staging.cnxt.rodenstock.com
Issued by R3
About this certificate
This digital certificate with serial number 04:62:de:90:34:0a:23:59:d0:0c:0c:32:ad:3e:b6:4e:be:ee was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=staging.cnxt.rodenstock.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:62:de:90:34:0a:23:59:d0:0c:0c:32:ad:3e:b6:4e:be:eeSerial Number (int): 382092653046593357912115129619024867933934
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ca:c0:76:f2:78:2e:e8:9e:10:09:47:63:8e:94:3a:29:fd:cf:61:1b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 2a:18:d1:71:4f:f9:de:d6:90:d5:ef:93:fa:5b:94:cb:1f:4e:95:38
Fingerprint (sha256): 29:bf:e5:78:56:a8:9b:76:63:11:10:fc:df:f9:05:0e:66:e9:5c:45:09:e8:29:55:72:63:cf:43:12:18:53:5c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate staging.cnxt.rodenstock.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for staging.cnxt.rodenstock.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
staging.cnxt.rodenstock.com
Other certificates including the domain name rodenstock.com
(limited to 100 certificates)
*.rodenstock.com
sf6-staging.cnxt.rodenstock.com
ftp3.rodenstock.com
analytics.cnxt.rodenstock.com
cnxt.rodenstock.com
erpc-cl1.rodenstock.com
develop.cnxt.rodenstock.com
scopia.rodenstock.com
wifi.rodenstock.com
countdown.rodenstock.com
api-staging.cnxt.rodenstock.com
countdown.rodenstock.com
dsa.rodenstock.com
cnxt-hub-preview.cnxt.rodenstock.com
develop.cnxt.rodenstock.com
select-api.cnxt.rodenstock.com
webmail.rodenstock.com
hub-staging.cnxt.rodenstock.com
develop.cnxt.rodenstock.com
dsa.rodenstock.com
gateway-develop.cnxt.rodenstock.com
consumer-api-develop.cnxt.rodenstock.com
consumer-api-develop.cnxt.rodenstock.com
consumer-api-staging.cnxt.rodenstock.com
mailsn.rodenstock.com
wifi.rodenstock.com
mailsn.rodenstock.com
payment.rodenstock.com
develop.cnxt.rodenstock.com
sf6-develop.cnxt.rodenstock.com
api-develop.cnxt.rodenstock.com
select-api-staging.cnxt.rodenstock.com
webservices.rodenstock.com
winfitb2b.rodenstock.com
dsa.rodenstock.com
select-api.cnxt.rodenstock.com
select-api-develop.cnxt.rodenstock.com
css.rodenstock.com
sf6-develop.cnxt.rodenstock.com
mailsn.rodenstock.com
analytics.cnxt.rodenstock.com
sf6.cnxt.rodenstock.com
dsa.rodenstock.com
*.rodenstock.com
sso.cnxt.rodenstock.com
staging.cnxt.rodenstock.com
backend.events.rodenstock.com
sf6.cnxt.rodenstock.com
cnxt.rodenstock.com
trustcenter.cnxt.rodenstock.com
expertenfilm.rodenstock.com
www.rodenstock.com
bignorm.rodenstock.com
payment.rodenstock.com
api-develop.cnxt.rodenstock.com
sso.cnxt.rodenstock.com
consumer-api.cnxt.rodenstock.com
mailsn.rodenstock.com
semis.rodenstock.com
hub.cnxt.rodenstock.com
*.rodenstock.com
api-staging.cnxt.rodenstock.com
expertmovie.rodenstock.com
staging.cnxt.rodenstock.com
cnxt-frontend-preview.cnxt.rodenstock.com
tool.rodenstock.com
gateway-develop.cnxt.rodenstock.com
vst.rodenstock.com
backend.events.rodenstock.com
hub.cnxt.rodenstock.com
cnxt-postgraphile-production.cnxt.rodenstock.com
analytics.cnxt.rodenstock.com
api.cnxt.rodenstock.com
cnxt-postgraphile-production.cnxt.rodenstock.com
select-api.cnxt.rodenstock.com
cnxt.rodenstock.com
sf6-preview.cnxt.rodenstock.com
dsa.rodenstock.com
cnxt-sf6-backend-staging.cnxt.rodenstock.com
api-develop.cnxt.rodenstock.com
payment.rodenstock.com
wiki.cnxt.rodenstock.com
tool.rodenstock.com
sf6-staging.cnxt.rodenstock.com
dsa-develop.cnxt.rodenstock.com
www.rodenstock.com
tool.rodenstock.com
shop-develop.cnxt.rodenstock.com
api-staging.cnxt.rodenstock.com
api-staging.cnxt.rodenstock.com
tool.rodenstock.com
trustcenter.cnxt.rodenstock.com
dsa.cnxt.rodenstock.com
www.rodenstock.com
cnxt-consumer-api-preview.cnxt.rodenstock.com
css.rodenstock.com
consumer-api-staging.cnxt.rodenstock.com
gateway-preview.cnxt.rodenstock.com
api.cnxt.rodenstock.com
cnxt-postgraphile-staging.cnxt.rodenstock.com
sf6-staging.cnxt.rodenstock.com
ftp3.rodenstock.com
analytics.cnxt.rodenstock.com
cnxt.rodenstock.com
erpc-cl1.rodenstock.com
develop.cnxt.rodenstock.com
scopia.rodenstock.com
wifi.rodenstock.com
countdown.rodenstock.com
api-staging.cnxt.rodenstock.com
countdown.rodenstock.com
dsa.rodenstock.com
cnxt-hub-preview.cnxt.rodenstock.com
develop.cnxt.rodenstock.com
select-api.cnxt.rodenstock.com
webmail.rodenstock.com
hub-staging.cnxt.rodenstock.com
develop.cnxt.rodenstock.com
dsa.rodenstock.com
gateway-develop.cnxt.rodenstock.com
consumer-api-develop.cnxt.rodenstock.com
consumer-api-develop.cnxt.rodenstock.com
consumer-api-staging.cnxt.rodenstock.com
mailsn.rodenstock.com
wifi.rodenstock.com
mailsn.rodenstock.com
payment.rodenstock.com
develop.cnxt.rodenstock.com
sf6-develop.cnxt.rodenstock.com
api-develop.cnxt.rodenstock.com
select-api-staging.cnxt.rodenstock.com
webservices.rodenstock.com
winfitb2b.rodenstock.com
dsa.rodenstock.com
select-api.cnxt.rodenstock.com
select-api-develop.cnxt.rodenstock.com
css.rodenstock.com
sf6-develop.cnxt.rodenstock.com
mailsn.rodenstock.com
analytics.cnxt.rodenstock.com
sf6.cnxt.rodenstock.com
dsa.rodenstock.com
*.rodenstock.com
sso.cnxt.rodenstock.com
staging.cnxt.rodenstock.com
backend.events.rodenstock.com
sf6.cnxt.rodenstock.com
cnxt.rodenstock.com
trustcenter.cnxt.rodenstock.com
expertenfilm.rodenstock.com
www.rodenstock.com
bignorm.rodenstock.com
payment.rodenstock.com
api-develop.cnxt.rodenstock.com
sso.cnxt.rodenstock.com
consumer-api.cnxt.rodenstock.com
mailsn.rodenstock.com
semis.rodenstock.com
hub.cnxt.rodenstock.com
*.rodenstock.com
api-staging.cnxt.rodenstock.com
expertmovie.rodenstock.com
staging.cnxt.rodenstock.com
cnxt-frontend-preview.cnxt.rodenstock.com
tool.rodenstock.com
gateway-develop.cnxt.rodenstock.com
vst.rodenstock.com
backend.events.rodenstock.com
hub.cnxt.rodenstock.com
cnxt-postgraphile-production.cnxt.rodenstock.com
analytics.cnxt.rodenstock.com
api.cnxt.rodenstock.com
cnxt-postgraphile-production.cnxt.rodenstock.com
select-api.cnxt.rodenstock.com
cnxt.rodenstock.com
sf6-preview.cnxt.rodenstock.com
dsa.rodenstock.com
cnxt-sf6-backend-staging.cnxt.rodenstock.com
api-develop.cnxt.rodenstock.com
payment.rodenstock.com
wiki.cnxt.rodenstock.com
tool.rodenstock.com
sf6-staging.cnxt.rodenstock.com
dsa-develop.cnxt.rodenstock.com
www.rodenstock.com
tool.rodenstock.com
shop-develop.cnxt.rodenstock.com
api-staging.cnxt.rodenstock.com
api-staging.cnxt.rodenstock.com
tool.rodenstock.com
trustcenter.cnxt.rodenstock.com
dsa.cnxt.rodenstock.com
www.rodenstock.com
cnxt-consumer-api-preview.cnxt.rodenstock.com
css.rodenstock.com
consumer-api-staging.cnxt.rodenstock.com
gateway-preview.cnxt.rodenstock.com
api.cnxt.rodenstock.com
cnxt-postgraphile-staging.cnxt.rodenstock.com
Certificate
The complete raw certificate details for staging.cnxt.rodenstock.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISBGLekDQKI1nQDAwyrT62Tr7uMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA5MjYwODAwMzZaFw0yMjEyMjUwODAwMzVaMCYxJDAiBgNVBAMT G3N0YWdpbmcuY254dC5yb2RlbnN0b2NrLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAM9pnT32mZcr3ZJjCS/jvUcTHLsaCYtchqSPpObcNUEF0TNv IpLJqZFE6/ZaaGtCih3H6DtE4fcsmTvnrI6OHLPwEPzTTwBw150Iqccv2Z6G7OsQ 8jKn2qp8C7DymGsdWF8ZXuUTmX3IxybJyJJgXEGFNAk3p+OdEXccVBCwF3GU1RXb xc0/w/EMwX2RqfFAGq62/uU4PaWg/K8lVdA8KownKrE3SEl70U9bE3/OiBwniCyW zzpIvHVG1TDrw/UD7ircbIIVqDsRwfqAjK1Ral5SJ8kysGVPvOC3ShC6PDqUN74F z5mDzzxpA6kanTv0AartKDI06We0imgzSAPfEYkCAwEAAaOCAlYwggJSMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUysB28ngu6J4QCUdjjpQ6Kf3PYRswHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wJgYDVR0RBB8wHYIbc3RhZ2luZy5jbnh0LnJvZGVuc3Rv Y2suY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHW eQIEAgSB9QSB8gDwAHYAQcjKsd8iRkoQxqE6CUKHXk4xixsD6+tLx2jwkGKWBvYA AAGDeQbeMwAABAMARzBFAiEAx4U9eJBZuKH0v8VqtBEM56KcRgrR/+NyDVV7mXWX TbwCIBwhAm2CwHeWccnTt41102Le11CSGlvOi7wcWUqvznjiAHYAKXm+8J45OSHw VnOfY6V35b5XfZxgCvj5TV0mXCVdx4QAAAGDeQbeEgAABAMARzBFAiA1GUFBqoy1 syzGmHih1sG5k83X1qXXVQE2YXe1KpvwywIhANVuHAFoZvDyk9ATE/rO0u/ixHPd 135/6bhQI1tv6/FYMA0GCSqGSIb3DQEBCwUAA4IBAQCWf19T27ceihzD5F9FbpBV KYUY9T4dY6qgjUeZUIz96nke06YRgxRNYOtZ5DTcPBHMyl/j3sGjBjUvwuaDbIoY eu6FDt9qTWCGsWiAMklQ7UegD+53dGD+WFm5fo9rwgj5iFWdhllFqaV/47+04iF9 1EgYBDpfeWwP2CIoFcyJv72Je0wVwR6c/rFu4S5f9+SS5IWSe58fQVHUGeRZr9se D5jIPiiP97w9qQiZfhNAaH5kyM0eBhFxWMjDsxFP4dDYdS4iPsIIZfDGUwyiAWsH el7xb+pr/jf/0gkNaCPGaRIL+GJdew1DPhtx7mxmOYs/ZtfcBZLjN8oS29Z/t+Xq -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2mdPfaZlyvdkmMJL+O9 RxMcuxoJi1yGpI+k5tw1QQXRM28iksmpkUTr9lpoa0KKHcfoO0Th9yyZO+esjo4c s/AQ/NNPAHDXnQipxy/Znobs6xDyMqfaqnwLsPKYax1YXxle5ROZfcjHJsnIkmBc QYU0CTen450RdxxUELAXcZTVFdvFzT/D8QzBfZGp8UAarrb+5Tg9paD8ryVV0Dwq jCcqsTdISXvRT1sTf86IHCeILJbPOki8dUbVMOvD9QPuKtxsghWoOxHB+oCMrVFq XlInyTKwZU+84LdKELo8OpQ3vgXPmYPPPGkDqRqdO/QBqu0oMjTpZ7SKaDNIA98R iQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 382092653046593357912115129619024867933934 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-26 08:00:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-25 08:00:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.cnxt.rodenstock.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26183409444236952941333561736140834053324608386462654979928643040376598222429197526378459199412844847591153110868589073486844665168512700125830061975479597948125686366195174691870662466974626496140845890101869842300419031784854675179535673108424833589030007727326166570423503794578532589314118074467633054782154220203303065098899941654633147069080168681074006622308009025837493966329702955800785697613962995314169502157691504364089103460091506353062470636723255843830120805562951298792524610371404397931315220271681517322420570792577422558406955324504657609467828985368594491928737834003182702395222673880640068194697 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cac076f2782ee89e100947638e943a29fdcf611b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cnxt.rodenstock.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001837906de330000040300473045022100c7853d789059b8a1f4bfc56ab4110ce7a29c460ad1ffe3720d557b9975974dbc02201c21026d82c0779671c9d3b78d75d362ded750921a5bce8bbc1c594aafce78e20076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001837906de120000040300473045022035194141aa8cb5b32cc69878a1d6c1b993cdd7d6a5d75501366177b52a9bf0cb022100d56e1c016866f0f293d01313faced2efe2c473ddd77e7fe9b850235b6febf158 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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