host1.cranimax.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:55:78:57:09:ff:4f:e3:da:47:bb:aa:b2:a2:54:34:5e:4c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=host1.cranimax.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:55:78:57:09:ff:4f:e3:da:47:bb:aa:b2:a2:54:34:5e:4cSerial Number (int): 377533104207411231062373092237433550167628
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 91:b2:6f:c7:3b:0d:02:ee:55:71:f3:93:d6:8f:dc:72:a0:95:4c:31
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 07:4c:29:02:b6:a9:75:ed:05:ee:6b:17:61:78:e3:63:9e:c6:41:17
Fingerprint (sha256): 35:2f:ec:fe:7c:f0:e2:1d:a2:ad:00:40:7d:ec:58:b2:33:aa:23:5a:57:d6:c5:8b:dd:73:17:89:c3:4c:a6:07
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate host1.cranimax.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for host1.cranimax.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
host1.cranimax.com
Other certificates including the domain name cranimax.com
(limited to 100 certificates)
support.springcast.fm
support.service.parts
cranimax.com
supporto.teameis.it
zoho.allgreenhosting.eu
helpdesk.bau-master.com
helpdesk.bau-master.com
support.itmagix.nl
support.robethood.net
support.springcast.fm
support.service.parts
support.viveflamenco.com
support.itmagix.nl
cranimax.com
support.subrosagroup.co.uk
support.itmagix.nl
support.mcroberts.nl
help.tallstoriestickets.org.uk
support.glastechnology.com
support.dmfa.co.uk
support.viveflamenco.com
help.insightlegal.co.uk
helpdesk.bau-master.com
support.cranimax.com
support.axondevelopment.co.uk
supporto.teameis.it
support.itmagix.nl
servicedesk.resolutecare.co.uk
support.viveflamenco.com
support.cranimax.com
cranimax.com
support.robethood.net
helpdesk.bau-master.com
cs.dawalifesciences.com
support.teletechnics.com
test.service.idgard.de
support.itmagix.nl
petbase.mobile-xl.eu
cranimax.com
support.bitexen.com
helpdesk.bau-master.com
helpdesk.geodesis.ch
cranimax.com
support.sirrahsoft.co.uk
cranimax.com
support.dmfa.co.uk
cranimax.com
cranimax.com
support.sirrahsoft.co.uk
cranimax.com
customerservice.herful.com
cs.dawalifesciences.com
support.robethood.net
help.markus.support
help.someday.com
support.orgasoftware.com
support.itmagix.nl
helpdesk.bau-master.com
cs.dawalifesciences.com
helpdesk.bau-master.com
supporto.noau.it
help.tallstoriestickets.org.uk
host1.cranimax.com
support.bitexen.com
help.adozi.com
helpdesk.bau-master.com
supporto.teameis.it
support.itmagix.nl
help.tallstoriestickets.org.uk
support.itmagix.nl
oplc.cranimax.com
support.jackbaker.dev
oplc.cranimax.com
oplc.cranimax.com
support.newlink.fr
cranimax.com
helpdesk.bau-master.com
support.marketing-autopilot.com
supporto.noau.it
support.glastechnology.com
help.tallstoriestickets.org.uk
support.teletechnics.com
assistenza.amotive.it
support.dmfa.co.uk
support.astrad-austrokommunal.at
customerservice.herful.com
cranimax.com
support.hayaperegrinaciones.com
support.newlink.fr
assistenza.xsystems.srl
services.espats.ch
assistenza.xsystems.srl
supporto.noau.it
cranimax.com
help.insightlegal.co.uk
support.advancecu.org.uk
zoho.allgreenhosting.eu
soporte.error304.com
support.springcast.fm
support.jackbaker.dev
support.service.parts
cranimax.com
supporto.teameis.it
zoho.allgreenhosting.eu
helpdesk.bau-master.com
helpdesk.bau-master.com
support.itmagix.nl
support.robethood.net
support.springcast.fm
support.service.parts
support.viveflamenco.com
support.itmagix.nl
cranimax.com
support.subrosagroup.co.uk
support.itmagix.nl
support.mcroberts.nl
help.tallstoriestickets.org.uk
support.glastechnology.com
support.dmfa.co.uk
support.viveflamenco.com
help.insightlegal.co.uk
helpdesk.bau-master.com
support.cranimax.com
support.axondevelopment.co.uk
supporto.teameis.it
support.itmagix.nl
servicedesk.resolutecare.co.uk
support.viveflamenco.com
support.cranimax.com
cranimax.com
support.robethood.net
helpdesk.bau-master.com
cs.dawalifesciences.com
support.teletechnics.com
test.service.idgard.de
support.itmagix.nl
petbase.mobile-xl.eu
cranimax.com
support.bitexen.com
helpdesk.bau-master.com
helpdesk.geodesis.ch
cranimax.com
support.sirrahsoft.co.uk
cranimax.com
support.dmfa.co.uk
cranimax.com
cranimax.com
support.sirrahsoft.co.uk
cranimax.com
customerservice.herful.com
cs.dawalifesciences.com
support.robethood.net
help.markus.support
help.someday.com
support.orgasoftware.com
support.itmagix.nl
helpdesk.bau-master.com
cs.dawalifesciences.com
helpdesk.bau-master.com
supporto.noau.it
help.tallstoriestickets.org.uk
host1.cranimax.com
support.bitexen.com
help.adozi.com
helpdesk.bau-master.com
supporto.teameis.it
support.itmagix.nl
help.tallstoriestickets.org.uk
support.itmagix.nl
oplc.cranimax.com
support.jackbaker.dev
oplc.cranimax.com
oplc.cranimax.com
support.newlink.fr
cranimax.com
helpdesk.bau-master.com
support.marketing-autopilot.com
supporto.noau.it
support.glastechnology.com
help.tallstoriestickets.org.uk
support.teletechnics.com
assistenza.amotive.it
support.dmfa.co.uk
support.astrad-austrokommunal.at
customerservice.herful.com
cranimax.com
support.hayaperegrinaciones.com
support.newlink.fr
assistenza.xsystems.srl
services.espats.ch
assistenza.xsystems.srl
supporto.noau.it
cranimax.com
help.insightlegal.co.uk
support.advancecu.org.uk
zoho.allgreenhosting.eu
soporte.error304.com
support.springcast.fm
support.jackbaker.dev
Certificate
The complete raw certificate details for host1.cranimax.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgISBFV4Vwn/T+PaR7uqsqJUNF5MMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMDIxNzMxMDlaFw0x OTA1MzExNzMxMDlaMB0xGzAZBgNVBAMTEmhvc3QxLmNyYW5pbWF4LmNvbTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALltoDaudvCPyaV3JCvQYun0Zs2d vhZPGUW6wdBxOnE2PKpVpm+SaABzW2IWPu5uaCnlaCvIlPnLtB7qB/U8ovuVjw8x LqjzXwaLgP+yAVxWFg8uSYxQ/ZZBc0WznogsWVDkSCx1XaHhJn10PaL1jXCHBSNV c2jLtHqEESJWNnBqrIS0o4WxLTY339IryoHCejX+fRXdU5QCh70MGfpZXg5COPYz PeiBUGtmGlcDXlgMA02FKJNBg+k1bNZLfCKsmVruVaf+2KX7+N3olhHxtLGOTbz9 kroqr9t7ay8BFnV5JvrdnmOicf6t4mX94L9j0/oaQVoyW/zsBGv9jEmQ3uHXg/Wl Osb8uhNX04w1Rdnq4GaxF57B4nCDhnV269pF0QcB6Wqpbap5gkfm6QSZrd9qYXSE KDxSs4o8IcWK3LMcI3a4TZ2nqz+orzYTl28jwhLCjObIkH645Gj4aszzFZoLj/O3 Yg4Melgz/UurN9vQ8ajaM35z0WmQ+dfYf+kZqIG5jRF1ftKx28rdlyJn2f3IFohv qQpc0qVqopq62hkwYE4QMuvJN+xicBhwmytdC4QqqurXQ2Y2NgtkUGydYtUTjG6e oB7hFwwgt2QOSRm8J8g99Gy9xO2NtHv7ZxKeXsyRXQbMHwsJXDvdvL4vCw7TB9zd kwq7JETZ0EJ4FTqXAgMBAAGjggJnMIICYzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FJGyb8c7DQLuVXHzk9aP3HKglUwxMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISaG9zdDEuY3Jhbmlt YXguY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHW eQIEAgSB9QSB8gDwAHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYA AAFpP6yWawAABAMARzBFAiA/nWsmf8CXNsXm9FrFxXq+mI3L43QZLraFSwORS8Jp egIhAPE4IvZC9PFCi6R/RK/HXTueliPhDGRMagfXy0ABrdS6AHYAY/Lbzeg7zCzP C3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFpP6yWdgAABAMARzBFAiAPQ6HqNONb uFGAMBWUSMHWvmBdsiaoXRyrManFnJHxGwIhAJMtUxHugLkvksyQWNYSj5YsMn2l mN6xEp3kEp/lvnStMA0GCSqGSIb3DQEBCwUAA4IBAQCQJawe38UsbjgGBR8BoMbQ lMRtU0lyRjRP7K/Zj9zCi9UZVpZdPFUSsWTfylXVXDT4tkrY677ZX/GW0tT21/Z+ BpeX1mU2X8qBWf7nKgWyX7/eAXXZno7qul7GLtrbSrsolmhx+DeDkOVp1SBoU5/e 4WWAPkGAicvD70IS5tGeYka8WD8ZSKk78Co6hz26mndLW6LOTM5zV4aj7AWOjfVZ bEVIVCRj7S/1VDHGeUIaeIe5AGgFrYRPsGIgRk2XyisFlGFzXQYeo56bdM4vJMlp z2oYog3XGy5tGgZ+he21W4++46JNyyCgcE/n6RO/Hiv2E+ON1BfGbrRe9VYfiS8r -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuW2gNq528I/JpXckK9Bi 6fRmzZ2+Fk8ZRbrB0HE6cTY8qlWmb5JoAHNbYhY+7m5oKeVoK8iU+cu0HuoH9Tyi +5WPDzEuqPNfBouA/7IBXFYWDy5JjFD9lkFzRbOeiCxZUORILHVdoeEmfXQ9ovWN cIcFI1VzaMu0eoQRIlY2cGqshLSjhbEtNjff0ivKgcJ6Nf59Fd1TlAKHvQwZ+lle DkI49jM96IFQa2YaVwNeWAwDTYUok0GD6TVs1kt8IqyZWu5Vp/7Ypfv43eiWEfG0 sY5NvP2Suiqv23trLwEWdXkm+t2eY6Jx/q3iZf3gv2PT+hpBWjJb/OwEa/2MSZDe 4deD9aU6xvy6E1fTjDVF2ergZrEXnsHicIOGdXbr2kXRBwHpaqltqnmCR+bpBJmt 32phdIQoPFKzijwhxYrcsxwjdrhNnaerP6ivNhOXbyPCEsKM5siQfrjkaPhqzPMV mguP87diDgx6WDP9S6s329DxqNozfnPRaZD519h/6RmogbmNEXV+0rHbyt2XImfZ /cgWiG+pClzSpWqimrraGTBgThAy68k37GJwGHCbK10LhCqq6tdDZjY2C2RQbJ1i 1ROMbp6gHuEXDCC3ZA5JGbwnyD30bL3E7Y20e/tnEp5ezJFdBswfCwlcO928vi8L DtMH3N2TCrskRNnQQngVOpcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 377533104207411231062373092237433550167628 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-02 17:31:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-31 17:31:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'host1.cranimax.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756481161899753368195417197383029396936721878788849215149800574588152549180817915098529156168662428801238470123871214206212685580159458279393736179088794853488443746293139859945532181966755695925485192381706175345136794625496161555205706090949006674456633231436497469704917277056346332799851729519219555602744668145672161622483413131802613802477730720695910051923694063161587393274423272635819904785608042855210496976311676140510779975506256944881260983085091609091182627866519320764135779145981311295005771633653643662004557471657728194036146671967027303318641837714988335127055880248955078005021934743958415008622119950777853646910617352952830109653900062906577606549730200732734324409212601592587304693736804659270608574396001539348635141311551311092182571783466858620984586571707108096215013645173588438534804639646603511915051191276767564977463897262725869111479605747994869407683731228494704317397531168922104557528857513084152952468086291054388159577771861834634608224924890489562096731811903452695974052438432408462917157161818768810035439596357234452223764326334951898571318962912645056681599532988903299769622972420106569578563208580576877491124031962609599501555671401691466508516589862159056633633834790960342300217391767 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 91b26fc73b0d02ee5571f393d68fdc72a0954c31 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host1.cranimax.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001693fac966b000004030047304502203f9d6b267fc09736c5e6f45ac5c57abe988dcbe374192eb6854b03914bc2697a022100f13822f642f4f1428ba47f44afc75d3b9e9623e10c644c6a07d7cb4001add4ba00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001693fac9676000004030047304502200f43a1ea34e35bb8518030159448c1d6be605db226a85d1cab31a9c59c91f11b022100932d5311ee80b92f92cc9058d6128f962c327da598deb1129de4129fe5be74ad . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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