jd.ee
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:c3:7a:08:1f:5c:5e:f0:5b:fa:e4:17:bc:49:76:d8:23:08 was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=jd.ee
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c3:7a:08:1f:5c:5e:f0:5b:fa:e4:17:bc:49:76:d8:23:08Serial Number (int): 327854127334797439162342527582504442405640
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4b:36:20:05:84:35:9a:ad:71:98:93:c7:2a:89:d3:c4:a0:94:f0:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ba:ee:25:db:38:7d:c3:f0:2f:e1:b6:a0:d3:1b:4d:67:7f:fd:b4:27
Fingerprint (sha256): 42:a7:ce:65:1a:69:cb:13:11:f5:73:8b:9b:37:7d:53:ba:01:9b:34:3d:f1:88:3f:11:45:98:14:31:14:8e:5c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate jd.ee
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for jd.ee
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.jd.ee
cpanel.jd.ee
jd.ee
mail.jd.ee
webdisk.jd.ee
webmail.jd.ee
www.jd.ee
cpanel.jd.ee
jd.ee
mail.jd.ee
webdisk.jd.ee
webmail.jd.ee
www.jd.ee
Other certificates including the domain name jd.ee
(limited to 100 certificates)
www.static.jd.ee
www.klient.jd.ee
www.static.jd.ee
klient.jd.ee
jd.ee
*.jd.ee
vunts.jd.ee
*.jd.ee
tele2.jd.ee
jd.ee
vunts.jd.ee
www.static.jd.ee
facebook.jd.ee
*.jd.ee
vunts.jd.ee
jd.ee
www.klient.jd.ee
facebook.jd.ee
facebook.jd.ee
facebook.jd.ee
www.tele2.jd.ee
jd.ee
*.jd.ee
tele2.jd.ee
static.jd.ee
www.klient.jd.ee
jd.ee
facebook.jd.ee
klient.jd.ee
www.static.jd.ee
jd.ee
jd.ee
klient.jd.ee
*.jd.ee
klient.jd.ee
jd.ee
jd.ee
www.klient.jd.ee
jd.ee
facebook.jd.ee
static.jd.ee
klient.jd.ee
static.jd.ee
jd.ee
static.jd.ee
jd.ee
cpcalendars.jd.ee
www.static.jd.ee
vunts.jd.ee
facebook.jd.ee
facebook.jd.ee
klient.jd.ee
tele2.jd.ee
www.static.jd.ee
*.jd.ee
jd.ee
jd.ee
www.static.jd.ee
klient.jd.ee
jd.ee
jd.ee
www.just24.jd.ee
www.jd.ee
www.just24.jd.ee
*.jd.ee
jd.ee
jd.ee
s2.jd.ee
klient.jd.ee
facebook.jd.ee
tele2.jd.ee
facebook.jd.ee
klient.jd.ee
tele2.jd.ee
static.jd.ee
www.vunts.jd.ee
www.facebook.jd.ee
vunts.jd.ee
klient.jd.ee
klient.jd.ee
vunts.jd.ee
vunts.jd.ee
*.jd.ee
vunts.jd.ee
vunts.jd.ee
*.jd.ee
tele2.jd.ee
static.jd.ee
vunts.jd.ee
www.klient.jd.ee
jd.ee
www.tele2.jd.ee
*.jd.ee
www.static.jd.ee
jd.ee
klient.jd.ee
www.static.jd.ee
www.klient.jd.ee
facebook.jd.ee
klient.jd.ee
www.klient.jd.ee
www.static.jd.ee
klient.jd.ee
jd.ee
*.jd.ee
vunts.jd.ee
*.jd.ee
tele2.jd.ee
jd.ee
vunts.jd.ee
www.static.jd.ee
facebook.jd.ee
*.jd.ee
vunts.jd.ee
jd.ee
www.klient.jd.ee
facebook.jd.ee
facebook.jd.ee
facebook.jd.ee
www.tele2.jd.ee
jd.ee
*.jd.ee
tele2.jd.ee
static.jd.ee
www.klient.jd.ee
jd.ee
facebook.jd.ee
klient.jd.ee
www.static.jd.ee
jd.ee
jd.ee
klient.jd.ee
*.jd.ee
klient.jd.ee
jd.ee
jd.ee
www.klient.jd.ee
jd.ee
facebook.jd.ee
static.jd.ee
klient.jd.ee
static.jd.ee
jd.ee
static.jd.ee
jd.ee
cpcalendars.jd.ee
www.static.jd.ee
vunts.jd.ee
facebook.jd.ee
facebook.jd.ee
klient.jd.ee
tele2.jd.ee
www.static.jd.ee
*.jd.ee
jd.ee
jd.ee
www.static.jd.ee
klient.jd.ee
jd.ee
jd.ee
www.just24.jd.ee
www.jd.ee
www.just24.jd.ee
*.jd.ee
jd.ee
jd.ee
s2.jd.ee
klient.jd.ee
facebook.jd.ee
tele2.jd.ee
facebook.jd.ee
klient.jd.ee
tele2.jd.ee
static.jd.ee
www.vunts.jd.ee
www.facebook.jd.ee
vunts.jd.ee
klient.jd.ee
klient.jd.ee
vunts.jd.ee
vunts.jd.ee
*.jd.ee
vunts.jd.ee
vunts.jd.ee
*.jd.ee
tele2.jd.ee
static.jd.ee
vunts.jd.ee
www.klient.jd.ee
jd.ee
www.tele2.jd.ee
*.jd.ee
www.static.jd.ee
jd.ee
klient.jd.ee
www.static.jd.ee
www.klient.jd.ee
facebook.jd.ee
klient.jd.ee
Certificate
The complete raw certificate details for jd.ee in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISA8N6CB9cXvBb+uQXvEl22CMIMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MjIwMTI4MjFaFw0x OTA5MjAwMTI4MjFaMBAxDjAMBgNVBAMTBWpkLmVlMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAqKErhRuxeK5tqSL+IMmOs/oXefjV5BUXNmlOIARvqTJJ 1YYPQvof2OFtR/5Q2Wehk14Slf+8Bu4K/lLZvyyrGssr3Qo7RW8NlnPunOQhy+Ew pK4dfQlP2J5mYq/eS/TOMlmqJzk5jLPblaTHmleUnBEvc9Y9jPHwD3y1ohJhByps z9jvH9QquoBcWqmvZOkItHLNfydJgRzPYShFDsrEwcWSzEUPYaUfP1QVLNzdS4E/ 0YXDezZ4k8rk4WGB9XLCg1WdUbUtp3Nh2yD20z9eTefEIFj90ayWZ9gm1qs8sZGp FeimnsBDpDff5JKCJa2RtCFhvta3MVpOD7hXVYYwRQIDAQABo4ICsTCCAq0wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBRLNiAFhDWarXGYk8cqidPEoJTw+jAfBgNVHSME GDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYB BQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYB BQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMGcGA1Ud EQRgMF6CEmF1dG9kaXNjb3Zlci5qZC5lZYIMY3BhbmVsLmpkLmVlggVqZC5lZYIK bWFpbC5qZC5lZYINd2ViZGlzay5qZC5lZYINd2VibWFpbC5qZC5lZYIJd3d3Lmpk LmVlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIE AgSB9QSB8gDwAHcAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFr fQNf6AAABAMASDBGAiEAlEI+r96UABIIYxFf+Nw4fphEJVvZJc73/i8dqi4D/fQC IQCrV7FHH52SYla63j4pLsqz/qq5PEmRPaSWXDMcKvb2PAB1ACk8UZZUyDlluqpQ /FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABa30DYfoAAAQDAEYwRAIgCvDC/87PiFZt g/jcCQC3avJnPcqUPEuCF5Fk4xnATBsCIB9BIIedZbmVgIuoCHemsbyLTX+gw1yI R7F442EWSKr1MA0GCSqGSIb3DQEBCwUAA4IBAQB0MDMoYXZjziconPtbPBqHat8s 7exzIqWUy9Dh+FF7j/7INmwyGTM/n5istxEuXabjSlXCPboCTjQOZkx+yAzBb4H3 PJLHpBG7gUhEOg6bAjFd/sss4/PX0Q/4fOI6Mv1AhMVRoodKylMBt7tZj0gotixP dt09laBVh433I+LjWb82grCD5WfGalF2CNS9Cm/MrI6E27PCm5c0r05prsjLOpdP 0YhZuTzwy8i1rNSMme1Lh0L+UCG9hnquZUO7vicUWPp48+Ez6yB3yCBYOt8ioGSN q+7YdH28/5Y6WV4Q7fBDMelhTmvw2nwI2LaDXgG8B3AUY3936JcvVyrhRfCm -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKErhRuxeK5tqSL+IMmO s/oXefjV5BUXNmlOIARvqTJJ1YYPQvof2OFtR/5Q2Wehk14Slf+8Bu4K/lLZvyyr Gssr3Qo7RW8NlnPunOQhy+EwpK4dfQlP2J5mYq/eS/TOMlmqJzk5jLPblaTHmleU nBEvc9Y9jPHwD3y1ohJhBypsz9jvH9QquoBcWqmvZOkItHLNfydJgRzPYShFDsrE wcWSzEUPYaUfP1QVLNzdS4E/0YXDezZ4k8rk4WGB9XLCg1WdUbUtp3Nh2yD20z9e TefEIFj90ayWZ9gm1qs8sZGpFeimnsBDpDff5JKCJa2RtCFhvta3MVpOD7hXVYYw RQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 327854127334797439162342527582504442405640 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-22 01:28:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-20 01:28:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jd.ee' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21287511123315837624951836736169392931822585895823294497434068658041197688591448513816948325464392081686982574230084265661949409375246534799748557883671925237518511346199741502993237168963003676268534896487974649322462382903767848286874728694443999911218989146948367622766314818879101339565018236041739139733074698865624470585225895252476683782320317873127672759916398530552439874394430119667745212886298660694415100912443803560227771840972047157963675297888459546698914036315698726098832995143794669930001674992003254197262125086709869973033369643498777080824004675976421096192872068388794612890505015609614997532741 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4b36200584359aad719893c72a89d3c4a094f0fa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.jd.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.jd.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jd.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.jd.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.jd.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.jd.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jd.ee' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b7d035fe8000004030048304602210094423eafde9400120863115ff8dc387e9844255bd925cef7fe2f1daa2e03fdf4022100ab57b1471f9d926256bade3e292ecab3feaab93c49913da4965c331c2af6f63c007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b7d0361fa000004030046304402200af0c2ffcecf88566d83f8dc0900b76af2673dca943c4b82179164e319c04c1b02201f4120879d65b995808ba80877a6b1bc8b4d7fa0c35c8847b178e3611648aaf5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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