my.opel.ba
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:cd:5b:7d:60:a6:1f:1a:5d:6f:34:8c:d6:0b:34:63:da:7b was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=my.opel.ba
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:cd:5b:7d:60:a6:1f:1a:5d:6f:34:8c:d6:0b:34:63:da:7bSerial Number (int): 331216353759069691984286776338379652192891
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e1:f0:33:90:29:49:ab:d3:17:57:40:0a:f8:9c:31:4b:0e:82:8a:b7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 8d:f0:b9:ba:28:08:5d:99:f1:b0:04:53:68:a4:d8:d6:70:b4:d7:48
Fingerprint (sha256): 38:26:f9:f4:b3:f7:d4:91:53:bb:52:fc:9c:0f:57:c6:39:ba:76:ce:66:21:2d:17:8d:2f:a2:a0:3e:6f:25:c6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate my.opel.ba
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for my.opel.ba
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
my.opel.ba
my.opel.com.cy
my.opel.com.tr
my.opel.cz
my.opel.dk
my.opel.ee
my.opel.fi
my.opel.hu
my.opel.mk
my.opel.rs
my.opel.se
my.opel.sk
my.opel.com.cy
my.opel.com.tr
my.opel.cz
my.opel.dk
my.opel.ee
my.opel.fi
my.opel.hu
my.opel.mk
my.opel.rs
my.opel.se
my.opel.sk
Other certificates including the domain name opel.ba
(limited to 100 certificates)
www.opel.cz
www.gm.com
my.opel.ba
my.opel.ba
my.opel.ba
my.opel.ba
www.opel.cz
my.opel.ba
www.gm.com
my.opel.ba
www.opel.cz
www.opel.cz
www.gm.com
www.opel.cz
www.opel.cz
www.opel.cz
my.opel.ba
my.opel.ba
www.gm.com
www.opel.cz
www.opel.cz
my.opel.ba
www.opel.cz
www.opel.cz
my.opel.ba
www.gm.com
www.opel.cz
my.opel.ba
www.opel.cz
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
www.opel.cz
my-pp.opel.at
www.opel.cz
www.opel.cz
www.opel.cz
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
www.opel.cz
my.opel.ba
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.gr
my-pp.opel.at
www.gm.com
my.opel.ba
opel.fr
www.opel.cz
www.gm.com
www.opel.cz
my-pp.opel.at
www.opel.cz
opel.fr
www.opel.cz
www.gm.com
my.opel.ba
www.opel.cz
my-pp.opel.at
www.opel.cz
my.opel.ba
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
my.opel.ba
www.opel.cz
www.opel.cz
www.opel.gr
www.opel.cz
my-pp.opel.at
www.opel.cz
www.opel.cz
my.opel.ba
www.opel.cz
my.opel.ba
opel.fr
my-pp.opel.at
www.opel.cz
www.opel.cz
my-pp.opel.at
www.opel.cz
www.opel.cz
www.opel.cz
www.opel.cz
my.opel.ba
my-pp.opel.at
www.opel.cz
my.opel.ba
www.opel.cz
www.gm.com
my.opel.ba
my.opel.ba
www.gm.com
my.opel.ba
my.opel.ba
my.opel.ba
my.opel.ba
www.opel.cz
my.opel.ba
www.gm.com
my.opel.ba
www.opel.cz
www.opel.cz
www.gm.com
www.opel.cz
www.opel.cz
www.opel.cz
my.opel.ba
my.opel.ba
www.gm.com
www.opel.cz
www.opel.cz
my.opel.ba
www.opel.cz
www.opel.cz
my.opel.ba
www.gm.com
www.opel.cz
my.opel.ba
www.opel.cz
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
www.opel.cz
my-pp.opel.at
www.opel.cz
www.opel.cz
www.opel.cz
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
www.opel.cz
my.opel.ba
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.gr
my-pp.opel.at
www.gm.com
my.opel.ba
opel.fr
www.opel.cz
www.gm.com
www.opel.cz
my-pp.opel.at
www.opel.cz
opel.fr
www.opel.cz
www.gm.com
my.opel.ba
www.opel.cz
my-pp.opel.at
www.opel.cz
my.opel.ba
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
my.opel.ba
www.opel.cz
www.opel.cz
www.opel.gr
www.opel.cz
my-pp.opel.at
www.opel.cz
www.opel.cz
my.opel.ba
www.opel.cz
my.opel.ba
opel.fr
my-pp.opel.at
www.opel.cz
www.opel.cz
my-pp.opel.at
www.opel.cz
www.opel.cz
www.opel.cz
www.opel.cz
my.opel.ba
my-pp.opel.at
www.opel.cz
my.opel.ba
www.opel.cz
www.gm.com
my.opel.ba
my.opel.ba
Certificate
The complete raw certificate details for my.opel.ba in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgISA81bfWCmHxpdbzSM1gs0Y9p7MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjMwNTAxMzZaFw0x OTEyMjIwNTAxMzZaMBUxEzARBgNVBAMTCm15Lm9wZWwuYmEwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQC/Wx3z1/oiZ5vJ5Sau1lZFldL2z3BmOLMNAXSC IQb+Zdt9jKyyufMTD0tDhSJEXIxouSc+PiLzIpEkwT8mgss1C/OKkNlEeICg4Zv3 lzm5XOrUJUpisxp7qrwYZzSqvs8oH0+tOroLLtWrmBqPNNZJfPjwYKdr/1KMqLhg Y4vdlEUfQ2EXfIQrVqeJ6XJuUUGT0o/HanP5s0gpFO8WMHZVD1WCRNillAw7YB8S pm9p54rTOK2buNkgCz7q9Wb7bebVHNsd2J8zdCQ1sP+Bu2u2PC/k+sN/A6A/IXoq qECIngCuHfToltNLRET9lV47PIbdFOZDVz7bSFM3L0o+GtLhAgMBAAGjggH7MIIB 9zAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOHwM5ApSavTF1dACvicMUsOgoq3MB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w gaMGA1UdEQSBmzCBmIIKbXkub3BlbC5iYYIObXkub3BlbC5jb20uY3mCDm15Lm9w ZWwuY29tLnRyggpteS5vcGVsLmN6ggpteS5vcGVsLmRrggpteS5vcGVsLmVlggpt eS5vcGVsLmZpggpteS5vcGVsLmh1ggpteS5vcGVsLm1rggpteS5vcGVsLnJzggpt eS5vcGVsLnNlggpteS5vcGVsLnNrMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysG AQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu b3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGyd+I L1aWcg/Yh0oGw52r5JNY1/NwyOl3a4i+jxeHVlyyCNVasAqXwikgbGiy90mGBs5E HAh22H/ra6AuLZv+/eP4eistlIAMpk0OvSYEq7yWnUa0AAZnQk3u7BrklFmm2pik BYDEU5hQFviJhxKwAGKS8nZpiWyTQqHQFGPIQ7mCMQSAMDtM+nG2V7W/bT5cTS2b F8Gr9Fm+WdCA7aZGSiS9q7uueH0VXPoREhwfM1xr0GQfC7H3SWc2a1N8A9VGH82f FfKduDbLtiVg4h/oTp5fdh7cRLa0lR6hKTL5icZIWpL+PkiehRSPl+7/12Y1BWZP e+LOfG0ZSdGveU55 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1sd89f6ImebyeUmrtZW RZXS9s9wZjizDQF0giEG/mXbfYyssrnzEw9LQ4UiRFyMaLknPj4i8yKRJME/JoLL NQvzipDZRHiAoOGb95c5uVzq1CVKYrMae6q8GGc0qr7PKB9PrTq6Cy7Vq5gajzTW SXz48GCna/9SjKi4YGOL3ZRFH0NhF3yEK1anielyblFBk9KPx2pz+bNIKRTvFjB2 VQ9VgkTYpZQMO2AfEqZvaeeK0zitm7jZIAs+6vVm+23m1RzbHdifM3QkNbD/gbtr tjwv5PrDfwOgPyF6KqhAiJ4Arh306JbTS0RE/ZVeOzyG3RTmQ1c+20hTNy9KPhrS 4QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 331216353759069691984286776338379652192891 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 05:01:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-22 05:01:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'my.opel.ba' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24156447716826581868347623715716451628123669809222491278268381428702396821864230470245597753749116674840766829867101657532217288298918222382603506845806013186100356254496515659204170920217358585555191919697984685638786256031385211918239995831927838099160503479565270148652840743707733365845748573321122800656915062445332092951368464804116753295151768812754685859738298129082823120131376664859315554646262525839453876911843566963466916532414875853593420213193417721496900849300146781654631171769704516194790863756107456664288396162346339576508649082885629909706052669673102736323371097302455056274745471382224635613921 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e1f033902949abd31757400af89c314b0e828ab7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (155 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.ba' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.com.cy' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.com.tr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.hu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.mk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.rs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.sk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0086c9df882f5696720fd8874a06c39dabe49358d7f370c8e9776b88be8f1787565cb208d55ab00a97c229206c68b2f7498606ce441c0876d87feb6ba02e2d9bfefde3f87a2b2d94800ca64d0ebd2604abbc969d46b4000667424deeec1ae49459a6da98a40580c453985016f8898712b0006292f27669896c9342a1d01463c843b982310480303b4cfa71b657b5bf6d3e5c4d2d9b17c1abf459be59d080eda6464a24bdabbbae787d155cfa11121c1f335c6bd0641f0bb1f74967366b537c03d5461fcd9f15f29db836cbb62560e21fe84e9e5f761edc44b6b4951ea12932f989c6485a92fe3e489e85148f97eeffd7663505664f7be2ce7c6d1949d1af794e79