nflshop.com
Issued by R3
About this certificate
This digital certificate with serial number 04:bd:28:f8:82:98:dc:3f:01:95:0a:b2:f3:0e:61:64:06:5c was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=nflshop.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:bd:28:f8:82:98:dc:3f:01:95:0a:b2:f3:0e:61:64:06:5cSerial Number (int): 412816970533374761502085795019936198035036
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 09:28:db:54:6a:b6:87:cc:b7:0e:a9:4e:3e:05:07:d1:c4:68:e4:b0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 54:d5:a8:cd:57:ce:93:1b:9e:35:0b:ef:ca:22:ee:fb:a5:18:80:5f
Fingerprint (sha256): 28:b3:4b:11:a4:37:76:6f:c0:b4:0b:37:24:e3:48:ee:03:e4:28:b1:14:36:ff:9d:61:4c:1d:cb:9f:73:f2:e4
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate nflshop.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nflshop.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nflshop.com
www.nflshop.com
www.nflshop.com
Other certificates including the domain name nflshop.com
(limited to 100 certificates)
europe.nflshop.com
secure01.fanaticsretailgroup.com
domains.returnly.com
secure01.fanaticsretailgroup.com
www.nflshop.com
r.europe.nflshop.com
secure01.fanaticsretailgroup.com
nflshop.com
domains.returnly.com
secure01.fanaticsretailgroup.com
domains.returnly.com
insidenfl.nflshop.com
m.nflshop.com
nflshop.com
r.europe.nflshop.com
europe.nflshop.com
returns.nflshop.com
www.nflshop.com
www.nflshop.com
www.nflshop.com
returns.nflshop.com
domains.returnly.com
returns.nflshop.com
domains.returnly.com
insidenfl.nflshop.com
www.nflshop.com
secure04.dv.fanaticsretailgroup.com
domains.returnly.com
www.nflshop.com
secure04.dv.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.nflshop.com
www.nflshop.com
nflshop.com
strack.europe.nflshop.com
europe.nflshop.com
m.europe.nflshop.com
secure01.fanaticsretailgroup.com
r.europe.nflshop.com
secure04.dv.fanaticsretailgroup.com
returns.nflshop.com
r.europe.nflshop.com
www.nflshop.com
m.europe.nflshop.com
europe.nflshop.com
secure01.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
www.nflshop.com
m.nflshop.com
returns.nflshop.com
europe2.nflshop.com
strack.europe.nflshop.com
www.nflshop.com
www.nflshop.com
nflshop.com
m.nflshop.com
secure04.dv.fanaticsretailgroup.com
strack.europe.nflshop.com
nflshop.com
www.nflshop.com
insidenfl.nflshop.com
secure01.fanaticsretailgroup.com
nflshop.com
r.europe.nflshop.com
nflshop.com
www.nflshop.com
secure04.dv.fanaticsretailgroup.com
returns.nflshop.com
strack.europe.nflshop.com
secure04.dv.fanaticsretailgroup.com
returns.nflshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
europe.nflshop.com
domains.returnly.com
domains.returnly.com
secure01.fanaticsretailgroup.com
m.europe.nflshop.com
domains.returnly.com
europe.nflshop.com
r.europe.nflshop.com
domains.returnly.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
domains.returnly.com
nflshop.com
nflshop.com
www.nflshop.com
europe2.nflshop.com
secure01.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
strack.europe.nflshop.com
www.nflshop.com
r.europe.nflshop.com
nflshop.com
www.nflshop.com
m.europe.nflshop.com
europe.nflshop.com
domains.returnly.com
www.nflshop.com
secure01.fanaticsretailgroup.com
domains.returnly.com
secure01.fanaticsretailgroup.com
www.nflshop.com
r.europe.nflshop.com
secure01.fanaticsretailgroup.com
nflshop.com
domains.returnly.com
secure01.fanaticsretailgroup.com
domains.returnly.com
insidenfl.nflshop.com
m.nflshop.com
nflshop.com
r.europe.nflshop.com
europe.nflshop.com
returns.nflshop.com
www.nflshop.com
www.nflshop.com
www.nflshop.com
returns.nflshop.com
domains.returnly.com
returns.nflshop.com
domains.returnly.com
insidenfl.nflshop.com
www.nflshop.com
secure04.dv.fanaticsretailgroup.com
domains.returnly.com
www.nflshop.com
secure04.dv.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.nflshop.com
www.nflshop.com
nflshop.com
strack.europe.nflshop.com
europe.nflshop.com
m.europe.nflshop.com
secure01.fanaticsretailgroup.com
r.europe.nflshop.com
secure04.dv.fanaticsretailgroup.com
returns.nflshop.com
r.europe.nflshop.com
www.nflshop.com
m.europe.nflshop.com
europe.nflshop.com
secure01.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
www.nflshop.com
m.nflshop.com
returns.nflshop.com
europe2.nflshop.com
strack.europe.nflshop.com
www.nflshop.com
www.nflshop.com
nflshop.com
m.nflshop.com
secure04.dv.fanaticsretailgroup.com
strack.europe.nflshop.com
nflshop.com
www.nflshop.com
insidenfl.nflshop.com
secure01.fanaticsretailgroup.com
nflshop.com
r.europe.nflshop.com
nflshop.com
www.nflshop.com
secure04.dv.fanaticsretailgroup.com
returns.nflshop.com
strack.europe.nflshop.com
secure04.dv.fanaticsretailgroup.com
returns.nflshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
europe.nflshop.com
domains.returnly.com
domains.returnly.com
secure01.fanaticsretailgroup.com
m.europe.nflshop.com
domains.returnly.com
europe.nflshop.com
r.europe.nflshop.com
domains.returnly.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
domains.returnly.com
nflshop.com
nflshop.com
www.nflshop.com
europe2.nflshop.com
secure01.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
strack.europe.nflshop.com
www.nflshop.com
r.europe.nflshop.com
nflshop.com
www.nflshop.com
m.europe.nflshop.com
europe.nflshop.com
domains.returnly.com
www.nflshop.com
Certificate
The complete raw certificate details for nflshop.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISBL0o+IKY3D8BlQqy8w5hZAZcMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA3MjIxMzQyMDNaFw0yMjEwMjAxMzQyMDJaMBYxFDASBgNVBAMT C25mbHNob3AuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBIu WEmDELRLRSwNTLcChY/rL/yEBQcngG1DGV4GFs10pBxJV8Fg5riNxeJsOrdCKEtF WdiLCIoqH6DLaLUBfCKUxhR3YU8m7bsVX4FV4SCcMFUWjy8UITt1SOzMDNRh9QAL S5JRSKkvJJ8trt/uXFxmwB0O+SdMo3rzhuDI2/9EaJ/+H2N6x6M6oUIxd8B5Wted cTbkycaLdFfntuanZ+5KHrNwU4bJcz2XwhaknyEFUSYscxRsCY+O+7absa8EFmo9 jfbJNBfdOHvpqNfvPmLZB1EXqfPVje4KpBiSpKHdzietaz9wF5wK5T4seMzhXqy2 iY4gIm9hW7UYQMwoYwIDAQABo4ICVTCCAlEwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBQJKNtUaraHzLcOqU4+BQfRxGjksDAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAn BgNVHREEIDAeggtuZmxzaG9wLmNvbYIPd3d3Lm5mbHNob3AuY29tMEwGA1UdIARF MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6 Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUA QcjKsd8iRkoQxqE6CUKHXk4xixsD6+tLx2jwkGKWBvYAAAGCJlvDVwAABAMARjBE AiBV8wLEIpXhup2wQSIuz3ZEGegGqpVGCqsBZm0Mo8jZswIgYgLVJKRQu79wbheo emmEpWhqJaSf3CkPhtOfvw/cHfMAdQApeb7wnjk5IfBWc59jpXflvld9nGAK+PlN XSZcJV3HhAAAAYImW8MpAAAEAwBGMEQCIBAGDMz5YcRYD6P2CsXQGL8bsMaC78cY agEySdhUQ5krAiAoRjKfSGbGAArgGFN606tHyTt6rg2cCq+g7cnKgmbqyjANBgkq hkiG9w0BAQsFAAOCAQEATR7oeT1kVVRyApsbrAootqC2lp7ykYCSRjNu+c/8Mh6Y ooC0hS+SIWEgM3uSRNYvsMVIl4MdMb6aDfjdmIYYr67oGd/cm7gjerJZXaG6vMH4 C7IMn/d0gnitgxKfZ5kPZFGJBsyo41U59GZsCYX0xHrvL4qs/BNBUqtQz3a+ox1O XUmG5jGoYLbU0g8EoqTmI/IlaIj9Fhcfmm7js5XlXdKlUVAHShNeNXMrvN/+Qvoy MUwZSVjYDyaxoMIHmzgFkpALtgt0CKnQSUW+6IjOt0xc/X0ny5ux/aCNcgQM6T2L fV19KKKOr6ir0MmikhZ04Wv4q/Cw3ZSXCOVCglqw4Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBIuWEmDELRLRSwNTLcC hY/rL/yEBQcngG1DGV4GFs10pBxJV8Fg5riNxeJsOrdCKEtFWdiLCIoqH6DLaLUB fCKUxhR3YU8m7bsVX4FV4SCcMFUWjy8UITt1SOzMDNRh9QALS5JRSKkvJJ8trt/u XFxmwB0O+SdMo3rzhuDI2/9EaJ/+H2N6x6M6oUIxd8B5WtedcTbkycaLdFfntuan Z+5KHrNwU4bJcz2XwhaknyEFUSYscxRsCY+O+7absa8EFmo9jfbJNBfdOHvpqNfv PmLZB1EXqfPVje4KpBiSpKHdzietaz9wF5wK5T4seMzhXqy2iY4gIm9hW7UYQMwo YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 412816970533374761502085795019936198035036 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-22 13:42:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-20 13:42:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nflshop.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22731860296224099105846673016989062101959774798803688834312970222036636428604672748548154358664611106985908370688352045816897600021166742859989742019308999277123374367035521306291615125240403319039666389319184769902414435559432895033731135599677951039990556135065443511139878161979474001849624870669686521128545939140209722259922271380251395338547859086546316729689998882030219364894324148564701989055072060771770244193423465357779629581942857118761991207476725933553426116671039682092701906929678279973783071820851876568005825990137255152117437963426589697092651268839065537078267897336267214144806278457716885956707 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0928db546ab687ccb70ea94e3e0507d1c468e4b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nflshop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nflshop.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000182265bc3570000040300463044022055f302c42295e1ba9db041222ecf764419e806aa95460aab01666d0ca3c8d9b302206202d524a450bbbf706e17a87a6984a5686a25a49fdc290f86d39fbf0fdc1df30075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000182265bc3290000040300463044022010060cccf961c4580fa3f60ac5d018bf1bb0c682efc7186a013249d85443992b02202846329f4866c6000ae018537ad3ab47c93b7aae0d9c0aafa0edc9ca8266eaca . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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