krug.com
Issued by R3
About this certificate
This digital certificate with serial number 04:f8:16:66:7c:bf:d2:dd:04:3f:6f:ea:0c:a2:1d:3a:72:5a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=krug.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:f8:16:66:7c:bf:d2:dd:04:3f:6f:ea:0c:a2:1d:3a:72:5aSerial Number (int): 432868945883837193164794407946562238575194
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 2b:36:f3:4b:5a:47:b1:32:a0:97:91:ff:75:7b:31:a9:e4:ee:4d:f2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 9c:4e:9f:a1:1c:cc:15:85:d0:f2:c3:b7:03:14:e6:21:7e:ce:49:41
Fingerprint (sha256): 36:72:4c:40:b2:e6:db:2a:c2:7c:6c:92:10:12:aa:3a:68:b5:bd:37:7e:78:a0:a9:11:30:96:5e:27:ae:9a:e3
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate krug.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for krug.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
krug.com
Other certificates including the domain name krug.com
(limited to 100 certificates)
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
moethennessy.com
krug.com
view.email.krug.com
facebook-bot.krug.com
www.lvmh.com
www.lvmh.com
uat.moethennessy.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
uat.moethennessy.com
preprod.lvmh.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
krug.com
preprod.lvmh.com
preprod.lvmh.com
stg.moethennessy.com
uat.moethennessy.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
uat.moethennessy.com
prd2.moethennessy.com
preprod.lvmh.com
uat.moethennessy.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
*.krug.com
preprod.lvmh.com
click.email.krug.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
krug.com
www.lvmh.com
M H C S SA
uat.moethennessy.com
prd2.moethennessy.com
preprod.lvmh.com
uat.moethennessy.com
preprod.lvmh.com
akamai-san46.exacttarget.com
*.krug.com
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
www.lvmh.com
*.krug.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
*.krug.com
krug.com
preprod.lvmh.com
akamai-san46.exacttarget.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
cloud.email.krug.com
www.lvmh.com
www.lvmh.com
*.krug.com
prd2.moethennessy.com
www.lvmh.com
www.lvmh.com
uat.moethennessy.com
preprod.lvmh.com
uat2.moethennessy.com
www.lvmh.com
view.email.krug.com
cloud.email.krug.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
moethennessy.com
krug.com
view.email.krug.com
facebook-bot.krug.com
www.lvmh.com
www.lvmh.com
uat.moethennessy.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
uat.moethennessy.com
preprod.lvmh.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
krug.com
preprod.lvmh.com
preprod.lvmh.com
stg.moethennessy.com
uat.moethennessy.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
uat.moethennessy.com
prd2.moethennessy.com
preprod.lvmh.com
uat.moethennessy.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
*.krug.com
preprod.lvmh.com
click.email.krug.com
www.lvmh.com
www.lvmh.com
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
krug.com
www.lvmh.com
M H C S SA
uat.moethennessy.com
prd2.moethennessy.com
preprod.lvmh.com
uat.moethennessy.com
preprod.lvmh.com
akamai-san46.exacttarget.com
*.krug.com
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
www.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
www.lvmh.com
*.krug.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
*.krug.com
krug.com
preprod.lvmh.com
akamai-san46.exacttarget.com
preprod.lvmh.com
preprod.lvmh.com
preprod.lvmh.com
cloud.email.krug.com
www.lvmh.com
www.lvmh.com
*.krug.com
prd2.moethennessy.com
www.lvmh.com
www.lvmh.com
uat.moethennessy.com
preprod.lvmh.com
uat2.moethennessy.com
www.lvmh.com
view.email.krug.com
cloud.email.krug.com
Certificate
The complete raw certificate details for krug.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFzCCBP+gAwIBAgISBPgWZny/0t0EP2/qDKIdOnJaMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA1MTQxMTQ0MDZaFw0yMzA4MTIxMTQ0MDVaMBMxETAPBgNVBAMT CGtydWcuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv3MFj/Fs qTwad9u242qTlmN/csXDFoCuwA9vb0D5ucggnRdkt/IpxdCz3+T7PYzhY/WhQ6CR pHjWiQkaqPtuINw57b7ckS03vqsXGf0lVoWOnskKhXrZINCkPt+GiPEtfe5NGjBo 6QObgBaIjQzNAVYKVzyxOd/N+0Kv6bw5bSOfugf4I5zsppkSWwpd5kEzhFc5vxUJ 98GnZOQhWQRJ1Apx6y1AzONHsgMPsHuOOL5JXk19L9B37KTwe6eNUk3aJrsBdVhU JbvN5JlulhKdd76woE6SVVQvWylKJGxzWbYdBnjVd1PonCs+cupd92yjHhl+LV14 sWzzT2CBIVLxkK+NNyLhPa0GNtJAQMcq7aYEZwu6kzevgfVMsqmGXNMcDOfv8+6E jC4ruJCD1+dNeHPSwg5QaolCoxHZxFQ6lS+CRaMlBw/CxN2eIYU77/FOUZsSrFC9 4+SyLS7kscQKgBH1p8IEg302dp4pC8pNw6EvCKva1o8JJAy2JVk5AsgGmXmFEVKY 5/h16UnfZMfUF9aYmnqAtxQDLYf3ckL7wvmzEh66avVnSGEh4qFKUaQwOjxPfnNs 65qid+q8EMv1PJBTO8FMFyw6jDzLEcO44da+UdsYQ+aOSYvcpat/ROhfmKz5T/ax tKI5Fig3J4g4SBRuBoyNBtpQR2rVNSCTjcsCAwEAAaOCAkQwggJAMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQUKzbzS1pHsTKgl5H/dXsxqeTuTfIwHwYDVR0jBBgwFoAU FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p LmxlbmNyLm9yZy8wEwYDVR0RBAwwCoIIa3J1Zy5jb20wTAYDVR0gBEUwQzAIBgZn gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgB6MoxU2Lct tiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYgaSiP8AAAEAwBHMEUCIQDbB99C 7lJE2Qx8uV6OhgScT6j2i6Ke52FJYixtDHhwKgIgQ3FHotdwyy4qa+8udZemCPiY mo8lar/Yu0N3RL6CqnkAdwCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yC igAAAYgaSiQuAAAEAwBIMEYCIQD9/EnyWE9tkSxGHHJv1H1bI/iw08uPKKST62rH 2xhcFwIhALaLr2Hi6Eanqs/bJnSwsdgk034+Xq/ic1AeTtl0nl9JMA0GCSqGSIb3 DQEBCwUAA4IBAQBwe13HrQI8ACaYneakxnAmv53HCsnkaGhWpP34HGvIoQYBfuFU rqmmlxscGIUzgj2Q25RWCfWesH1jpDGJze+YuKwnVN5SNnh+loYSg+Vt83NoHKp1 nxB0/A+EWhTzZPOUFkSaieJ+s9xtudRHKX+XVC64JHE5ilb9YVZDRfmr7+lUrc62 IVfXmwc2Wem4vqftNNtqi7URhR/mqEVkTiBuMRqFz9qlgJLy9uCIbM7MAk5kHdBA fcxH9IkZ4od8zOCGUYEVR+vfFw7wmFGIiCLT95e2XAWz/R/by09SXXWQ4U9Q8S6a QXySQp2RbB2X+6r13guJ5EFGJwezPeciSiNi -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv3MFj/FsqTwad9u242qT lmN/csXDFoCuwA9vb0D5ucggnRdkt/IpxdCz3+T7PYzhY/WhQ6CRpHjWiQkaqPtu INw57b7ckS03vqsXGf0lVoWOnskKhXrZINCkPt+GiPEtfe5NGjBo6QObgBaIjQzN AVYKVzyxOd/N+0Kv6bw5bSOfugf4I5zsppkSWwpd5kEzhFc5vxUJ98GnZOQhWQRJ 1Apx6y1AzONHsgMPsHuOOL5JXk19L9B37KTwe6eNUk3aJrsBdVhUJbvN5JlulhKd d76woE6SVVQvWylKJGxzWbYdBnjVd1PonCs+cupd92yjHhl+LV14sWzzT2CBIVLx kK+NNyLhPa0GNtJAQMcq7aYEZwu6kzevgfVMsqmGXNMcDOfv8+6EjC4ruJCD1+dN eHPSwg5QaolCoxHZxFQ6lS+CRaMlBw/CxN2eIYU77/FOUZsSrFC94+SyLS7kscQK gBH1p8IEg302dp4pC8pNw6EvCKva1o8JJAy2JVk5AsgGmXmFEVKY5/h16UnfZMfU F9aYmnqAtxQDLYf3ckL7wvmzEh66avVnSGEh4qFKUaQwOjxPfnNs65qid+q8EMv1 PJBTO8FMFyw6jDzLEcO44da+UdsYQ+aOSYvcpat/ROhfmKz5T/axtKI5Fig3J4g4 SBRuBoyNBtpQR2rVNSCTjcsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 432868945883837193164794407946562238575194 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-14 11:44:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-12 11:44:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'krug.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781045015854687684524333481372015158311435851858399101704595005820781470991720033036401193222180775501440472209656153629715278574009979131620459650662771286622039490948873191691402093085957788882048504486199532771233292585423206324953154257214880703704148904209909218549344379288437545939666511430896262607916157372864769734454400237907784650758132791490255249729495895500324135594923208662840114754005195026596027149480600213429929800556505637875749948538521344203681219442482485160957484799640226891436009520131601355986770858308052840277553498079788593183360163564576646230953317656559053538041022982667516668715095523808216011339695272203925716742875062040845334278839522791454145340464219324935685616123228170661028380841475047634326546106641758474030872332093817481158299011823590601052604637586493226247382514313760375814888926846602383027689138899988862210266893349839193008991008371027383333154993011639560404163287264148251531019541527959916169671373200385365993711610517512273127823792968392839769233506048669661623066411931591762165331857418962068711663993309241102265551386985457963185467802680326881967009351812594875135966852336160530553904425008044069772240710934395969024690051810379277617048856968417197065046822347 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2b36f34b5a47b132a09791ff757b31a9e4ee4df2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krug.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001881a4a23fc0000040300473045022100db07df42ee5244d90c7cb95e8e86049c4fa8f68ba29ee76149622c6d0c78702a0220437147a2d770cb2e2a6bef2e7597a608f8989a8f256abfd8bb437744be82aa79007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001881a4a242e0000040300483046022100fdfc49f2584f6d912c461c726fd47d5b23f8b0d3cb8f28a493eb6ac7db185c17022100b68baf61e2e846a7aacfdb2674b0b1d824d37e3e5eafe273501e4ed9749e5f49 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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