www.cafonline.com
Issued by R3
About this certificate
This digital certificate with serial number 04:67:eb:2e:56:71:4c:9b:fc:43:02:4c:60:58:85:b9:2a:dc was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.cafonline.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:67:eb:2e:56:71:4c:9b:fc:43:02:4c:60:58:85:b9:2a:dcSerial Number (int): 383810836697826313869102929887187795782364
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 35:60:81:8e:93:77:c0:06:bd:98:65:7b:87:d4:88:82:ff:fc:ee:d8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 41:7a:ea:66:46:d0:2a:a3:00:66:f3:c2:9a:70:d3:9e:93:dc:b0:6e
Fingerprint (sha256): 2f:ca:35:75:16:5f:ea:cc:05:f5:4d:23:29:3c:8c:40:78:35:0e:b2:f3:fd:3f:e3:d5:94:cb:19:0f:a2:70:d1
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.cafonline.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.cafonline.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ar.cafonline.com
caf-prd-widgets.cafonline.com
dapi.cafonline.com
fr.cafonline.com
images.cafonline.com
www.cafonline.com
caf-prd-widgets.cafonline.com
dapi.cafonline.com
fr.cafonline.com
images.cafonline.com
www.cafonline.com
Other certificates including the domain name cafonline.com
(limited to 100 certificates)
*.cafonline.com
www.cafonline.com
helpdesk.zoolatech.com
support.cafonline.com
support.cafonline.com
*.cafonline.com
cahelpdesk.ca-usa.com
cahelpdesk.ca-usa.com
servicedesk.patri.com.br
ssl378358.cloudflaressl.com
fr.cafonline.com
ssl378358.cloudflaressl.com
sni.cloudflaressl.com
ssl378560.cloudflaressl.com
*.cafonline.com
www.cafonline.com
www.highq.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
sd.mareven.com
*.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
support.cafonline.com
ssl378357.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
ssl378558.cloudflaressl.com
ssl378357.cloudflaressl.com
*.cafonline.com
www.cafonline.com
ssl378560.cloudflaressl.com
ssl378358.cloudflaressl.com
sni.cloudflaressl.com
ssl378357.cloudflaressl.com
sni.cloudflaressl.com
servicedesk.patri.com.br
ssl378358.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
ssl378357.cloudflaressl.com
support.cafonline.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
support.cafonline.com
ssl378560.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
www.cafonline.com
www.cafonline.com
www.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
servicedesk.gspretail.com
ssl378358.cloudflaressl.com
*.cafonline.com
support.cafonline.com
support.cafonline.com
ssl378359.cloudflaressl.com
cafonline.com
ssl378357.cloudflaressl.com
www.cafonline.com
support.cafonline.com
ssl378357.cloudflaressl.com
support.cafonline.com
www.cafonline.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
cafonline.com
support.cafonline.com
www.cafonline.com
helpdesk.zoolatech.com
support.cafonline.com
support.cafonline.com
*.cafonline.com
cahelpdesk.ca-usa.com
cahelpdesk.ca-usa.com
servicedesk.patri.com.br
ssl378358.cloudflaressl.com
fr.cafonline.com
ssl378358.cloudflaressl.com
sni.cloudflaressl.com
ssl378560.cloudflaressl.com
*.cafonline.com
www.cafonline.com
www.highq.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
sd.mareven.com
*.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
support.cafonline.com
ssl378357.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
ssl378558.cloudflaressl.com
ssl378357.cloudflaressl.com
*.cafonline.com
www.cafonline.com
ssl378560.cloudflaressl.com
ssl378358.cloudflaressl.com
sni.cloudflaressl.com
ssl378357.cloudflaressl.com
sni.cloudflaressl.com
servicedesk.patri.com.br
ssl378358.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
ssl378357.cloudflaressl.com
support.cafonline.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
support.cafonline.com
ssl378560.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
www.cafonline.com
www.cafonline.com
www.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
servicedesk.gspretail.com
ssl378358.cloudflaressl.com
*.cafonline.com
support.cafonline.com
support.cafonline.com
ssl378359.cloudflaressl.com
cafonline.com
ssl378357.cloudflaressl.com
www.cafonline.com
support.cafonline.com
ssl378357.cloudflaressl.com
support.cafonline.com
www.cafonline.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
cafonline.com
support.cafonline.com
Certificate
The complete raw certificate details for www.cafonline.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISBGfrLlZxTJv8QwJMYFiFuSrcMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA1MDYyMDQ2MTVaFw0yMzA4MDQyMDQ2MTRaMBwxGjAYBgNVBAMT EXd3dy5jYWZvbmxpbmUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAmRgv52XLL5s46Z8ZZiOEU6Fvlkr+UitgOJKMuYMWUldWp3yfhl8bsAyhUq /jUlV1W90uC7quwcCrOhcv5Xdvov6spaloCpONvtamO6THnRoJdJwGEIKI5KkDCp FFa1QX8Yr1szHZL7qDNrsL9f5KE6dRXaz1/H+w4+L2dJsEKAtbiYQzEUXKumLSTh DArWhlP5kpEPWexyAWFd6F3Df1HnmIe4LPjeTj88SsKUCY5ZHxWfZolHdzHACSXF bPcrv25XCJ9IsmqTGKJlnKbSEu4O2gz7TaspQD+RG6kAD50esegVuzf1+I3Bvwsu EQAXw9LnTOUy5g9CC6AjSv6OvwIDAQABo4ICvDCCArgwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBQ1YIGOk3fABr2YZXuH1IiC//zu2DAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzCBiwYDVR0RBIGDMIGAghBhci5jYWZvbmxpbmUuY29tgh1jYWYtcHJkLXdp ZGdldHMuY2Fmb25saW5lLmNvbYISZGFwaS5jYWZvbmxpbmUuY29tghBmci5jYWZv bmxpbmUuY29tghRpbWFnZXMuY2Fmb25saW5lLmNvbYIRd3d3LmNhZm9ubGluZS5j b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdgC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYfz B6CEAAAEAwBHMEUCIQCXOIdKjbwUUJXZjT9dEf9/+p9WifaRAlS/Y3jLD3pgPwIg PxJwdRLvZUed6xcFEb8S6Bz/qtZt5NObChozIyjHz5wAdgB6MoxU2LcttiDqOOBS HumEFnAyE4VNO9IrwTpXo1LrUgAAAYfzB6CRAAAEAwBHMEUCIB6C9792ICtA1etG JD6JWDys1D+nNTcBmpeDQskzlR/pAiEAo+JEA2kfasw0Bp5H/qtD4aU8Lq2mmerZ iYfFbdN99bQwDQYJKoZIhvcNAQELBQADggEBACSItR6RXm2c45VYBmT6Y1wUPwGS daZ1/ED2Wha40pB+NoKbxx3JZwrLWZB2ja00PW4uagYnozTAj8I1a2x9pBRroc1T yDWAfQmy8/kzbX9Mo9ktqyD9/0xpZghzkPlbzElgc+JLJNjXBJQMhFDE9mmiRr5q WD/1HSc6RFb+4qBmgeZGv9kqce12WExTr1Dt3jC5wFFenurAoFWxruAkZ+C3E+J3 3Y4w6MrB+tKfg9MNlmepNAPes59ki7s8cAvSV+Sl0p6v4sgnuGLfhXniZBPxg/JU +QpUS0E45i+WmJxiCr25dnhEZ71DCXmbpQulGUGSaPuT48VCo/ai4kUA2ew= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAmRgv52XLL5s46Z8ZZi OEU6Fvlkr+UitgOJKMuYMWUldWp3yfhl8bsAyhUq/jUlV1W90uC7quwcCrOhcv5X dvov6spaloCpONvtamO6THnRoJdJwGEIKI5KkDCpFFa1QX8Yr1szHZL7qDNrsL9f 5KE6dRXaz1/H+w4+L2dJsEKAtbiYQzEUXKumLSThDArWhlP5kpEPWexyAWFd6F3D f1HnmIe4LPjeTj88SsKUCY5ZHxWfZolHdzHACSXFbPcrv25XCJ9IsmqTGKJlnKbS Eu4O2gz7TaspQD+RG6kAD50esegVuzf1+I3BvwsuEQAXw9LnTOUy5g9CC6AjSv6O vwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 383810836697826313869102929887187795782364 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-06 20:46:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-04 20:46:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cafonline.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20202847150959876574490096661421919945638900860226364802373037892037793277202568400575326803152921056529475506164133643403030035456027564130021260976415759880910350796636982679837030786499248900798625214201403046577287006867467571417279407159416896099605147898199630147233973411726405560339610356959024025374027481688363565341709811438399403902877890022729276413882437964419666017863622361560851950797163527838802981538080203768734371750230117037919466545612687735393815595161139500458929539582081569485890673733976569218539647688254688259858623920231948044858279542537057504811723067878313039949859991305860927098559 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3560818e9377c006bd98657b87d48882fffceed8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.cafonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caf-prd-widgets.cafonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dapi.cafonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.cafonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.cafonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cafonline.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187f307a08400000403004730450221009738874a8dbc145095d98d3f5d11ff7ffa9f5689f6910254bf6378cb0f7a603f02203f12707512ef65479deb170511bf12e81cffaad66de4d39b0a1a332328c7cf9c0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187f307a091000004030047304502201e82f7bf76202b40d5eb46243e89583cacd43fa73537019a978342c933951fe9022100a3e24403691f6acc34069e47feab43e1a53c2eada699ead98987c56dd37df5b4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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