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b9:94:58:fd:9a:47:b1:bb:ff:e4:d3:ab:91:bf:09:8b:0cSerial Number (int): 324486283484827029349056728295100081867532
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 81:92:f9:a5:ee:c4:d1:a6:08:2f:50:15:c0:8d:ea:fe:9e:27:3a:24
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 65:0d:33:82:25:93:06:a6:73:00:cd:28:77:65:cf:fd:d3:c1:e4:e1
Fingerprint (sha256): 28:79:a2:9b:03:eb:6e:76:9b:bd:37:8b:7b:64:5f:09:15:6b:42:47:1c:78:37:e5:73:4c:de:b8:bf:16:82:fb
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate besj.realnet.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for besj.realnet.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
besj.realnet.ch
www.besj.realnet.ch
www.besj.realnet.ch
Other certificates including the domain name realnet.ch
(limited to 100 certificates)
daester.net
waffen-froelicher.realnet.ch
addon-jonasweissallesch.realnet.ch
addon-daester.realnet.ch
dev1.realnet.ch
typo3.realnet.ch
olten-sw.ch
addon-revier32.realnet.ch
besj.realnet.ch
weblication.realnet.ch
besj.realnet.ch
realnet.ch
besj.realnet.ch
acorn.realnet.ch
dev1.realnet.ch
acorn.realnet.ch
realnet.ch
addon-daester.realnet.ch
realnet.ch
dev1.realnet.ch
besj.realnet.ch
typo3.realnet.ch
waffen-froelicher.realnet.ch
dev1.realnet.ch
waffen-froelicher.realnet.ch
acorn.realnet.ch
realnet.ch
cbooks.realnet.ch
jonasweissalles.ch
realnet.ch
realnet.ch
realnet.ch
besj.realnet.ch
addon-revier32.realnet.ch
realnet.ch
addon-revier32.realnet.ch
weblication.realnet.ch
daester.net
typo3.realnet.ch
realnet.ch
realnet.ch
neos.realnet.ch
dev1.realnet.ch
addon-revier32.realnet.ch
besj.realnet.ch
realnet.ch
besj.realnet.ch
neos.realnet.ch
cbooks.realnet.ch
realnet.ch
realnet.ch
besj.realnet.ch
weblication.realnet.ch
daester.net
waffen-froelicher.realnet.ch
waffen-froelicher.realnet.ch
neos.realnet.ch
realnet.ch
neos.realnet.ch
cbooks.realnet.ch
neos.realnet.ch
addon-jonasweissallesch.realnet.ch
realnet.ch
olten-sw.ch
besj.realnet.ch
realnet.ch
besj.realnet.ch
addon-jonasweissallesch.realnet.ch
dev1.realnet.ch
besj.realnet.ch
cbooks.realnet.ch
weblication.realnet.ch
besj.realnet.ch
acorn.realnet.ch
typo3.realnet.ch
weblication.realnet.ch
olten-sw.ch
typo3.realnet.ch
jungscharmoment.ch
addon-jonasweissallesch.realnet.ch
cbooks.realnet.ch
waffen-froelicher.realnet.ch
daester.net
realnet.ch
addon-revier32.realnet.ch
neos.realnet.ch
typo3.realnet.ch
acorn.realnet.ch
weblication.realnet.ch
addon-revier32.realnet.ch
jungscharmoment.ch
realnet.ch
jungscharmoment.ch
addon-daester.realnet.ch
realnet.ch
besj.realnet.ch
realnet.ch
cbooks.realnet.ch
jonasweissalles.ch
cbooks.realnet.ch
waffen-froelicher.realnet.ch
addon-jonasweissallesch.realnet.ch
addon-daester.realnet.ch
dev1.realnet.ch
typo3.realnet.ch
olten-sw.ch
addon-revier32.realnet.ch
besj.realnet.ch
weblication.realnet.ch
besj.realnet.ch
realnet.ch
besj.realnet.ch
acorn.realnet.ch
dev1.realnet.ch
acorn.realnet.ch
realnet.ch
addon-daester.realnet.ch
realnet.ch
dev1.realnet.ch
besj.realnet.ch
typo3.realnet.ch
waffen-froelicher.realnet.ch
dev1.realnet.ch
waffen-froelicher.realnet.ch
acorn.realnet.ch
realnet.ch
cbooks.realnet.ch
jonasweissalles.ch
realnet.ch
realnet.ch
realnet.ch
besj.realnet.ch
addon-revier32.realnet.ch
realnet.ch
addon-revier32.realnet.ch
weblication.realnet.ch
daester.net
typo3.realnet.ch
realnet.ch
realnet.ch
neos.realnet.ch
dev1.realnet.ch
addon-revier32.realnet.ch
besj.realnet.ch
realnet.ch
besj.realnet.ch
neos.realnet.ch
cbooks.realnet.ch
realnet.ch
realnet.ch
besj.realnet.ch
weblication.realnet.ch
daester.net
waffen-froelicher.realnet.ch
waffen-froelicher.realnet.ch
neos.realnet.ch
realnet.ch
neos.realnet.ch
cbooks.realnet.ch
neos.realnet.ch
addon-jonasweissallesch.realnet.ch
realnet.ch
olten-sw.ch
besj.realnet.ch
realnet.ch
besj.realnet.ch
addon-jonasweissallesch.realnet.ch
dev1.realnet.ch
besj.realnet.ch
cbooks.realnet.ch
weblication.realnet.ch
besj.realnet.ch
acorn.realnet.ch
typo3.realnet.ch
weblication.realnet.ch
olten-sw.ch
typo3.realnet.ch
jungscharmoment.ch
addon-jonasweissallesch.realnet.ch
cbooks.realnet.ch
waffen-froelicher.realnet.ch
daester.net
realnet.ch
addon-revier32.realnet.ch
neos.realnet.ch
typo3.realnet.ch
acorn.realnet.ch
weblication.realnet.ch
addon-revier32.realnet.ch
jungscharmoment.ch
realnet.ch
jungscharmoment.ch
addon-daester.realnet.ch
realnet.ch
besj.realnet.ch
realnet.ch
cbooks.realnet.ch
jonasweissalles.ch
cbooks.realnet.ch
Certificate
The complete raw certificate details for besj.realnet.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgISA7mUWP2aR7G7/+TTq5G/CYsMMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDExMjI4NDJaFw0y MDA1MzAxMjI4NDJaMBoxGDAWBgNVBAMTD2Jlc2oucmVhbG5ldC5jaDCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBALcOCscbTl3koaudvlLy6QReBxRSYXlU Sl3+uTyXic/jglnlBIRKh4R/qnoSW+oBf4JXruazWkzICKLSnqWEPPFOXKwtajJa oeoTqj9yek3KXLyOeVzxinYbDATGbNJrmVMAVmedCr8SiUyjMv2LTKwLMnqSu2By 3ZOP2B1SKBlJq/TV4fVmmyw/M1a9Uga0qMizurpYX+l1e3mtspnJGsvjpreSesJg 2dJhp2W5tJLzHjMAZ9WAHwDCOn8USwQxLnbgqdHJVQLcpeW9/uOW/UGnGB0M4WRt vkTi1WrEk6YaIDcF89JRGCQIoATvs7ZV3iB/qFzQYnapOu5ev10hqdcCAwEAAaOC AnswggJ3MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUgZL5pe7E0aYIL1AVwI3q/p4n OiQwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzAvBgNVHREEKDAmgg9iZXNqLnJlYWxuZXQuY2iCE3d3dy5iZXNqLnJlYWxu ZXQuY2gwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggr BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5 AgQCBIH3BIH0APIAdwDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAA AXCWSN55AAAEAwBIMEYCIQDo1Or8TCL5ZTFFiWNRPolYzg9HIU1BLaoXvEFgz/3F IAIhAJ1BZmZ0ipXFcfX0X0GQRBjCDK4G5A0PLpACrYovauwLAHcAB7dcG+V9aP/x sMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFwlkjeuAAABAMASDBGAiEA3+7NphHl jkOV+k9lZjHwFpILZdwPKOnKwNndWrrWzroCIQDtk35oLgqPTxQlmVTM2LwiuGZg onxfzDyTgAwn69p1ZTANBgkqhkiG9w0BAQsFAAOCAQEAVP+3o1yNMjp5pmS8AgC0 RsRiAhr1tJTu4+HmbssCmwtsQDfmxDnvmqujH0ADnBiuMLae5tA2yZXWrXREfTvs EDvGk1IWj9rnLPQLry9caDL/wzFouY5aTA2i4CuHveFlh0nz1NrPdPKjhGFCspnj Xfu+6OxppH29oPCVFnRJA3iRmOC/+jsKE5S8AzmP1EX/bYTLMintTesWXhlIfQcV TEeAghdEg3F9cmAhCWSg0WfHGyYKGxjXDMAVfh4RkVg7/c0WCWjTE9PC+rTaWTAy DVmNtV7x6nV8PdFnw2caa2zN1l/i8MHkFPXgSWXJAVLLRDyzYnSPT2OuO+OYmgY9 8A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw4KxxtOXeShq52+UvLp BF4HFFJheVRKXf65PJeJz+OCWeUEhEqHhH+qehJb6gF/gleu5rNaTMgIotKepYQ8 8U5crC1qMlqh6hOqP3J6TcpcvI55XPGKdhsMBMZs0muZUwBWZ50KvxKJTKMy/YtM rAsyepK7YHLdk4/YHVIoGUmr9NXh9WabLD8zVr1SBrSoyLO6ulhf6XV7ea2ymcka y+Omt5J6wmDZ0mGnZbm0kvMeMwBn1YAfAMI6fxRLBDEuduCp0clVAtyl5b3+45b9 QacYHQzhZG2+ROLVasSTphogNwXz0lEYJAigBO+ztlXeIH+oXNBidqk67l6/XSGp 1wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 324486283484827029349056728295100081867532 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 12:28:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-30 12:28:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'besj.realnet.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23108534226684291103668241137299693088803079356996916538319828092937251540335762374075951118292283044853047243349763594054452982874267448968882579292538913026678870664780364864177277122435882727956775868754380739533814360425413123192278002121658588127930327921324578174177181188984864732810379977108791882281714549748000608576796837505055628964603871336021412418593680929052785078044593197774436095087697715063716418314847225047883452229437831155414699766024149622406497532314224095765612434832259634642838629637153552752153249803415601867743544898475265318785936041563933496348345015855749578371194391655520126740951 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8192f9a5eec4d1a6082f5015c08deafe9e273a24 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besj.realnet.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besj.realnet.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001709648de790000040300483046022100e8d4eafc4c22f96531458963513e8958ce0f47214d412daa17bc4160cffdc5200221009d416666748a95c571f5f45f41904418c20cae06e40d0f2e9002ad8a2f6aec0b00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001709648deb80000040300483046022100dfeecda611e58e4395fa4f656631f016920b65dc0f28e9cac0d9dd5abad6ceba022100ed937e682e0a8f4f14259954ccd8bc22b86660a27c5fcc3c93800c27ebda7565 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0054ffb7a35c8d323a79a664bc0200b446c462021af5b494eee3e1e66ecb029b0b6c4037e6c439ef9aaba31f40039c18ae30b69ee6d036c995d6ad74447d3bec103bc69352168fdae72cf40baf2f5c6832ffc33168b98e5a4c0da2e02b87bde1658749f3d4dacf74f2a3846142b299e35dfbbee8ec69a47dbda0f09516744903789198e0bffa3b0a1394bc03398fd445ff6d84cb3229ed4deb165e19487d07154c478082174483717d7260210964a0d167c71b260a1b18d70cc0157e1e1191583bfdcd160968d313d3c2fab4da5930320d598db55ef1ea757c3dd167c3671a6b6ccdd65fe2f0c1e414f5e04965c90152cb443cb362748f4f63ae3be3989a063df0