pakysaavedra.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:4b:cd:71:19:aa:df:3b:56:95:32:a8:07:8b:77:a9:be:d3 was issued on by Let's Encrypt.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pakysaavedra.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:4b:cd:71:19:aa:df:3b:56:95:32:a8:07:8b:77:a9:be:d3Serial Number (int): 374243400235390408147121945733552409263827
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: d0:b4:bf:a0:43:d8:c1:e4:e4:2e:51:08:d7:59:2b:c5:08:46:74:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a8:0b:d3:86:f4:86:a2:08:ee:a7:8e:4f:5f:be:fd:51:99:29:ad:be
Fingerprint (sha256): 30:00:d5:f0:27:bf:96:9d:94:95:b8:31:83:e0:d6:c4:13:60:45:cd:38:85:16:cf:74:fb:d2:ce:a5:97:0e:b1
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate pakysaavedra.com
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pakysaavedra.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.pakysaavedra.com
autodiscover.singhathaicafe.com
cpanel.pakysaavedra.com
cpanel.singhathaicafe.com
mail.pakysaavedra.com
mail.singhathaicafe.com
pakysaavedra.com
pakysaavedra.marathonitis.com
singhathaicafe.com
singhathaicafe.marathonitis.com
webdisk.pakysaavedra.com
webdisk.singhathaicafe.com
webmail.pakysaavedra.com
webmail.singhathaicafe.com
whm.pakysaavedra.com
whm.singhathaicafe.com
www.pakysaavedra.com
www.pakysaavedra.marathonitis.com
www.singhathaicafe.com
www.singhathaicafe.marathonitis.com
autodiscover.singhathaicafe.com
cpanel.pakysaavedra.com
cpanel.singhathaicafe.com
mail.pakysaavedra.com
mail.singhathaicafe.com
pakysaavedra.com
pakysaavedra.marathonitis.com
singhathaicafe.com
singhathaicafe.marathonitis.com
webdisk.pakysaavedra.com
webdisk.singhathaicafe.com
webmail.pakysaavedra.com
webmail.singhathaicafe.com
whm.pakysaavedra.com
whm.singhathaicafe.com
www.pakysaavedra.com
www.pakysaavedra.marathonitis.com
www.singhathaicafe.com
www.singhathaicafe.marathonitis.com
Other certificates including the domain name pakysaavedra.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for pakysaavedra.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHZTCCBk2gAwIBAgISBEvNcRmq3ztWlTKoB4t3qb7TMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTIyMTI0MTNaFw0y MDA0MTEyMTI0MTNaMBsxGTAXBgNVBAMTEHBha3lzYWF2ZWRyYS5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/47bQ/IU5vmTV5pJ9L111PtPLDfBu gDDPA+03yIYdNXxPDJyY3jXNhgg9jkQFGktBEjOHJztQWqSaMdvkgL6PjDrQX599 6G2P1A59tP477q9NwTDqnFpGKDXwricw9xNtSe/NDIQZR6En0jreZrxcG4R6r9H1 1BIKJn4YiV5UIIgrVpoItTFyQSui5jyaCAJNr3fBjJ0WSOlfceO/xYEKZnGhhIk2 JtEAa/bszmLk5omMzNbfiA8jLlgUrmhjlRhBPG7/xClG2nv10Ymgw3X71rj1NRVa OSsH7TGZCEtXimfjBPcbpsKwAReVt4bfPzjdxya1fnf7gD3iq6by3f5RAgMBAAGj ggRyMIIEbjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNC0v6BD2MHk5C5RCNdZK8UI RnSHMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wggInBgNVHREEggIeMIICGoIdYXV0b2Rpc2NvdmVyLnBha3lzYWF2ZWRy YS5jb22CH2F1dG9kaXNjb3Zlci5zaW5naGF0aGFpY2FmZS5jb22CF2NwYW5lbC5w YWt5c2FhdmVkcmEuY29tghljcGFuZWwuc2luZ2hhdGhhaWNhZmUuY29tghVtYWls LnBha3lzYWF2ZWRyYS5jb22CF21haWwuc2luZ2hhdGhhaWNhZmUuY29tghBwYWt5 c2FhdmVkcmEuY29tgh1wYWt5c2FhdmVkcmEubWFyYXRob25pdGlzLmNvbYISc2lu Z2hhdGhhaWNhZmUuY29tgh9zaW5naGF0aGFpY2FmZS5tYXJhdGhvbml0aXMuY29t ghh3ZWJkaXNrLnBha3lzYWF2ZWRyYS5jb22CGndlYmRpc2suc2luZ2hhdGhhaWNh ZmUuY29tghh3ZWJtYWlsLnBha3lzYWF2ZWRyYS5jb22CGndlYm1haWwuc2luZ2hh dGhhaWNhZmUuY29tghR3aG0ucGFreXNhYXZlZHJhLmNvbYIWd2htLnNpbmdoYXRo YWljYWZlLmNvbYIUd3d3LnBha3lzYWF2ZWRyYS5jb22CIXd3dy5wYWt5c2FhdmVk cmEubWFyYXRob25pdGlzLmNvbYIWd3d3LnNpbmdoYXRoYWljYWZlLmNvbYIjd3d3 LnNpbmdoYXRoYWljYWZlLm1hcmF0aG9uaXRpcy5jb20wTAYDVR0gBEUwQzAIBgZn gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQDwlaRZ8gDR gkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW+b24hjAAAEAwBGMEQCIC8JTYQ6 XyFVOMpE+61vpCDC2SSXJ/LIgWuPh6qjU23IAiBYlcZACB8a5mmyHvqMYeLR7Esj 7Of4AY7uPqvzaAUimgB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06Ic AAABb5vbiJoAAAQDAEcwRQIhAJAT+0deVwbMxgGxmK7N5ZMRTqfBItB9Fehv3mNu /cNyAiBsq4+bk/IfY9PCRtFnWQxJdc62YOGpD0hyy4svtBJfzzANBgkqhkiG9w0B AQsFAAOCAQEAWZg6xXviEPblu9akZrNEv01v2ieyCbj6vT3DmywdlVEmaiemzxx+ O6EktuII6cYsh7nPKCN9ji5PwVEZMoK31TQAOLwjisX4ZyTUUkaCCUbgMYofUev3 WT579uk3DHw1EGbf0o7XXgQETD5J4vrzkRy66iDPRvyAqr4Z1O6xj5B8LSL40d4r OsyYUsh2FGlGMcc2Vp1sVjyWfkkSVrBDb/wkOBzODTjDkLCK5Wzawi6bGNodbzcY kKFyLu0pWiwC5UVTGcxWONOmJ73EUALH6z9jX50RZlSLRQmcZYFsl9lB58ezzaD0 BQ/n4MX5mEUH/1D70b5O19Qs2P13ph/UGA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+O20PyFOb5k1eaSfS9d dT7Tyw3wboAwzwPtN8iGHTV8TwycmN41zYYIPY5EBRpLQRIzhyc7UFqkmjHb5IC+ j4w60F+ffehtj9QOfbT+O+6vTcEw6pxaRig18K4nMPcTbUnvzQyEGUehJ9I63ma8 XBuEeq/R9dQSCiZ+GIleVCCIK1aaCLUxckErouY8mggCTa93wYydFkjpX3Hjv8WB CmZxoYSJNibRAGv27M5i5OaJjMzW34gPIy5YFK5oY5UYQTxu/8QpRtp79dGJoMN1 +9a49TUVWjkrB+0xmQhLV4pn4wT3G6bCsAEXlbeG3z843ccmtX53+4A94qum8t3+ UQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 374243400235390408147121945733552409263827 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-12 21:24:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 21:24:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pakysaavedra.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24223806269341324834021159288711678607537297182048406644177338806113403236410051692929627521149142500409413779635760948955565983513312309954587412392031536944493307821992646926332979442015624255626550713471390000975069140280388023694301936828565055288160301269675181905162943778922276290445792688114764439976508272888677561729254410463693703610084259890318086677112138547108799106538673153665473610122635758161368866775616224371173574567822347298845393901271754091030254159191899285538093423042646667399532369062403822548085222079891697545977521710016852551565014714458306527219203010749788787383407305995247505243729 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d0b4bfa043d8c1e4e42e5108d7592bc508467487 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (542 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pakysaavedra.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.singhathaicafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.pakysaavedra.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.singhathaicafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pakysaavedra.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.singhathaicafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakysaavedra.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakysaavedra.marathonitis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singhathaicafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singhathaicafe.marathonitis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.pakysaavedra.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.singhathaicafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.pakysaavedra.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.singhathaicafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.pakysaavedra.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.singhathaicafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pakysaavedra.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pakysaavedra.marathonitis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singhathaicafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singhathaicafe.marathonitis.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f9bdb8863000004030046304402202f094d843a5f215538ca44fbad6fa420c2d9249727f2c8816b8f87aaa3536dc802205895c640081f1ae669b21efa8c61e2d1ec4b23ece7f8018eee3eabf36805229a00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f9bdb889a00000403004730450221009013fb475e5706ccc601b198aecde593114ea7c122d07d15e86fde636efdc37202206cab8f9b93f21f63d3c246d167590c4975ceb660e1a90f4872cb8b2fb4125fcf . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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