retro-ink.com
Issued by R3
About this certificate
This digital certificate with serial number 03:98:a3:14:41:30:c9:0a:8e:d7:cd:c1:91:da:fc:1c:f5:5d was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=retro-ink.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:98:a3:14:41:30:c9:0a:8e:d7:cd:c1:91:da:fc:1c:f5:5dSerial Number (int): 313276546898735293658972999099301079348573
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: bb:c9:dc:ad:10:02:56:64:ea:10:c4:80:7d:60:98:bf:69:41:50:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 14:d2:7f:5f:7b:48:d4:69:7b:7d:3f:46:99:84:90:6d:69:04:d6:53
Fingerprint (sha256): 30:a6:cb:40:7e:d5:0d:48:1d:62:3f:92:c7:34:e5:d7:3e:11:13:27:75:4f:f5:35:d8:1a:7c:ff:24:06:cf:88
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate retro-ink.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for retro-ink.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
retro-ink.com
www.retro-ink.com
www.retro-ink.com
Other certificates including the domain name retro-ink.com
(limited to 100 certificates)
www.nabehide.com
eclatly.com
www.retro-ink.com
pets.dro.by
builder.scaffoldhub.io
www.pleaseintroduceyourself.xyz
www.timely.africa
www.retro-ink.com
www.retro-ink.com
dashboard.disenatuciudad.mx
sonya.retro-ink.com
gdjt.foodle.su
www.retro-ink.com
plusbo.at
gracelandct.org
www.retro-ink.com
archive6.retro-ink.com
www.lazikadigital.com
archive6.retro-ink.com
remoteaccess.dev-my.dmc-dxi.com
retro-ink.com
mycrossborder.visioncompliance.ch
quizandpoll.com
www.adibhilmihalim.com
guide.skhomebuyersguide.ca
sw-admin-ca.tech-scheduler.com
srweb.animecicik.tk
www.xhop.me
www.retro-ink.com
www.retro-ink.com
service.fitnessdoctor.com.au
hsnu.yveslcen.com
www.retro-ink.com
archive6.retro-ink.com
app.akk.io
www.retro-ink.com
tosashimizu.bus20.com
relocatorsdev.erdostracks.com
www.retro-ink.com
www.retro-ink.com
goisagi.retro-ink.com
www.akarapon.com
austincumberlander.com
ugd.apps.mgviz.org
medinet.cirmena.ch
liveguide.retro-ink.com
archive6.retro-ink.com
verena-tudyka.de
discoursedev.com
archive6.retro-ink.com
marketswift.com
goisagi.retro-ink.com
www.retro-ink.com
alphadeltagames.com
www.rentadeautostijuana.com
www.exterai.com
www.retro-ink.com
support.boombiz.app
www.linkki.xyz
kawalrumahsakit.id
www.retro-ink.com
nehas-hotel-and-restaurant.nehvika.in
medinet.cirmena.ch
ahyoxsoft.com
hakobune.retro-ink.com
www.akarapon.com
www.hubvisor.org
docs.booking.sandbox.redeam.com
parakeet.retro-ink.com
www.evolist.app
www.philiips66.com
leafapp.fr
retro-ink.com
lifeaceleradora.com.br
dudas.mymoons.mx
www.retro-ink.com
app.ohiocitizens.org
archive6.retro-ink.com
archive6.retro-ink.com
cast-assistant.com
appointment.play.medeintegra.app
www.codykit.dev
wielechowski.me
archive6.retro-ink.com
archive6.retro-ink.com
archive6.retro-ink.com
www.scotti.co.za
marketswift.com
www.retro-ink.com
www.retro-ink.com
chess.srikavin.me
goisagi.retro-ink.com
abdellah.cc
terms-legal.subxtech.com
www.leros-humanism-seminars.com
www.jamieson.app
bmcustomfurniture.ie
link.upstox.com
plusbo.at
docs.booking.sandbox.redeam.com
eclatly.com
www.retro-ink.com
pets.dro.by
builder.scaffoldhub.io
www.pleaseintroduceyourself.xyz
www.timely.africa
www.retro-ink.com
www.retro-ink.com
dashboard.disenatuciudad.mx
sonya.retro-ink.com
gdjt.foodle.su
www.retro-ink.com
plusbo.at
gracelandct.org
www.retro-ink.com
archive6.retro-ink.com
www.lazikadigital.com
archive6.retro-ink.com
remoteaccess.dev-my.dmc-dxi.com
retro-ink.com
mycrossborder.visioncompliance.ch
quizandpoll.com
www.adibhilmihalim.com
guide.skhomebuyersguide.ca
sw-admin-ca.tech-scheduler.com
srweb.animecicik.tk
www.xhop.me
www.retro-ink.com
www.retro-ink.com
service.fitnessdoctor.com.au
hsnu.yveslcen.com
www.retro-ink.com
archive6.retro-ink.com
app.akk.io
www.retro-ink.com
tosashimizu.bus20.com
relocatorsdev.erdostracks.com
www.retro-ink.com
www.retro-ink.com
goisagi.retro-ink.com
www.akarapon.com
austincumberlander.com
ugd.apps.mgviz.org
medinet.cirmena.ch
liveguide.retro-ink.com
archive6.retro-ink.com
verena-tudyka.de
discoursedev.com
archive6.retro-ink.com
marketswift.com
goisagi.retro-ink.com
www.retro-ink.com
alphadeltagames.com
www.rentadeautostijuana.com
www.exterai.com
www.retro-ink.com
support.boombiz.app
www.linkki.xyz
kawalrumahsakit.id
www.retro-ink.com
nehas-hotel-and-restaurant.nehvika.in
medinet.cirmena.ch
ahyoxsoft.com
hakobune.retro-ink.com
www.akarapon.com
www.hubvisor.org
docs.booking.sandbox.redeam.com
parakeet.retro-ink.com
www.evolist.app
www.philiips66.com
leafapp.fr
retro-ink.com
lifeaceleradora.com.br
dudas.mymoons.mx
www.retro-ink.com
app.ohiocitizens.org
archive6.retro-ink.com
archive6.retro-ink.com
cast-assistant.com
appointment.play.medeintegra.app
www.codykit.dev
wielechowski.me
archive6.retro-ink.com
archive6.retro-ink.com
archive6.retro-ink.com
www.scotti.co.za
marketswift.com
www.retro-ink.com
www.retro-ink.com
chess.srikavin.me
goisagi.retro-ink.com
abdellah.cc
terms-legal.subxtech.com
www.leros-humanism-seminars.com
www.jamieson.app
bmcustomfurniture.ie
link.upstox.com
plusbo.at
docs.booking.sandbox.redeam.com
Certificate
The complete raw certificate details for retro-ink.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgISA5ijFEEwyQqO183Bkdr8HPVdMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMDQyMDAwMjhaFw0yNDA1MDQyMDAwMjdaMBgxFjAUBgNVBAMT DXJldHJvLWluay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDN iZuvGOvrnDX9Wl/JN+Vj/otnHOD2JDHsgIbc8fi8ybkQgBRc04uA2ddxaUYmoOK2 rYOPAHJVxAOns+YF4IftMXL7xnhbQv00CziZuNKs56NFVPYx12ZqnvaS+NF0KFZ5 uj8Nm4TDflPg49Fuh/2ku/YPgTUcCuoYTKWn64Ajz6ooV26zmWSFqmT6qrKogn7J hlWRquJ/AVXdSntNsDrQ0eZaZpzkMZ1A8O+xTpaoePBu4DGUhJT3stQm6pL/L6WZ kYIVhgVF5xTE8WZb249jRFP+YACy2gyJ3WwvX3jgeTIsp6JmOuyqBG+JDbztqMsh DfVr6MesEGrgjnR3Ku3ZM/YwndXxc6a6jyPLV1Rhf/SXCKWB8Fcn2P/WeekXU63a GJDV5qZbhJ6Goznmb8OvTT0/XR/Sy89utDieOTb0Pdf/te7vQ5LZnWaRrIdIQG9G OWWbejRrXZdieJH58LorB2uj9uGOXLxN1dDU6siv9IiIf14lxZXfYAo9favdsMFh ku4yds4xAQGpyZLP5pAR6fdZE44d3pOXqnKT4K+16jo300fz//eP5AELvb3qfBEM 6uAdr2SoUWv43Q8VwBzAobbOuixif9Mx1fNkSImGKoSvxErJmA6ovpOK2Q4KtK+g sx75BQiWG58xnD8Lyg9h6eNBeKRtMvuYz4bcm1bMqQIDAQABo4ICIDCCAhwwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBS7ydytEAJWZOoQxIB9YJi/aUFQSDAfBgNVHSME GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov L3IzLmkubGVuY3Iub3JnLzArBgNVHREEJDAigg1yZXRyby1pbmsuY29tghF3d3cu cmV0cm8taW5rLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQIGCisGAQQB1nkC BAIEgfMEgfAA7gB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAAB jXXsLGIAAAQDAEYwRAIgC1EGPNNmPnXh0hM8o6dA4Ap277azdebBVFOljLN0Q+UC IEIm4Y/yyAdXDbljv9eLp5zLK8tp71iZS9lg4kHYBcsqAHUA7s3QZNXbGs7FXLed tM0TojKHRny87N7DUUhZRnEftZsAAAGNdewsUgAABAMARjBEAiA1SUYO35AqkGin ZmtfDXdlBkE6KUvx7vLI5M0B/EKlFgIge33LQVWnW5B/mUy9+BzECRvEwr6RNC83 Tj8pISDf8AwwDQYJKoZIhvcNAQELBQADggEBAB6PYbVdpITzrDYt9r9mm+5SDbA+ ErFHukoLnnnuXdFexM4bkGjAYTLSVdFzqNralnvFaaC8pUrjjl+sCA+S9UjFiNsZ XHSNyEQbYFxv2A6j24G/NR5hkQbxjyOiDUtl5IjWwkIN5OCU04h7G61Ok4fshA+X Rq/2M4btsqRldLhBskrmBU80XNy24ckzuSdkQYREl2e49yFBVtrjowX4T8XdC8Rd ooQPYa6nkqGwm5YsM0cAUVoltfga6HyHkQsopbAf0oGAXjz3Z1zN9gQrrKk9eNik 6kMdPDDt87hQ0Yj3a2HOg0mWx1ZXeS65VcBEOiA0QVaNtZf0dH0J0PyJ35I= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzYmbrxjr65w1/VpfyTfl Y/6LZxzg9iQx7ICG3PH4vMm5EIAUXNOLgNnXcWlGJqDitq2DjwByVcQDp7PmBeCH 7TFy+8Z4W0L9NAs4mbjSrOejRVT2Mddmap72kvjRdChWebo/DZuEw35T4OPRbof9 pLv2D4E1HArqGEylp+uAI8+qKFdus5lkhapk+qqyqIJ+yYZVkarifwFV3Up7TbA6 0NHmWmac5DGdQPDvsU6WqHjwbuAxlISU97LUJuqS/y+lmZGCFYYFRecUxPFmW9uP Y0RT/mAAstoMid1sL1944HkyLKeiZjrsqgRviQ287ajLIQ31a+jHrBBq4I50dyrt 2TP2MJ3V8XOmuo8jy1dUYX/0lwilgfBXJ9j/1nnpF1Ot2hiQ1eamW4SehqM55m/D r009P10f0svPbrQ4njk29D3X/7Xu70OS2Z1mkayHSEBvRjllm3o0a12XYniR+fC6 Kwdro/bhjly8TdXQ1OrIr/SIiH9eJcWV32AKPX2r3bDBYZLuMnbOMQEBqcmSz+aQ Een3WROOHd6Tl6pyk+Cvteo6N9NH8//3j+QBC7296nwRDOrgHa9kqFFr+N0PFcAc wKG2zrosYn/TMdXzZEiJhiqEr8RKyZgOqL6TitkOCrSvoLMe+QUIlhufMZw/C8oP YenjQXikbTL7mM+G3JtWzKkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 313276546898735293658972999099301079348573 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-04 20:00:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-04 20:00:27 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'retro-ink.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838519972358962306399897090990522825155410747883042008431625128235537649269768703336346416816516900127780008412927555561756883698782561899461202554282465506589348284482314324392114946301702252447535299200270803588744162734843492892802195427052935828584782830262004195030536424885300460591177163177253783880979340951847989742031720244160388284743194860588316207548620856579130119812058616881879072075597218073217166219501529381173338130226421433906605916821896843108789426362931841243393539184553775466706778526411660919834107064451877672328914099515963074878973304938853409938269298762310676218309915159013060266833369830001479444007242499458931545240101309540051091344052102640239510348064695762972453996484256345842484108219367978037694000566458928577639723171999257679521540416295926263965862241352199288783172721101751647092403110242864713678353353373813103684884282154549821311366468115229308785338168997143392347792758847951197152170597327581741657204694251524598914183399369651937593225942161733999374577179680330934483852404570636370525330115018864271743569321350490702493497961608338658921013564562010701966474848802241386346710760844400727687710605792624928872511115318552077266125303358365209839319480632819256274565123241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bbc9dcad10025664ea10c4807d6098bf69415048 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retro-ink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retro-ink.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d75ec2c62000004030046304402200b51063cd3663e75e1d2133ca3a740e00a76efb6b375e6c15453a58cb37443e502204226e18ff2c807570db963bfd78ba79ccb2bcb69ef58994bd960e241d805cb2a007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d75ec2c52000004030046304402203549460edf902a9068a7666b5f0d776506413a294bf1eef2c8e4cd01fc42a51602207b7dcb4155a75b907f994cbdf81cc4091bc4c2be91342f374e3f292120dff00c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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