bolsaideias.nersant.pt
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:f0:96:c5:93:09:38:df:47:60:9b:af:9b:b5:82:d0:68:e2 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bolsaideias.nersant.pt
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:f0:96:c5:93:09:38:df:47:60:9b:af:9b:b5:82:d0:68:e2Serial Number (int): 430317321852159952847185722176537925544162
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 2b:e2:d0:ab:c9:d3:41:7a:9f:74:bd:20:c3:ad:38:2d:e4:46:ed:40
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 3c:76:2e:0f:ef:37:23:30:5b:bb:76:f1:23:5a:c3:2f:22:22:7c:a4
Fingerprint (sha256): 3e:b0:55:d5:bd:62:df:d5:e4:65:4f:fd:88:7f:d8:23:d0:59:77:45:26:02:0c:eb:ca:14:11:0a:01:f7:03:73
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate bolsaideias.nersant.pt
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bolsaideias.nersant.pt
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bolsaideias.incubarmaisleziria.nersant.pt
bolsaideias.nersant.pt
business.nersant.pt
www.business.nersant.pt
bolsaideias.nersant.pt
business.nersant.pt
www.business.nersant.pt
Other certificates including the domain name nersant.pt
(limited to 100 certificates)
startup-santarem.nersant.pt
negocios.nersant.pt
nersant.pt
sitiodoempreendedor.nersant.pt
truckr.me
incubarmaisleziria.nersant.pt
ribacertifica.nersant.pt
gesinov.nersant.pt
diogo-santos.com
www.tcff.co
nersant.pt
stg.propo.fm
startup-santarem.nersant.pt
moodle.nersant.pt
startup-ourem.nersant.pt
minimoly.com
negocios.nersant.pt
www.father.beer
ribacertifica.nersant.pt
inqueritos.nersant.pt
www.business.nersant.pt
incubarmaisleziria.nersant.pt
repositorio.nersant.pt
www.nfd2019.live
inqueritos.nersant.pt
startup-ourem.nersant.pt
ribacertifica.nersant.pt
www.tombscoaching.co.uk
business.nersant.pt
bioware.nersant.pt
incubarmaisleziria.nersant.pt
sitiodoempreendedor.nersant.pt
nersant.pt
gesinov.nersant.pt
ribacertifica.nersant.pt
bolsaideias.nersant.pt
app.fruitful.ag
inovpme.nersant.pt
nersant.pt
ribacertifica.nersant.pt
ribacertifica.nersant.pt
business2021.nersant.pt
www.nfd2019.live
ribacertifica.nersant.pt
moodle.nersant.pt
bolsaideias.nersant.pt
gesinov.nersant.pt
negocios.nersant.pt
moodle.nersant.pt
inovpme.nersant.pt
inqueritos.nersant.pt
demo.expressquote.mx
gesinov.nersant.pt
admin.jarous.com
business.nersant.pt
inqueritos.nersant.pt
moodle.nersant.pt
bioware.nersant.pt
moodle.nersant.pt
bioware.nersant.pt
gesinov.nersant.pt
nersant.pt
www.sgp2019.com
incubarmaisleziria.nersant.pt
ribacertifica.nersant.pt
repositorio.nersant.pt
ribacertifica.nersant.pt
ribacertifica.nersant.pt
nersant.pt
www.strassen.co
bolsaideias.nersant.pt
nersant.pt
ribacertifica.nersant.pt
gocab.com.mx
startup-santarem.nersant.pt
inovpme.nersant.pt
inqueritos.nersant.pt
admin.digme.dk
bolsaideias.nersant.pt
david.govea.tech
leziria-sustentavel.nersant.pt
incubarmaisleziria.nersant.pt
nersant.pt
startup-ourem.nersant.pt
repositorio.nersant.pt
demo.expressquote.mx
admin.sparta.sportkit.app
startup-santarem.nersant.pt
bolsaideias.nersant.pt
www.father.beer
nersant.pt
nersant.pt
bioware.nersant.pt
staging.xuxu.fund
backend.hirmer-hospitality.de
ribacertifica.nersant.pt
gesinov.nersant.pt
nersant.pt
ribacertifica.nersant.pt
ribacertifica.nersant.pt
negocios.nersant.pt
nersant.pt
sitiodoempreendedor.nersant.pt
truckr.me
incubarmaisleziria.nersant.pt
ribacertifica.nersant.pt
gesinov.nersant.pt
diogo-santos.com
www.tcff.co
nersant.pt
stg.propo.fm
startup-santarem.nersant.pt
moodle.nersant.pt
startup-ourem.nersant.pt
minimoly.com
negocios.nersant.pt
www.father.beer
ribacertifica.nersant.pt
inqueritos.nersant.pt
www.business.nersant.pt
incubarmaisleziria.nersant.pt
repositorio.nersant.pt
www.nfd2019.live
inqueritos.nersant.pt
startup-ourem.nersant.pt
ribacertifica.nersant.pt
www.tombscoaching.co.uk
business.nersant.pt
bioware.nersant.pt
incubarmaisleziria.nersant.pt
sitiodoempreendedor.nersant.pt
nersant.pt
gesinov.nersant.pt
ribacertifica.nersant.pt
bolsaideias.nersant.pt
app.fruitful.ag
inovpme.nersant.pt
nersant.pt
ribacertifica.nersant.pt
ribacertifica.nersant.pt
business2021.nersant.pt
www.nfd2019.live
ribacertifica.nersant.pt
moodle.nersant.pt
bolsaideias.nersant.pt
gesinov.nersant.pt
negocios.nersant.pt
moodle.nersant.pt
inovpme.nersant.pt
inqueritos.nersant.pt
demo.expressquote.mx
gesinov.nersant.pt
admin.jarous.com
business.nersant.pt
inqueritos.nersant.pt
moodle.nersant.pt
bioware.nersant.pt
moodle.nersant.pt
bioware.nersant.pt
gesinov.nersant.pt
nersant.pt
www.sgp2019.com
incubarmaisleziria.nersant.pt
ribacertifica.nersant.pt
repositorio.nersant.pt
ribacertifica.nersant.pt
ribacertifica.nersant.pt
nersant.pt
www.strassen.co
bolsaideias.nersant.pt
nersant.pt
ribacertifica.nersant.pt
gocab.com.mx
startup-santarem.nersant.pt
inovpme.nersant.pt
inqueritos.nersant.pt
admin.digme.dk
bolsaideias.nersant.pt
david.govea.tech
leziria-sustentavel.nersant.pt
incubarmaisleziria.nersant.pt
nersant.pt
startup-ourem.nersant.pt
repositorio.nersant.pt
demo.expressquote.mx
admin.sparta.sportkit.app
startup-santarem.nersant.pt
bolsaideias.nersant.pt
www.father.beer
nersant.pt
nersant.pt
bioware.nersant.pt
staging.xuxu.fund
backend.hirmer-hospitality.de
ribacertifica.nersant.pt
gesinov.nersant.pt
nersant.pt
ribacertifica.nersant.pt
ribacertifica.nersant.pt
Certificate
The complete raw certificate details for bolsaideias.nersant.pt in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgISBPCWxZMJON9HYJuvm7WC0GjiMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MTUyMDU1MjZaFw0x OTExMTMyMDU1MjZaMCExHzAdBgNVBAMTFmJvbHNhaWRlaWFzLm5lcnNhbnQucHQw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGF0uBr08xkAqoqcuZ9MfP Nx3MDry5jfydPpImnvEEyHklFtQ9K0PwfP9t2StxpChBbTFyIlcN8ZBAKNUqKMPD S7UQVCBeuG7pGO5Qj/dDy0tCYiqqYVhQ6uXVsquVpLpB9/RIbVkAbdbq8aFRLfu+ edpMtca4Vb7S7nsqTZt4qMFR3a3dAghZXHPP3eFnCuCP0CnKs/wd4gXOPVnallzD rgMhJHnHJNZ/E8zmYafLIqqJAUFzPjeJIAIUnL7rmWBsvBKfkx+bPjKcCZYl/U7T /xqQZq47IUZs1UZJYMhE2hGE8t99XkU/lfMNjO5d774W8G12FhCpmdORrmoadOn/ AgMBAAGjggLFMIICwTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCvi0KvJ00F6n3S9 IMOtOC3kRu1AMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wegYDVR0RBHMwcYIpYm9sc2FpZGVpYXMuaW5jdWJhcm1haXNs ZXppcmlhLm5lcnNhbnQucHSCFmJvbHNhaWRlaWFzLm5lcnNhbnQucHSCE2J1c2lu ZXNzLm5lcnNhbnQucHSCF3d3dy5idXNpbmVzcy5uZXJzYW50LnB0MEwGA1UdIARF MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6 Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA 4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFsl0dH8wAABAMARzBF AiB+xEiETEgh6/zyzgsRVjOg4alY50AQB9DF4hgAKCgjqwIhAKQt8OCwQx5N6kC5 Nj809biaTjqOMd0r5NUUPwLC7eN4AHcAKTxRllTIOWW6qlD8WAfUt2+/WHopctyk wwz05UVH9HgAAAFsl0dJ2QAABAMASDBGAiEAwSb8AG5YqJWHkS8FvGTLZ/6fnjZ0 3+YeDN0wGn8WX5ACIQDS8VolvrA8Zo+QN6XT7MDAfdDG6l50cGsCaNZHRUiumjAN BgkqhkiG9w0BAQsFAAOCAQEAXNNn6SnGLlfrnQH8p8ONqQphjoDBgFIJDHo0MKRz gNT7rKInNDo5+jc04vpULLi//auzBLobLVCrMoBsLg6q01weTLoceVWDpby5yUCc SPpW61L+WRvnkAJs2njqArMnjgNvmJSE4tRqKz0l1KzdTbSri0pdtWvgS2sCcyZr GZ+l57uyCUaLeqaxGOOmcmVnaVC5C/5gcv4nCvWvS3CK8fYAFJOREy1OyfPiKCGI CjbcNBWG0OF/6SBz1j0UNR7eZnJvCbPPucOsf3icWj+0cMLSbWYdwwv4N/HAg3/M VaBvXBI+q3s/ctDDj2TGxpBDrEXGlPIsjdMU6pReep9tfA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhdLga9PMZAKqKnLmfTH zzcdzA68uY38nT6SJp7xBMh5JRbUPStD8Hz/bdkrcaQoQW0xciJXDfGQQCjVKijD w0u1EFQgXrhu6RjuUI/3Q8tLQmIqqmFYUOrl1bKrlaS6Qff0SG1ZAG3W6vGhUS37 vnnaTLXGuFW+0u57Kk2beKjBUd2t3QIIWVxzz93hZwrgj9ApyrP8HeIFzj1Z2pZc w64DISR5xyTWfxPM5mGnyyKqiQFBcz43iSACFJy+65lgbLwSn5Mfmz4ynAmWJf1O 0/8akGauOyFGbNVGSWDIRNoRhPLffV5FP5XzDYzuXe++FvBtdhYQqZnTka5qGnTp /wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 430317321852159952847185722176537925544162 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 20:55:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 20:55:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bolsaideias.nersant.pt' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25006671550065373728571424575330187566214291984991975042560525621532932032649571964313971329901573827883276080290281861144110869448747992807789517877212181284828857104242287481346456972003091271019775160206267668089275843566284671551063114981560383939161035607330737126538574637544054613194567678753490793498049559241551015425097150045061618932071612256092179310712745712006348827851816217505018379019970618737982417344446556942603984265850425495003802895724157354712107155991017287213354320742483056973850549761911366501788469878784500520341672140071239976404505192556859852014685673111111237234195974417585892813311 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2be2d0abc9d3417a9f74bd20c3ad382de446ed40 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolsaideias.incubarmaisleziria.nersant.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolsaideias.nersant.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.nersant.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.nersant.pt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c974747f3000004030047304502207ec448844c4821ebfcf2ce0b115633a0e1a958e7401007d0c5e21800282823ab022100a42df0e0b0431e4dea40b9363f34f5b89a4e3a8e31dd2be4d5143f02c2ede378007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c974749d90000040300483046022100c126fc006e58a89587912f05bc64cb67fe9f9e3674dfe61e0cdd301a7f165f90022100d2f15a25beb03c668f9037a5d3ecc0c07dd0c6ea5e74706b0268d6474548ae9a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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