pimenta.nl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:74:80:d4:36:a7:c7:36:83:a6:05:73:90:70:86:c0:6f:45 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pimenta.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:74:80:d4:36:a7:c7:36:83:a6:05:73:90:70:86:c0:6f:45Serial Number (int): 388093141348807202121149603959643305963333
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 3c:7a:81:dc:44:c6:15:c5:35:8b:b4:e3:20:c2:61:e4:57:98:2a:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 22:6b:e5:7d:b0:e2:1b:75:54:e7:2c:2f:6d:1f:d5:4d:14:e2:3d:9b
Fingerprint (sha256): 32:5f:44:c7:82:39:9e:d2:4b:99:2c:ed:b7:91:d7:38:38:cb:0a:be:d1:e6:46:f2:11:b7:0b:99:95:75:19:b1
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate pimenta.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pimenta.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pimenta.nl
www.pimenta.nl
www.pimenta.nl
Other certificates including the domain name pimenta.nl
(limited to 100 certificates)
vps4.pimenta.nl
pimenta.nl
vulcan.vps8.pimenta.nl
vulcan.vps8.pimenta.nl
vps4.pimenta.nl
docker01.pimenta.nl
vps4.pimenta.nl
pimenta.nl
pimenta.nl
vulcan.vps8.pimenta.nl
patyna.vps8.pimenta.nl
www.pimenta.nl
vps8.pimenta.nl
pimenta.nl
vps8.pimenta.nl
pimenta.nl
vps4.pimenta.nl
vps8.pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
vps8.pimenta.nl
bot.pimenta.nl
pimenta.nl
patyna.vps8.pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
vps4.pimenta.nl
vulcan.vps8.pimenta.nl
vps8.pimenta.nl
vulcan.vps8.pimenta.nl
pimenta.nl
docker01.pimenta.nl
vulcan.vps8.pimenta.nl
vps4.pimenta.nl
pimenta.nl
vulcan.vps8.pimenta.nl
pimenta.nl
pimenta.nl
vulcan.vps8.pimenta.nl
pimenta.nl
pimenta.nl
vps4.pimenta.nl
pimenta.nl
aicn.vps5.pimenta.nl
pimenta.nl
pimenta.nl
vps4.pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
vulcan.vps8.pimenta.nl
pimenta.nl
vulcan.vps8.pimenta.nl
pimenta.nl
vulcan.vps8.pimenta.nl
vps4.pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
vps8.pimenta.nl
vps4.pimenta.nl
pimenta.nl
vps8.pimenta.nl
vps4.pimenta.nl
vps4.pimenta.nl
vps8.pimenta.nl
pimenta.nl
vps4.pimenta.nl
pimenta.nl
vulcan.vps8.pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
vps4.pimenta.nl
vps8.pimenta.nl
vulcan.vps8.pimenta.nl
pimenta.nl
vps4.pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
vps4.pimenta.nl
vps8.pimenta.nl
vps4.pimenta.nl
vulcan.vps8.pimenta.nl
patyna.vps8.pimenta.nl
pimenta.nl
vps8.pimenta.nl
vulcan.vps8.pimenta.nl
vps4.pimenta.nl
pimenta.nl
pimenta.nl
vps4.pimenta.nl
pimenta.nl
vulcan.vps8.pimenta.nl
vulcan.vps8.pimenta.nl
vps4.pimenta.nl
docker01.pimenta.nl
vps4.pimenta.nl
pimenta.nl
pimenta.nl
vulcan.vps8.pimenta.nl
patyna.vps8.pimenta.nl
www.pimenta.nl
vps8.pimenta.nl
pimenta.nl
vps8.pimenta.nl
pimenta.nl
vps4.pimenta.nl
vps8.pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
vps8.pimenta.nl
bot.pimenta.nl
pimenta.nl
patyna.vps8.pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
vps4.pimenta.nl
vulcan.vps8.pimenta.nl
vps8.pimenta.nl
vulcan.vps8.pimenta.nl
pimenta.nl
docker01.pimenta.nl
vulcan.vps8.pimenta.nl
vps4.pimenta.nl
pimenta.nl
vulcan.vps8.pimenta.nl
pimenta.nl
pimenta.nl
vulcan.vps8.pimenta.nl
pimenta.nl
pimenta.nl
vps4.pimenta.nl
pimenta.nl
aicn.vps5.pimenta.nl
pimenta.nl
pimenta.nl
vps4.pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
vulcan.vps8.pimenta.nl
pimenta.nl
vulcan.vps8.pimenta.nl
pimenta.nl
vulcan.vps8.pimenta.nl
vps4.pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
vps8.pimenta.nl
vps4.pimenta.nl
pimenta.nl
vps8.pimenta.nl
vps4.pimenta.nl
vps4.pimenta.nl
vps8.pimenta.nl
pimenta.nl
vps4.pimenta.nl
pimenta.nl
vulcan.vps8.pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
vps4.pimenta.nl
vps8.pimenta.nl
vulcan.vps8.pimenta.nl
pimenta.nl
vps4.pimenta.nl
pimenta.nl
pimenta.nl
pimenta.nl
vps4.pimenta.nl
vps8.pimenta.nl
vps4.pimenta.nl
vulcan.vps8.pimenta.nl
patyna.vps8.pimenta.nl
pimenta.nl
vps8.pimenta.nl
vulcan.vps8.pimenta.nl
vps4.pimenta.nl
pimenta.nl
pimenta.nl
vps4.pimenta.nl
Certificate
The complete raw certificate details for pimenta.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgISBHSA1DanxzaDpgVzkHCGwG9FMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMjUwNDAxMThaFw0x OTA0MjUwNDAxMThaMBUxEzARBgNVBAMTCnBpbWVudGEubmwwggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQD3S1oy9cL0rmunAiBdsHXOK7Z69aOlVTI2t+y2 AX4vqwUvR+6BpQ/IKUaA+jNp1JDkSnYTmFqs7PxyBobpj6l30NOxk09QXABYq5sd vxcSwTeVueZmUfLJecJCApCla/i38Qmw626VWmShLXHqob9qjGSlU9L4kabb+mg6 SD6P6msD0Nltp8nbwwmDzlpQxGipsO0sQRP5sj9j1vE1zZkpfLDFoFeh1ww5q2Xl uUKBCL5HXLcmQteuod4j9OoYFfExjA8BdLmQ1OyqMHDOqpDfzkTWRQ4X7iU3cgoi 6ckDFj7YB40tAXgVfcEqhlqrjwctTwO7Q5XHGE+vOEuPaP0p8P6hOK5HTT7UpXZR CXKOWIGaHssUxMki/TIl1Jp09kTwpqMAbOEoqZFwvsxn/vt82wcx45epHHXo9wYP CUXlXwHv0GSSVotLOVIkHGS+E32YlypGqKPBLVfFl52LB5X9tUkhV5ddl+P79ue0 0tWL0UQ8p+q0/Boi4yopnRjlR6PZ7A3k6/Z4HbL4QsY9OKFq9kSkdtd0swIxTaNk Forkk6J5aWHjKFkXFc/Lb5/axznYRdJAFnEeupAdTwqZ0TDyCprehOyVZZXzIypR /sc151PelHX3ApEVfSN8Sr7ed/fKY/bQsWKgS8jIV7WB8axbGBwbfcMNoAUkHHuW yG8/LQIDAQABo4ICbjCCAmowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ8eoHcRMYV xTWLtOMgwmHkV5gqnDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMCUGA1UdEQQeMByCCnBpbWVudGEubmyCDnd3dy5waW1l bnRhLm5sMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHW eQIEAgSB9ASB8QDvAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYA AAFog2I1xQAABAMARjBEAiBkyGMcwhGSSCRbExgkR5GvLVF5dFuNJtAGc0ZVG74p kAIgFP2yeDi8YEvAZlT0yvmLa7gYvIL17G44nRm+xe4PsyoAdgBj8tvN6DvMLM8L coQnV2szpI1hd4+9daY4scdoVEvYjQAAAWiDYjWgAAAEAwBHMEUCICYfiOuY+rRW xaxIkVohxaqYC+wDlgf6FVcnVWQqyC8cAiEAyHBM/OrFPpoRkz+tSmfdOp4PxdZE FUphqCav45715MwwDQYJKoZIhvcNAQELBQADggEBAEAHudLXcVy46K9x5lebOI6L lPACaHElduJ3D4kDCNPYc1OQHZ/FNY3Qvq50JKCzHm0g9CLudENE94ZWZu1rkZQl zlf3UXlEqB4nX/MDo8uX4YCPVaKqC0k+VQXELa6fQ2byxHi12WKiCgjcj8jL0DF8 Z2bjrnGeguokqWIPkhocxG0uRCmudz/AMytQi9oSGTWKliU2xie0uB+DDsLtrcyK X3B43dzHicGCWTfb6M+rYfBrT1Q1gzEIFmA4juSfjByU09aN4iM0tRuQAxpYyic0 t4+UbdZiYSXBwScVExlOb/1C7Vd+rXcio09FoyaK0jhALeYndzyKmilAHDeFSgg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA90taMvXC9K5rpwIgXbB1 ziu2evWjpVUyNrfstgF+L6sFL0fugaUPyClGgPozadSQ5Ep2E5harOz8cgaG6Y+p d9DTsZNPUFwAWKubHb8XEsE3lbnmZlHyyXnCQgKQpWv4t/EJsOtulVpkoS1x6qG/ aoxkpVPS+JGm2/poOkg+j+prA9DZbafJ28MJg85aUMRoqbDtLEET+bI/Y9bxNc2Z KXywxaBXodcMOatl5blCgQi+R1y3JkLXrqHeI/TqGBXxMYwPAXS5kNTsqjBwzqqQ 385E1kUOF+4lN3IKIunJAxY+2AeNLQF4FX3BKoZaq48HLU8Du0OVxxhPrzhLj2j9 KfD+oTiuR00+1KV2UQlyjliBmh7LFMTJIv0yJdSadPZE8KajAGzhKKmRcL7MZ/77 fNsHMeOXqRx16PcGDwlF5V8B79BkklaLSzlSJBxkvhN9mJcqRqijwS1XxZediweV /bVJIVeXXZfj+/bntNLVi9FEPKfqtPwaIuMqKZ0Y5Uej2ewN5Ov2eB2y+ELGPTih avZEpHbXdLMCMU2jZBaK5JOieWlh4yhZFxXPy2+f2sc52EXSQBZxHrqQHU8KmdEw 8gqa3oTslWWV8yMqUf7HNedT3pR19wKRFX0jfEq+3nf3ymP20LFioEvIyFe1gfGs WxgcG33DDaAFJBx7lshvPy0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 388093141348807202121149603959643305963333 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-25 04:01:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-25 04:01:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pimenta.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1008872907954297044136377811900394199615532851302966965991269204620678860415559514145225526722371149087058603071115034460979863399554164361518402038832531976058154157651696103039528334933305600219226325110070334030653342643846809331974735172720402475876059211997796551541056546182633554452455526127813686581107943249927610371353653883949618049499900286231125469638067968872272455509198801338604909886544447126729300472283095399548572551863684821376976626792368519408503093826894962549971734068713358304020855144974757003111522051275596709908385595740766598429394879496600054079819985643735484015477831027539209151450994448691602623835168937067268309356199974173050022385532819489886516850774389983031672690569055722984352036332846452183741150884815533567366015939029598032301345855686227615475132933278413764459801273825313424588975281098613876544909273427696313752308373245118307294249962101605065251437252316272580874910310501715652091621418501321893851996215294811777277960736098224231597150737169296239984823577847033845625233183728043207108356282686173579362428077430542322881721411088126802718673567872048311143715699532968935666885170864064471712390670497663309068312148656000295368140078205146835071484702269807446687333957421 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3c7a81dc44c615c5358bb4e320c261e457982a9c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pimenta.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pimenta.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168836235c50000040300463044022064c8631cc2119248245b1318244791af2d5179745b8d26d0067346551bbe2990022014fdb27838bc604bc06654f4caf98b6bb818bc82f5ec6e389d19bec5ee0fb32a00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168836235a000000403004730450220261f88eb98fab456c5ac48915a21c5aa980bec039607fa15572755642ac82f1c022100c8704cfceac53e9a11933fad4a67dd3a9e0fc5d644154a61a826afe39ef5e4cc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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