reform.a-sta.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:32:bd:90:f7:08:a6:f4:7a:06:c3:fa:aa:42:ab:ea:c7:7c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=reform.a-sta.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:32:bd:90:f7:08:a6:f4:7a:06:c3:fa:aa:42:ab:ea:c7:7cSerial Number (int): 278602952933719308696058308633021026846588
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 7a:c4:4d:b0:68:ed:e1:bf:42:0e:69:d4:0a:e1:63:4c:a2:26:2d:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 92:72:71:f6:be:6e:84:0e:99:a6:ce:81:52:f1:bc:3e:aa:5e:4d:a4
Fingerprint (sha256): 3a:22:2c:62:b7:a0:bd:b2:51:b1:4b:de:47:25:2a:c0:5c:7b:fc:28:92:71:27:47:8b:f9:da:57:3c:c0:d7:58
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate reform.a-sta.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for reform.a-sta.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
reform.a-sta.com
Other certificates including the domain name a-sta.com
(limited to 100 certificates)
pradyumnawasthi.com
job.a-sta.com
a-sta.com
www.benmeeks.com
a-sta.com
job.a-sta.com
a-sta.com
a-sta.com
a-sta.com
a-sta.com
a-sta.com
www.represent.la
a-sta.com
jigsawpuzzledeluxe.games235.com
backend.shopping.a-sta.com
www.numbr.tk
www.delf.com.br
brentwong.me
a-sta.com
a-sta.com
a-sta.com
testshopping.a-sta.com
a-sta.com
reform.a-sta.com
reform.a-sta.com
reform.a-sta.com
data-explorer.riddc.brown.edu
a-sta.com
reform.a-sta.com
a-sta.com
test.a-sta.com
a-sta.com
admin.testshopping.a-sta.com
shopping.a-sta.com
test.a-sta.com
www.rpieducation.com
a-sta.com
a-sta.com
shopping.a-sta.com
shopping.a-sta.com
reform.a-sta.com
reform.a-sta.com
www.rpieducation.com
test.a-sta.com
a-sta.com
a-sta.com
getracker.cl
a-sta.com
a-sta.com
a-sta.com
admin.testshopping.a-sta.com
shopping.a-sta.com
todo.solarsail.work
a-cloud.a-sta.com
shopping.a-sta.com
a-sta.com
a-sta.com
a-sta.com
testshopping.a-sta.com
a-sta.com
testshopping.a-sta.com
a-sta.com
reform.a-sta.com
a-sta.com
www.cmgbh.com
a-sta.com
a-sta.com
test.a-sta.com
gollmann.apoly.de
shopping.a-sta.com
shopping.a-sta.com
reform.a-sta.com
a-sta.com
www.jorgejd.com
a-sta.com
reform.a-sta.com
shopping.a-sta.com
backend.shopping.a-sta.com
a-sta.com
fix-it.app
reform.a-sta.com
elshemy.site
medcanhub.cellenhealth.com
drafti.io
a-sta.com
www.geter.com.ar
dev.akses.at
verify.getherd.app
admin.shopping.a-sta.com
app.bibliaseunheroe.com
reform.a-sta.com
www.driveflow.co.uk
ire.lab.mc1global.com
a-sta.com
backend.shopping.a-sta.com
a-sta.com
link.explorebtk.com
a-sta.com
a-sta.com
a-sta.com
job.a-sta.com
a-sta.com
www.benmeeks.com
a-sta.com
job.a-sta.com
a-sta.com
a-sta.com
a-sta.com
a-sta.com
a-sta.com
www.represent.la
a-sta.com
jigsawpuzzledeluxe.games235.com
backend.shopping.a-sta.com
www.numbr.tk
www.delf.com.br
brentwong.me
a-sta.com
a-sta.com
a-sta.com
testshopping.a-sta.com
a-sta.com
reform.a-sta.com
reform.a-sta.com
reform.a-sta.com
data-explorer.riddc.brown.edu
a-sta.com
reform.a-sta.com
a-sta.com
test.a-sta.com
a-sta.com
admin.testshopping.a-sta.com
shopping.a-sta.com
test.a-sta.com
www.rpieducation.com
a-sta.com
a-sta.com
shopping.a-sta.com
shopping.a-sta.com
reform.a-sta.com
reform.a-sta.com
www.rpieducation.com
test.a-sta.com
a-sta.com
a-sta.com
getracker.cl
a-sta.com
a-sta.com
a-sta.com
admin.testshopping.a-sta.com
shopping.a-sta.com
todo.solarsail.work
a-cloud.a-sta.com
shopping.a-sta.com
a-sta.com
a-sta.com
a-sta.com
testshopping.a-sta.com
a-sta.com
testshopping.a-sta.com
a-sta.com
reform.a-sta.com
a-sta.com
www.cmgbh.com
a-sta.com
a-sta.com
test.a-sta.com
gollmann.apoly.de
shopping.a-sta.com
shopping.a-sta.com
reform.a-sta.com
a-sta.com
www.jorgejd.com
a-sta.com
reform.a-sta.com
shopping.a-sta.com
backend.shopping.a-sta.com
a-sta.com
fix-it.app
reform.a-sta.com
elshemy.site
medcanhub.cellenhealth.com
drafti.io
a-sta.com
www.geter.com.ar
dev.akses.at
verify.getherd.app
admin.shopping.a-sta.com
app.bibliaseunheroe.com
reform.a-sta.com
www.driveflow.co.uk
ire.lab.mc1global.com
a-sta.com
backend.shopping.a-sta.com
a-sta.com
link.explorebtk.com
a-sta.com
a-sta.com
a-sta.com
Certificate
The complete raw certificate details for reform.a-sta.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgISAzK9kPcIpvR6BsP6qkKr6sd8MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MjUxNzQ1MzRaFw0x ODExMjMxNzQ1MzRaMBsxGTAXBgNVBAMTEHJlZm9ybS5hLXN0YS5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC+bEYXtdOGEUSzCJZ0jbTwGPS0hfcy ya+uafeePIHlYXcoDfPBRJoFMSZ4gzSTlgmudyxfQWzEIhhWFVtBOa3bJ/sNyx1w jvYoelzPi10MvdqTEcQLuS0Tk/O/9zKYW+55UiZ5a8zNqM3S4TbsxgRQaJhwyvRR 67tQuGss08ih1GVCliOb+GhWuhSXaGpS1BJyxM5aMLer/m7ipAFKNq9h14ifHfVL RL2IloyQ0QicKrteBff/lFiF35MGKSHMXKQsIK6CTXS3ZfhxuQHvD4MvVW0urKB7 39b3qdjfa4945+W2iCuDIcSYBWQPiUMg9h2lZnAGpnmhNA+1cosTItQInUIDlSyy /oyO7uH8FRQ8NTjyPSgKF9W4UpOZEns+QZ3TY/cvGfwbdedb8hFF872PWWxpuEO0 8PtkY1KHnRyCMqbRkHu8YKJDXNBMafs1dPh0LqGT5hvapx8qXiMRHrv1/R2z/5vx R2203PhrIwv9mjA69TGrxQHrG9vW0BqZnNRcBeB2MVJMGcW5HLnrclbSZAJo0mB9 Jsf7JUNYAhdMcuivo/z7FbB64b21+0CFCq6EiAKdJdpSr3iXtCGqFnP8dsN87NG0 3H8ZktOqsMgPYGnDP2NVkxSfP1pq1IyvAMLe2+C/Tv3nGyehYU/Rpfw3sSyKMlkc RBL+CYykUBx8KQIDAQABo4IDFzCCAxMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR6 xE2waO3hv0IOadQK4WNMoiYt7TAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHJlZm9ybS5hLXN0YS5j b20wgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYG CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUH AgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9u IGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGgg dGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNy eXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AFWB 1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABZXJn4TgAAAQDAEcwRQIg Iq9rxg7iLHQAMyeyKwojbj1mhyCqNZiMLrYZFgA7bXYCIQD8QgcldwTXOfCOw7P4 3PFrNRQuaaqOoVD3BtkY2pD9qAB1ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM 9OVFR/R4AAABZXJn4VkAAAQDAEYwRAIgCee6dO5j9EVGw3bjq4/070R5YSDnXP+/ 1Yc0zESW2BoCIDFqEhS6ib1YT8MQq3cdjSNVh2CvcVMt7dGhaD02TX1gMA0GCSqG SIb3DQEBCwUAA4IBAQArdHP45MWpgkglcjbJX0+ozIIXTnfd5kGMHakBSGiRouge 71L5jFByLJxjwlmyPLYV8dkfuyYLH+UZ5E8AjRDZrN7PoKp7OpzOdZMtY+1NMdgK rTcQEG8902SUYj2ONGYWjdoh71yF0RTQeiMUS9iCvbyMorpdNBK69gtsr49ZzT3X YyiSFxTP5SwChl8gLQbVqL1101mpTIuYt0SJqrJVLvIjvHRr9YOpzkkZiT8Ha0Np /iXLsRvGPbjwxBFOQ6L0djsXM6+fG7nRN/RdKwzcSKz0HXgXmaSgTANkqjFLlaas JWJWDfDRJEPZr30xCM+Qs+COgDb0gOWgAvxLBvQO -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvmxGF7XThhFEswiWdI20 8Bj0tIX3Msmvrmn3njyB5WF3KA3zwUSaBTEmeIM0k5YJrncsX0FsxCIYVhVbQTmt 2yf7DcsdcI72KHpcz4tdDL3akxHEC7ktE5Pzv/cymFvueVImeWvMzajN0uE27MYE UGiYcMr0Ueu7ULhrLNPIodRlQpYjm/hoVroUl2hqUtQScsTOWjC3q/5u4qQBSjav YdeInx31S0S9iJaMkNEInCq7XgX3/5RYhd+TBikhzFykLCCugk10t2X4cbkB7w+D L1VtLqyge9/W96nY32uPeOfltogrgyHEmAVkD4lDIPYdpWZwBqZ5oTQPtXKLEyLU CJ1CA5Ussv6Mju7h/BUUPDU48j0oChfVuFKTmRJ7PkGd02P3Lxn8G3XnW/IRRfO9 j1lsabhDtPD7ZGNSh50cgjKm0ZB7vGCiQ1zQTGn7NXT4dC6hk+Yb2qcfKl4jER67 9f0ds/+b8UdttNz4ayML/ZowOvUxq8UB6xvb1tAamZzUXAXgdjFSTBnFuRy563JW 0mQCaNJgfSbH+yVDWAIXTHLor6P8+xWweuG9tftAhQquhIgCnSXaUq94l7QhqhZz /HbDfOzRtNx/GZLTqrDID2Bpwz9jVZMUnz9aatSMrwDC3tvgv0795xsnoWFP0aX8 N7EsijJZHEQS/gmMpFAcfCkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 278602952933719308696058308633021026846588 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-25 17:45:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-23 17:45:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reform.a-sta.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776857836060522527725368636339013640457949218701172897594181954582543692741390454526368869846679447798746712476363897828445958416851177393612588361590423315850613322543483740426045852401758241238414883698063325764092228838034863354260793428163128649444787306663753367239546177849187333155335667496376836084547177194780540978317200621079418486784565464335569336966619372005101237982205013557823866166430977165687081343602818981477916315413856832159560543112498773283520347943361069055481592689881138665728929857202196114197715601210511648940035014862547813013752835899989323285462040763126907026727970362471851709188999621040580596694682787980644997449769859843987140190173924761266082692627584049085581268956370408126322418392143626984136804771590744982009976069954024684459579260310150010747656335364290530124397086890944099383419235580432460730449098510962410720940023891793836354320638512525957562399243683800045750009576812663293276996574709778438273846324330432760449521561739469061726950085388676969539937366803608247586682477796232521801431400681235059387832149716327397981071984513496849166354682875103570780850719392526225429496525286848045824145512390814703978611508991845992519450558027989180152863570954861690914856533033 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7ac44db068ede1bf420e69d40ae1634ca2262ded . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reform.a-sta.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001657267e1380000040300473045022022af6bc60ee22c74003327b22b0a236e3d668720aa35988c2eb61916003b6d76022100fc4207257704d739f08ec3b3f8dcf16b35142e69aa8ea150f706d918da90fda8007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001657267e1590000040300463044022009e7ba74ee63f44546c376e3ab8ff4ef44796120e75cffbfd58734cc4496d81a0220316a1214ba89bd584fc310ab771d8d23558760af71532dedd1a1683d364d7d60 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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