www.tecnimont.it
Issued by R3
About this certificate
This digital certificate with serial number 03:88:0d:73:6b:e0:0f:2f:5a:a8:8c:c7:46:51:01:31:00:57 was issued on by Let's Encrypt.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.tecnimont.it
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:88:0d:73:6b:e0:0f:2f:5a:a8:8c:c7:46:51:01:31:00:57Serial Number (int): 307633138962581941899122645280742458851415
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 15:d8:22:aa:ea:7d:5f:c1:7f:33:a1:e4:e1:bc:49:1d:49:7c:0e:9d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): a9:4e:73:14:99:5a:ed:80:aa:0e:66:08:f2:c2:52:42:db:d8:a3:d4
Fingerprint (sha256): 3d:0f:e6:1a:0b:6b:79:90:89:92:56:13:a3:cf:76:15:fe:13:b4:32:ae:32:06:cd:48:27:de:90:69:8b:55:32
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.tecnimont.it
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.tecnimont.it
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kt-met.com
mairetecnimont.com
met-development.com
mta-sts.external.met-development.com
mta-sts.met-development.com
tecnimont.it
www.kt-met.com
www.mairetecnimont.com
www.met-development.com
www.tecnimont.it
mairetecnimont.com
met-development.com
mta-sts.external.met-development.com
mta-sts.met-development.com
tecnimont.it
www.kt-met.com
www.mairetecnimont.com
www.met-development.com
www.tecnimont.it
Other certificates including the domain name tecnimont.it
(limited to 100 certificates)
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
itmi-exp-edge01.mairetecnimont.it
*.tecnimont.it
hybrid.mairetecnimont.com
www.tecnimont.it
docweb.tecnimont.it
hrp.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
*.tecnimont.it
hybrid.mairetecnimont.com
*.tecnimont.it
MEQ.tecnimont.it
www.tecnimont.it
anywhere.mairetecnimont.com
hrp.tecnimont.it
www.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
hybrid.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
www.tecnimont.it
hrp.tecnimont.it
www.tecnimont.it
www.tecnimont.it
hrp.tecnimont.it
hybrid.mairetecnimont.com
hybrid.mairetecnimont.com
anywhere.mairetecnimont.com
www.mairetecnimont.com
*.tecnimont.it
www.mairetecnimont.com
sip.unify.mairetecnimont.it
www.mairetecnimont.com
hybrid.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
*.tecnimont.it
www.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
ctxgw.tecnimont.it
onemail.tecnimont.it
www.mairetecnimont.com
www.tecnimont.it
*.tecnimont.it
www.mairetecnimont.com
itmi-exp-edge01.mairetecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
itmi-exp-edge01.mairetecnimont.it
*.tecnimont.it
hybrid.mairetecnimont.com
www.tecnimont.it
docweb.tecnimont.it
hrp.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
*.tecnimont.it
hybrid.mairetecnimont.com
*.tecnimont.it
MEQ.tecnimont.it
www.tecnimont.it
anywhere.mairetecnimont.com
hrp.tecnimont.it
www.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
hybrid.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
www.tecnimont.it
hrp.tecnimont.it
www.tecnimont.it
www.tecnimont.it
hrp.tecnimont.it
hybrid.mairetecnimont.com
hybrid.mairetecnimont.com
anywhere.mairetecnimont.com
www.mairetecnimont.com
*.tecnimont.it
www.mairetecnimont.com
sip.unify.mairetecnimont.it
www.mairetecnimont.com
hybrid.mairetecnimont.com
www.mairetecnimont.com
www.mairetecnimont.com
*.tecnimont.it
www.tecnimont.it
www.tecnimont.it
www.mairetecnimont.com
ctxgw.tecnimont.it
onemail.tecnimont.it
www.mairetecnimont.com
www.tecnimont.it
*.tecnimont.it
www.mairetecnimont.com
itmi-exp-edge01.mairetecnimont.it
Certificate
The complete raw certificate details for www.tecnimont.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgISA4gNc2vgDy9aqIzHRlEBMQBXMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjEwMTMxMzE0NDVaFw0yMzAxMTExMzE0NDRaMBsxGTAXBgNVBAMT EHd3dy50ZWNuaW1vbnQuaXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1m34kEy3jhk9De19ioQ5kD69RwCRjd6Y1boj8p7opjbDrh4+9FiABwWfcKUSa OnZKNpWONS3imCmlug0DOiYFayVj5YvuwS7NVZmydOueW7G7HstHN92WtedqIKXv Y6unPh7gsMDshs+Cr/cdobamyCo7Qenuus5BQjOf9KoCQUmVNv54dPMa2oBrCfDB tGFL66otoCeFpLgFkTkjGrwlagevAMWjlMjjNDOTNjJmddA77KCMJZO/RdusiNNj IHVRdjpS7pS6r/6fs3ArAK39cune3S7nn1Ip+vr+EBS2Md3Fgalpx8MZgWns+SAF Qjf+bbh2yNGBcahsH5VsHNlnAgMBAAGjggMTMIIDDzAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFBXYIqrqfV/BfzOh5OG8SR1JfA6dMB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMIHkBgNVHREEgdwwgdmCCmt0LW1ldC5jb22CEm1haXJldGVjbmltb250LmNv bYITbWV0LWRldmVsb3BtZW50LmNvbYIkbXRhLXN0cy5leHRlcm5hbC5tZXQtZGV2 ZWxvcG1lbnQuY29tghttdGEtc3RzLm1ldC1kZXZlbG9wbWVudC5jb22CDHRlY25p bW9udC5pdIIOd3d3Lmt0LW1ldC5jb22CFnd3dy5tYWlyZXRlY25pbW9udC5jb22C F3d3dy5tZXQtZGV2ZWxvcG1lbnQuY29tghB3d3cudGVjbmltb250Lml0MEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADu AHUAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGD0bKVnwAABAMA RjBEAiBcwSNWyAI10EWnPvyLYDn/dRYb/uevhEuUrh+74J2jLAIgfR7Q/jab7A8D fdDED6J8l+UFWokX414m2FKRe4ndQ8kAdQB6MoxU2LcttiDqOOBSHumEFnAyE4VN O9IrwTpXo1LrUgAAAYPRspWpAAAEAwBGMEQCIFk/PVL4gbDYiq2gD1oe+hC0kO7F UkODPJyZnXSpCz3AAiBQeCmM7Vj06C8X6fZ5zy1sHt1+7YoDoK+9IMDo7fMhHTAN BgkqhkiG9w0BAQsFAAOCAQEAc/4p7Q6mPhvE0r67C9JEzUIBzXmW0sQe0uGcjq12 FsGABKKVqTcWUjCbDsDqEyJrTcrk8nbrhc0BeJahktAh1WggI8hYWeC4xS4+X4ZQ 99IFcyXuKB3ciHAlphyVSpg/QWtVjl7YzpFAp3qbIC9Nhx409OwfkobF+6YAWNBZ jpPRZH/7KNjiINYnVOCz3SB3lkCwAsJXwlPsZANUQQ13PLGU6+zR3l6a6PMT4UUO bcC0mjlUr1bLKdEFO1FoV1rAhq4H/DSL52OHQDUT3Pry8xa+rAM1BZY/HD069J20 OD1POG2FTJAu5SPR35pEPTYLtTRH6B5kxspKCTRyx/fVww== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Zt+JBMt44ZPQ3tfYqEO ZA+vUcAkY3emNW6I/Ke6KY2w64ePvRYgAcFn3ClEmjp2SjaVjjUt4pgppboNAzom BWslY+WL7sEuzVWZsnTrnluxux7LRzfdlrXnaiCl72Orpz4e4LDA7IbPgq/3HaG2 psgqO0Hp7rrOQUIzn/SqAkFJlTb+eHTzGtqAawnwwbRhS+uqLaAnhaS4BZE5Ixq8 JWoHrwDFo5TI4zQzkzYyZnXQO+ygjCWTv0XbrIjTYyB1UXY6Uu6Uuq/+n7NwKwCt /XLp3t0u559SKfr6/hAUtjHdxYGpacfDGYFp7PkgBUI3/m24dsjRgXGobB+VbBzZ ZwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 307633138962581941899122645280742458851415 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-13 13:14:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-11 13:14:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tecnimont.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31005061043538068510477550386699149499295977352640953038355499048793112013340603994777621324946366435899466138077367140817222020524862204189330305697775695859104419475376067685663364367720714388770663682331613924798158353866840874898363793327888687469085151750804223634312458239614789372612372529375769692861469431333514071358761831841971302047104165043567704789791998350211505711294340873092822114840999843414966632125677232717546638661989250207222501705160871865137603156594889170894130904006224737431783554988658377788956761453396867727360195742229595998852653155081805754158764224059138147180341566760180648827239 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 15d822aaea7d5fc17f33a1e4e1bc491d497c0e9d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (220 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kt-met.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mairetecnimont.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'met-development.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.external.met-development.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.met-development.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnimont.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kt-met.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mairetecnimont.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.met-development.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecnimont.it' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183d1b2959f000004030046304402205cc12356c80235d045a73efc8b6039ff75161bfee7af844b94ae1fbbe09da32c02207d1ed0fe369bec0f037dd0c40fa27c97e5055a8917e35e26d852917b89dd43c90075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000183d1b295a900000403004630440220593f3d52f881b0d88aada00f5a1efa10b490eec55243833c9c999d74a90b3dc002205078298ced58f4e82f17e9f679cf2d6c1edd7eed8a03a0afbd20c0e8edf3211d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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