weblog.pe1pqf.ampr.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d2:34:c5:fe:b7:fa:c7:8e:90:bd:03:e8:00:99:6e:a0:80 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=weblog.pe1pqf.ampr.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d2:34:c5:fe:b7:fa:c7:8e:90:bd:03:e8:00:99:6e:a0:80Serial Number (int): 332866302753248169823188277282679242530944
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b5:34:a9:f0:49:9a:2f:1b:31:eb:f4:90:83:71:ef:b1:0e:3d:d2:de
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 84:14:de:96:ae:79:69:6e:77:78:01:4c:bd:aa:64:95:20:35:9f:11
Fingerprint (sha256): 39:b9:cb:04:2b:24:5a:61:af:92:9e:d0:5d:d6:48:d5:31:13:e9:7d:03:db:2d:f7:0a:de:9f:b4:63:44:45:a6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate weblog.pe1pqf.ampr.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for weblog.pe1pqf.ampr.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
weblog.pe1pqf.ampr.org
Other certificates including the domain name ampr.org
(limited to 100 certificates)
n1uro.ampr.org
db0gw-i.ampr.org
sp2l.ampr.org
jplarc.ampr.org
f4mzi.ampr.org
ja3yaq.ampr.org
sp2l.ampr.org
db0gw-i.ampr.org
www.n0qbj.ampr.org
mattermost.pi9noz.ampr.org
hosting.va4wan.ampr.org
as15780.ampr.org
www.crarc.ampr.org
www.n0qbj.ampr.org
ja3yaq.ampr.org
f4mzi.ampr.org
www.stagecraft.cx
de.ampr.org
jplarc.ampr.org
f5pql.ampr.org
hoseline.pd0mz.ampr.org
www.stagecraft.cx
www.crarc.ampr.org
jplarc.ampr.org
wiki.ampr.org
sp2l.ampr.org
f4mzi.ampr.org
n1uro.ampr.org
as15780.ampr.org
www.pb0fh.ampr.org
www.ampr.org
ja3yaq.ampr.org
portal.ampr.org
portal.ampr.org
f5pql.ampr.org
de.ampr.org
www.pb0fh.ampr.org
db0gw-i.ampr.org
www.pb0fh.nl
de.ampr.org
pi2shb.ampr.org
sp2l.ampr.org
db0gw-i.ampr.org
ampr.org
bm-lastheard.pi9noz.ampr.org
www.n0qbj.ampr.org
www.pb0fh.ampr.org
wiki.ampr.org
weblog.pe1pqf.ampr.org
f5pql.ampr.org
www.ampr.org
db0gw-i.ampr.org
gw.ampr.org
www.5150fm.net
ncpa.ampr.org
wiki.ampr.org
www.pb0fh.ampr.org
www.oz6bl.dk
www.n0qbj.ampr.org
www.pb0fh.ampr.org
as15780.ampr.org
db0gw-i.ampr.org
portal.ampr.org
www.ampr.org
weblog.pe1pqf.ampr.org
as15780.ampr.org
www.5150fm.net
jplarc.ampr.org
ja3yaq.ampr.org
www.pb0fh.nl
db0gw-i.ampr.org
ampr.org
bfoo.com
ncpa.ampr.org
jplarc.ampr.org
www.pb0fh.nl
serveurperso.flnet.org
gw.ampr.org
ncpa.ampr.org
de.ampr.org
db0gw-i.ampr.org
weblog.pe1pqf.ampr.org
www.ampr.org
mailman.ampr.org
jplarc.ampr.org
f4mzi.ampr.org
portal.ampr.org
ampr.org
f4mzi.ampr.org
weblog.pe1pqf.ampr.org
mailman.ampr.org
www.pa3get.ampr.org
wiki.ampr.org
portal.ampr.org
www.oz6bl.dk
mattermost.pi9noz.ampr.org
sys6.pe1pqf.ampr.org
mattermost.pi9noz.ampr.org
www.ampr.org
de.ampr.org
db0gw-i.ampr.org
sp2l.ampr.org
jplarc.ampr.org
f4mzi.ampr.org
ja3yaq.ampr.org
sp2l.ampr.org
db0gw-i.ampr.org
www.n0qbj.ampr.org
mattermost.pi9noz.ampr.org
hosting.va4wan.ampr.org
as15780.ampr.org
www.crarc.ampr.org
www.n0qbj.ampr.org
ja3yaq.ampr.org
f4mzi.ampr.org
www.stagecraft.cx
de.ampr.org
jplarc.ampr.org
f5pql.ampr.org
hoseline.pd0mz.ampr.org
www.stagecraft.cx
www.crarc.ampr.org
jplarc.ampr.org
wiki.ampr.org
sp2l.ampr.org
f4mzi.ampr.org
n1uro.ampr.org
as15780.ampr.org
www.pb0fh.ampr.org
www.ampr.org
ja3yaq.ampr.org
portal.ampr.org
portal.ampr.org
f5pql.ampr.org
de.ampr.org
www.pb0fh.ampr.org
db0gw-i.ampr.org
www.pb0fh.nl
de.ampr.org
pi2shb.ampr.org
sp2l.ampr.org
db0gw-i.ampr.org
ampr.org
bm-lastheard.pi9noz.ampr.org
www.n0qbj.ampr.org
www.pb0fh.ampr.org
wiki.ampr.org
weblog.pe1pqf.ampr.org
f5pql.ampr.org
www.ampr.org
db0gw-i.ampr.org
gw.ampr.org
www.5150fm.net
ncpa.ampr.org
wiki.ampr.org
www.pb0fh.ampr.org
www.oz6bl.dk
www.n0qbj.ampr.org
www.pb0fh.ampr.org
as15780.ampr.org
db0gw-i.ampr.org
portal.ampr.org
www.ampr.org
weblog.pe1pqf.ampr.org
as15780.ampr.org
www.5150fm.net
jplarc.ampr.org
ja3yaq.ampr.org
www.pb0fh.nl
db0gw-i.ampr.org
ampr.org
bfoo.com
ncpa.ampr.org
jplarc.ampr.org
www.pb0fh.nl
serveurperso.flnet.org
gw.ampr.org
ncpa.ampr.org
de.ampr.org
db0gw-i.ampr.org
weblog.pe1pqf.ampr.org
www.ampr.org
mailman.ampr.org
jplarc.ampr.org
f4mzi.ampr.org
portal.ampr.org
ampr.org
f4mzi.ampr.org
weblog.pe1pqf.ampr.org
mailman.ampr.org
www.pa3get.ampr.org
wiki.ampr.org
portal.ampr.org
www.oz6bl.dk
mattermost.pi9noz.ampr.org
sys6.pe1pqf.ampr.org
mattermost.pi9noz.ampr.org
www.ampr.org
de.ampr.org
Certificate
The complete raw certificate details for weblog.pe1pqf.ampr.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgISA9I0xf63+seOkL0D6ACZbqCAMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMjMxMjQwMTFaFw0x OTAyMjExMjQwMTFaMCExHzAdBgNVBAMTFndlYmxvZy5wZTFwcWYuYW1wci5vcmcw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCj7t/DkJqEXlHY0ILYr3C OVJpYzTEh90B5RzcIaIQwcA4tc/ck15elFolJbXAqQz4WnvsO7+J5TwwYCuP5Ll1 tZmUpjQTb2+dymavN6pBGSA+46YFnclyujbhrTMN1eeHintMlQssxd1u8DUiumzM 20DPdZkGUSfkGYzOtnUUMkDXQQdmSLr3f6Lodm1XZ0VP2P6HErw1FIHzyX2nYL30 1TEvqNDx2rrj6F4ZCDRQ4pkIXyZvTPxmLzNf9Z+4/ssNHQ6wTuI8JF7Sg5kxd6c4 oZZJOt3bugEnveBO93xzDUKVozmoac3n5Zy9TZdYHE0S5zedAXCqKZiAZDrRfs3J AgMBAAGjggJsMIICaDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLU0qfBJmi8bMev0 kINx77EOPdLeMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wIQYDVR0RBBowGIIWd2VibG9nLnBlMXBxZi5hbXByLm9yZzBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYE gfMA8QB2AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABZ0DMokUA AAQDAEcwRQIhAJQdqsTB4niLIZr+HKweaDjj+tMo/tDIRiuMdy9O1s4VAiBQGjZr 5pvCVwB3w1oVf1w71Cu8FlvTuVafJ0ecIgJYvQB3ACk8UZZUyDlluqpQ/FgH1Ldv v1h6KXLcpMMM9OVFR/R4AAABZ0DMokQAAAQDAEgwRgIhAPQEhF22h/1lwSMmaadq i424NLtmuG2mqQWwluvuyNtOAiEAzkFj6AvlLBl/dVCD3hg3Tl33TqFuIPaHH1E9 7aYEbHkwDQYJKoZIhvcNAQELBQADggEBAGroNrQY99FM9hy8Hf8bxr23c4hW3tyJ gnIh1K4DsiVE5iq5jd51RaP3KWhNezn/za8mKs9DiZYyAOAQkeS4Vic+n/BtOmdI s84IGeuBlWGuNZCTo9mECmM16JGataLiyY6SL2znSgG41Y6pggryqkfsLF8zE4SE fscDB+0u0wbS7gFlcXLSixT9Wsqe3OzuQWhZGUHPL/h/Tcys5nYOHxQtoxGV8xZo Gfqz8osO8aSauHvqLMrthVcGWrKFsPfGrX7MWJvhuqEV8m0D5yRlkFhfo5hh+sMA bZDh+DYgQIQbCR7IPErmC+2BshCd80Y7pzNTdM7RiyTt2iInpVfkZB0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo+7fw5CahF5R2NCC2K9 wjlSaWM0xIfdAeUc3CGiEMHAOLXP3JNeXpRaJSW1wKkM+Fp77Du/ieU8MGArj+S5 dbWZlKY0E29vncpmrzeqQRkgPuOmBZ3Jcro24a0zDdXnh4p7TJULLMXdbvA1Irps zNtAz3WZBlEn5BmMzrZ1FDJA10EHZki693+i6HZtV2dFT9j+hxK8NRSB88l9p2C9 9NUxL6jQ8dq64+heGQg0UOKZCF8mb0z8Zi8zX/WfuP7LDR0OsE7iPCRe0oOZMXen OKGWSTrd27oBJ73gTvd8cw1ClaM5qGnN5+WcvU2XWBxNEuc3nQFwqimYgGQ60X7N yQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 332866302753248169823188277282679242530944 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-23 12:40:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-21 12:40:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'weblog.pe1pqf.ampr.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24561108255162311347244093320518314742494377540864091862218160964644960007437916449036088550144064565894485311653819303975700876840705012840401400977860336982293874968999212592304141055178206325442260241830127996526639077576165023347227423487041720775378818864579170733766108731099996992652550489961716908902272206732664712178503771316551433988851739061273817474555115484730033576768517838665984777032052691676464054278738333063527774348634099558560852463339925521949140243454179945138916554485323413544013436199057137362519258776133021575411396153502548257192522490207193533821964614848212178953865739526291266129353 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b534a9f0499a2f1b31ebf4908371efb10e3dd2de . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblog.pe1pqf.ampr.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016740cca2450000040300473045022100941daac4c1e2788b219afe1cac1e6838e3fad328fed0c8462b8c772f4ed6ce150220501a366be69bc2570077c35a157f5c3bd42bbc165bd3b9569f27479c220258bd007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016740cca2440000040300483046022100f404845db687fd65c1232669a76a8b8db834bb66b86da6a905b096ebeec8db4e022100ce4163e80be52c197f755083de18374e5df74ea16e20f6871f513deda6046c79 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 006ae836b418f7d14cf61cbc1dff1bc6bdb7738856dedc89827221d4ae03b22544e62ab98dde7545a3f729684d7b39ffcdaf262acf4389963200e01091e4b856273e9ff06d3a6748b3ce0819eb819561ae359093a3d9840a6335e8919ab5a2e2c98e922f6ce74a01b8d58ea9820af2aa47ec2c5f331384847ec70307ed2ed306d2ee01657172d28b14fd5aca9edcecee4168591941cf2ff87f4dccace6760e1f142da31195f3166819fab3f28b0ef1a49ab87bea2ccaed8557065ab285b0f7c6ad7ecc589be1baa115f26d03e7246590585fa39861fac3006d90e1f8362040841b091ec83c4ae60bed81b2109df3463ba7335374ced18b24edda2227a557e4641d