nz.bible
Issued by R3
About this certificate
This digital certificate with serial number 04:cc:fe:2c:10:fb:03:48:c1:8e:1c:8d:3b:a2:e9:bb:3e:53 was issued on by Let's Encrypt.
With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=nz.bible
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:cc:fe:2c:10:fb:03:48:c1:8e:1c:8d:3b:a2:e9:bb:3e:53Serial Number (int): 418204599295309416158391018287487315033683
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 67:b9:8f:3c:65:ea:70:24:00:f2:54:9e:67:34:db:56:82:e8:b2:13
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 16:41:b9:e2:45:7d:d2:97:5b:47:13:97:1c:ae:e8:c0:9a:ca:12:08
Fingerprint (sha256): 2c:b9:9f:dd:1e:16:36:23:81:e2:ff:fb:f6:65:0f:c1:03:b7:f7:d9:e8:70:1e:7b:17:55:13:d0:78:a9:b3:82
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate nz.bible
19
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nz.bible
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
amormovies.com
bettercallpeyton.com
betzuu.co.newyorkcityhomedecor.info
blessing.vc.bettercallalaina.com
gulfwork.com
jahrootshats.com.justforplan.com
klas-bahis.co
mayor.ng.toki.com
musclebet.co
mushroomsearch.com
nz.bible
planetracing.com
signetlaw.com
sistersinc.com
smartbuilt.com
superdecordiy.info
thatsgoodshit.com
tryannyliberator.com
vidyozy.com
bettercallpeyton.com
betzuu.co.newyorkcityhomedecor.info
blessing.vc.bettercallalaina.com
gulfwork.com
jahrootshats.com.justforplan.com
klas-bahis.co
mayor.ng.toki.com
musclebet.co
mushroomsearch.com
nz.bible
planetracing.com
signetlaw.com
sistersinc.com
smartbuilt.com
superdecordiy.info
thatsgoodshit.com
tryannyliberator.com
vidyozy.com
Other certificates including the domain name nz.bible
(limited to 100 certificates)
5272653.ca
nz.bible
trailerupholstery.ca
5272653.ca
impossible.ca
nz.bible
kiesza.ca
kiesza.ca
vertera.ca
nz.bible
internet.fund
leaselock.ca
trailerupholstery.ca
nz.bible
nz.bible
5272653.ca
5272653.ca
westkelownavacationrentals.ca
creditcards.ac
nz.bible
trailerupholstery.ca
tess.vc
trailerupholstery.ca
5272653.ca
doktorapotheke24.de
5272653.ca
nz.bible
nz.bible
allanblock.on.ca
trailerupholstery.ca
kiesza.ca
5272653.ca
trailerupholstery.ca
trailerupholstery.ca
www.shop.gutrad.de
trailerupholstery.ca
trailerupholstery.ca
trailerupholstery.ca
nz.bible
trailerupholstery.ca
5272653.ca
impossible.ca
nz.bible
kiesza.ca
kiesza.ca
vertera.ca
nz.bible
internet.fund
leaselock.ca
trailerupholstery.ca
nz.bible
nz.bible
5272653.ca
5272653.ca
westkelownavacationrentals.ca
creditcards.ac
nz.bible
trailerupholstery.ca
tess.vc
trailerupholstery.ca
5272653.ca
doktorapotheke24.de
5272653.ca
nz.bible
nz.bible
allanblock.on.ca
trailerupholstery.ca
kiesza.ca
5272653.ca
trailerupholstery.ca
trailerupholstery.ca
www.shop.gutrad.de
trailerupholstery.ca
trailerupholstery.ca
trailerupholstery.ca
Certificate
The complete raw certificate details for nz.bible in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgISBMz+LBD7A0jBjhyNO6Lpuz5TMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA3MjIwMzM2MjRaFw0yMTEwMjAwMzM2MjJaMBMxETAPBgNVBAMT CG56LmJpYmxlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBU9/Z4d k/VEoENv1r6hUWTz/IXULxyF2f3B0gA7SsH6kmf6ZmYrdtbaC1HbkdzPsQzVgPK3 Obm3SXSTpQUq4NLowIw4SSmWuWayOM0VtT6jEQfsXroHoTGXtvT40TdxEZ/qd+Ua DS/fgSVSI/roHVcRt5q7fzRLqMGMtjRaYk/264wDtblJS2hXdXzfKxTP9ROUiiz5 LPgJtj1ggc/cqbbeFq87ssoJmb3uXRXWV3rgTk9XSdaYw/L4ie5WAoI/kNRs/h4D DHk+RK3D6nFG96Ho6ta96VXh7IyWIRbwJF2OsaTMgSu3cY/TB0xqdGvSnMok0EIv 4RbwNtvqPF9G8wIDAQABo4IDtjCCA7IwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRn uY88ZepwJADyVJ5nNNtWguiyEzAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+d ixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxl bmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCAYMG A1UdEQSCAXowggF2gg5hbW9ybW92aWVzLmNvbYIUYmV0dGVyY2FsbHBleXRvbi5j b22CI2JldHp1dS5jby5uZXd5b3JrY2l0eWhvbWVkZWNvci5pbmZvgiBibGVzc2lu Zy52Yy5iZXR0ZXJjYWxsYWxhaW5hLmNvbYIMZ3VsZndvcmsuY29tgiBqYWhyb290 c2hhdHMuY29tLmp1c3Rmb3JwbGFuLmNvbYINa2xhcy1iYWhpcy5jb4IRbWF5b3Iu bmcudG9raS5jb22CDG11c2NsZWJldC5jb4ISbXVzaHJvb21zZWFyY2guY29tgghu ei5iaWJsZYIQcGxhbmV0cmFjaW5nLmNvbYINc2lnbmV0bGF3LmNvbYIOc2lzdGVy c2luYy5jb22CDnNtYXJ0YnVpbHQuY29tghJzdXBlcmRlY29yZGl5LmluZm+CEXRo YXRzZ29vZHNoaXQuY29tghR0cnlhbm55bGliZXJhdG9yLmNvbYILdmlkeW96eS5j b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC BIH2BIHzAPEAdwD2XJQv0XcwIhRUGAgwlFaO400TGTO/3wwvIAvMTvFk4wAAAXrM gBYrAAAEAwBIMEYCIQCGAbrryQ84o/uZOD5gFVJ5WyrRX3nJdOTaB4kzaZS7nwIh AKa4vNfmKSX8wJvICuxuF7mMqsZPW5OaLUhuF0mIVXDjAHYARJRlLrDuzq/EQAfY qP4owNrmgr7YyzG1P9MzlrW2gagAAAF6zIAYPwAABAMARzBFAiEA2+HCQe/P1G9u /2klTyAxTrfOl30s6295kdZ3WTDY5+4CIDoqiLNNwWmQ7OPbreuyBoL8qcBHCG6a K/i0Bg1aKFYBMA0GCSqGSIb3DQEBCwUAA4IBAQB56Ezwwq/UTqmG8KKanSqu0Ftc cDfbctQSw01x9l9t9oD8LYbKyFeA49xEdDS01ZCwl0xPw5RkNK4mM4tsCqnw+/ap jzLm5a6TJ+AlRg0ail1sO2JGuW6XoDK7JBcNSGMnowTMI3tXIY7OvsMm9ot6ood6 igJxlj9hZQHd29C6gUkQ0qNGx62AO0oY7t0idNV9h2z3sC3RhIOsSo7EPaTPmDXi iZPPaTwFBe21wrBkurEtfLchjos2KU9BpBRqFn2KYlonwYWTGkDycnFBtSHjmfoC mBHfHlU8UdoXf8uIxeP0JLxB0cMwM7931TPcAvBtBnuW5+kWGacGDQJMQM7u -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBU9/Z4dk/VEoENv1r6h UWTz/IXULxyF2f3B0gA7SsH6kmf6ZmYrdtbaC1HbkdzPsQzVgPK3Obm3SXSTpQUq 4NLowIw4SSmWuWayOM0VtT6jEQfsXroHoTGXtvT40TdxEZ/qd+UaDS/fgSVSI/ro HVcRt5q7fzRLqMGMtjRaYk/264wDtblJS2hXdXzfKxTP9ROUiiz5LPgJtj1ggc/c qbbeFq87ssoJmb3uXRXWV3rgTk9XSdaYw/L4ie5WAoI/kNRs/h4DDHk+RK3D6nFG 96Ho6ta96VXh7IyWIRbwJF2OsaTMgSu3cY/TB0xqdGvSnMok0EIv4RbwNtvqPF9G 8wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 418204599295309416158391018287487315033683 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-22 03:36:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-20 03:36:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nz.bible' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23238323008890579740218603896064220394101266088644866457055292598867140362775072508932143281233674370189975875134443260948723011104612551651043298003580225854058743806139482504491337929054383545352949577169750799624198817526304788055312266719760705704904884816593850919209377833817789110251578252490764899018868306057768895073048688879718548090063987722329301832144669146463999720375033392987265955078655134650303112664720515694871213119314252168135653830073538611909644236480806723601461005787599690760416102117854776071352876350786612553864694279631060083431686324368302696469704239391576972294952511822314984130291 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 67b98f3c65ea702400f2549e6734db5682e8b213 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (378 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amormovies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettercallpeyton.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betzuu.co.newyorkcityhomedecor.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blessing.vc.bettercallalaina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gulfwork.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jahrootshats.com.justforplan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klas-bahis.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayor.ng.toki.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musclebet.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mushroomsearch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nz.bible' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetracing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signetlaw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistersinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartbuilt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superdecordiy.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatsgoodshit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tryannyliberator.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidyozy.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017acc80162b00000403004830460221008601baebc90f38a3fb99383e601552795b2ad15f79c974e4da0789336994bb9f022100a6b8bcd7e62925fcc09bc80aec6e17b98caac64f5b939a2d486e1749885570e30076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017acc80183f0000040300473045022100dbe1c241efcfd46f6eff69254f20314eb7ce977d2ceb6f7991d6775930d8e7ee02203a2a88b34dc16990ece3dbadebb20682fca9c047086e9a2bf8b4060d5a285601 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0079e84cf0c2afd44ea986f0a29a9d2aaed05b5c7037db72d412c34d71f65f6df680fc2d86cac85780e3dc447434b4d590b0974c4fc3946434ae26338b6c0aa9f0fbf6a98f32e6e5ae9327e025460d1a8a5d6c3b6246b96e97a032bb24170d486327a304cc237b57218ecebec326f68b7aa2877a8a0271963f616501dddbd0ba814910d2a346c7ad803b4a18eedd2274d57d876cf7b02dd18483ac4a8ec43da4cf9835e28993cf693c0505edb5c2b064bab12d7cb7218e8b36294f41a4146a167d8a625a27c185931a40f2727141b521e399fa029811df1e553c51da177fcb88c5e3f424bc41d1c33033bf77d533dc02f06d067b96e7e91619a7060d024c40ceee