mail.ori-metal.com
Issued by R3
About this certificate
This digital certificate with serial number 04:3c:e1:76:87:d1:4b:94:33:f1:be:c4:3e:78:f7:d0:58:6f was issued on by Let's Encrypt.
With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mail.ori-metal.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:3c:e1:76:87:d1:4b:94:33:f1:be:c4:3e:78:f7:d0:58:6fSerial Number (int): 369165777487085580575876357407136315103343
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 24:11:93:55:a8:42:67:f3:42:4d:d9:b8:91:4b:3c:46:ad:bb:f8:09
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 71:5e:ad:df:d5:cb:e3:65:db:00:d9:c8:55:7a:16:60:b8:8c:6b:8f
Fingerprint (sha256): 2d:db:4c:8e:c4:f6:df:a1:20:ab:f0:ac:73:57:e4:b3:ca:76:79:e2:9f:d9:ea:38:bb:fb:54:b0:15:3b:ad:71
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate mail.ori-metal.com
29
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.ori-metal.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
login.mfreitas.adv.br
mail.arvancloud.com
mail.asigas.com.mx
mail.controserve.com
mail.dael.cl
mail.drjorgemontenegro.cl
mail.ersheid.com
mail.fixcodeseven.com
mail.globalmediaworks.in
mail.horizoncable.co.ke
mail.imchugh.com
mail.inflectioncx.com
mail.jouerclothing.store
mail.kindredcollections.com
mail.mihirsangani.com
mail.n21.my
mail.newandalusia.com
mail.opticip.com
mail.ori-metal.com
mail.ovms.org
mail.pg3logistics.com
mail.recamsolutions.com
mail.risb.net
mail.spacenodes.net
mail.toppernicus.com
mail.vrs.im
mail.wilstech.com
mail.wissal.qa
webmail.sanantoniolariviere.com
mail.arvancloud.com
mail.asigas.com.mx
mail.controserve.com
mail.dael.cl
mail.drjorgemontenegro.cl
mail.ersheid.com
mail.fixcodeseven.com
mail.globalmediaworks.in
mail.horizoncable.co.ke
mail.imchugh.com
mail.inflectioncx.com
mail.jouerclothing.store
mail.kindredcollections.com
mail.mihirsangani.com
mail.n21.my
mail.newandalusia.com
mail.opticip.com
mail.ori-metal.com
mail.ovms.org
mail.pg3logistics.com
mail.recamsolutions.com
mail.risb.net
mail.spacenodes.net
mail.toppernicus.com
mail.vrs.im
mail.wilstech.com
mail.wissal.qa
webmail.sanantoniolariviere.com
Other certificates including the domain name ori-metal.com
(limited to 100 certificates)
login.naveia.com.br
mail.drandresduran.com
login.imponoeliahn.com
mail.sohelarman.me
mail.ori-metal.com
mail.drandresduran.com
login.naveia.com.br
mail.ori-metal.com
mail.ori-metal.com
mail.drandresduran.com
mail.drandresduran.com
login.imponoeliahn.com
*.ori-metal.com
login.imponoeliahn.com
ori-metal.com
login.naveia.com.br
login.naveia.com.br
mail.sohelarman.me
mail.ovms.org
mail.ori-metal.com
mail.sohelarman.me
mail.ovms.org
login.imponoeliahn.com
mail.ovms.org
mail.sohelarman.me
mail.ovms.org
mail.drandresduran.com
login.imponoeliahn.com
mail.sohelarman.me
mail.ori-metal.com
mail.drandresduran.com
login.naveia.com.br
mail.ori-metal.com
mail.ori-metal.com
mail.drandresduran.com
mail.drandresduran.com
login.imponoeliahn.com
*.ori-metal.com
login.imponoeliahn.com
ori-metal.com
login.naveia.com.br
login.naveia.com.br
mail.sohelarman.me
mail.ovms.org
mail.ori-metal.com
mail.sohelarman.me
mail.ovms.org
login.imponoeliahn.com
mail.ovms.org
mail.sohelarman.me
mail.ovms.org
Certificate
The complete raw certificate details for mail.ori-metal.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISBDzhdofRS5Qz8b7EPnj30FhvMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA4MTkxNjU2MzNaFw0yMjExMTcxNjU2MzJaMB0xGzAZBgNVBAMT Em1haWwub3JpLW1ldGFsLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABOnf JYJPthnxeOCTp12Ena2Bkb5BgALdwNFEVcpdCtQayOmxG9T1NEO/FiGGfwcKH1C5 CljTPJSonx5wSv8AHICjggOyMIIDrjAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCQR k1WoQmfzQk3ZuJFLPEatu/gJMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52L FMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVu Y3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIICcwYD VR0RBIICajCCAmaCFWxvZ2luLm1mcmVpdGFzLmFkdi5icoITbWFpbC5hcnZhbmNs b3VkLmNvbYISbWFpbC5hc2lnYXMuY29tLm14ghRtYWlsLmNvbnRyb3NlcnZlLmNv bYIMbWFpbC5kYWVsLmNsghltYWlsLmRyam9yZ2Vtb250ZW5lZ3JvLmNsghBtYWls LmVyc2hlaWQuY29tghVtYWlsLmZpeGNvZGVzZXZlbi5jb22CGG1haWwuZ2xvYmFs bWVkaWF3b3Jrcy5pboIXbWFpbC5ob3Jpem9uY2FibGUuY28ua2WCEG1haWwuaW1j aHVnaC5jb22CFW1haWwuaW5mbGVjdGlvbmN4LmNvbYIYbWFpbC5qb3VlcmNsb3Ro aW5nLnN0b3JlghttYWlsLmtpbmRyZWRjb2xsZWN0aW9ucy5jb22CFW1haWwubWlo aXJzYW5nYW5pLmNvbYILbWFpbC5uMjEubXmCFW1haWwubmV3YW5kYWx1c2lhLmNv bYIQbWFpbC5vcHRpY2lwLmNvbYISbWFpbC5vcmktbWV0YWwuY29tgg1tYWlsLm92 bXMub3JnghVtYWlsLnBnM2xvZ2lzdGljcy5jb22CF21haWwucmVjYW1zb2x1dGlv bnMuY29tgg1tYWlsLnJpc2IubmV0ghNtYWlsLnNwYWNlbm9kZXMubmV0ghRtYWls LnRvcHBlcm5pY3VzLmNvbYILbWFpbC52cnMuaW2CEW1haWwud2lsc3RlY2guY29t gg5tYWlsLndpc3NhbC5xYYIfd2VibWFpbC5zYW5hbnRvbmlvbGFyaXZpZXJlLmNv bTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUF BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzATBgorBgEEAdZ5AgQDAQH/ BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWFKaFyV/H9SFUH8Ii2e/s3qWSe29YyD X4PqvaXcDnZhvMe/Oluv8pm1JmAipK06ugnDd6mnEWfK+3pETVW/XjsgE5FmEMqF Q98O58gM0TmESkaC5SNSBI5SDFxoS8yWPTwtwhNkJRRYb2UNSyQmrvXmGFnwauo2 hnGNdyBrH3pXZQOAL4saq1mdRbOErvQ+LfK034pziDZU8bN+GCIt42lnVBdS/1Lw U5w5NCeIQtxkGDzj/jSo2IwY2HOOL5nh/cjx6KyOXwUse/fM5EFpDVtiGDy08PID vC/LvQ71XRlPeh2wyzyl4JasaXJX5s52Bvy2PjLiyIGhLxiOi0BJjg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6d8lgk+2GfF44JOnXYSdrYGRvkGA At3A0URVyl0K1BrI6bEb1PU0Q78WIYZ/BwofULkKWNM8lKifHnBK/wAcgA== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 369165777487085580575876357407136315103343 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-19 16:56:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-17 16:56:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.ori-metal.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004e9df25824fb619f178e093a75d849dad8191be418002ddc0d14455ca5d0ad41ac8e9b11bd4f53443bf1621867f070a1f50b90a58d33c94a89f1e704aff001c80 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 24119355a84267f3424dd9b8914b3c46adbbf809 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (618 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mfreitas.adv.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.arvancloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.asigas.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.controserve.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.dael.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.drjorgemontenegro.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ersheid.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fixcodeseven.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.globalmediaworks.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.horizoncable.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.imchugh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.inflectioncx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.jouerclothing.store' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kindredcollections.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mihirsangani.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.n21.my' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.newandalusia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.opticip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ori-metal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ovms.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pg3logistics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.recamsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.risb.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.spacenodes.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.toppernicus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vrs.im' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.wilstech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.wissal.qa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.sanantoniolariviere.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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