md.nuri.sch.id
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d6:f4:a7:c4:51:35:55:d1:bd:d4:cf:ec:bc:ec:3d:3e:41 was issued on by Let's Encrypt.
With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=md.nuri.sch.id
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d6:f4:a7:c4:51:35:55:d1:bd:d4:cf:ec:bc:ec:3d:3e:41Serial Number (int): 334482487042694735844310735269691679129153
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 70:b0:6d:07:a8:a0:f1:e9:b7:ed:9c:94:ac:45:2d:b7:c8:db:c3:58
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): da:d5:3e:eb:33:0c:07:e7:a2:4e:d6:3a:57:b4:41:5e:c6:02:72:a5
Fingerprint (sha256): 44:35:64:31:ed:35:86:4c:80:0a:25:b6:c5:bd:a1:0d:4d:95:f8:07:72:6f:d2:36:69:91:6f:72:66:f6:99:3b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate md.nuri.sch.id
14
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for md.nuri.sch.id
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
md.nuri.sch.id
mi.nuri.sch.id
mt.nuri.sch.id
mts.nuri.sch.id
paud.nuri.sch.id
ra.nuri.sch.id
smk.nuri.sch.id
www.md.nuri.sch.id
www.mi.nuri.sch.id
www.mt.nuri.sch.id
www.mts.nuri.sch.id
www.paud.nuri.sch.id
www.ra.nuri.sch.id
www.smk.nuri.sch.id
mi.nuri.sch.id
mt.nuri.sch.id
mts.nuri.sch.id
paud.nuri.sch.id
ra.nuri.sch.id
smk.nuri.sch.id
www.md.nuri.sch.id
www.mi.nuri.sch.id
www.mt.nuri.sch.id
www.mts.nuri.sch.id
www.paud.nuri.sch.id
www.ra.nuri.sch.id
www.smk.nuri.sch.id
Other certificates including the domain name nuri.sch.id
(limited to 100 certificates)
nuri.sch.id
pkbm.nuri.sch.id
md.nuri.sch.id
nuri.sch.id
pkbm.nuri.sch.id
mi.nuri.sch.id
md.nuri.sch.id
pkbm.nuri.sch.id
pkbm.nuri.sch.id
md.nuri.sch.id
md.nuri.sch.id
nuri.sch.id
nuri.sch.id
nuri.sch.id
nuri.sch.id
nulenteng.com
keprisatu.com
nuri.sch.id
md.nuri.sch.id
humasprotokolsitubondo.com
nuri.sch.id
pkbm.nuri.sch.id
md.nuri.sch.id
nuri.sch.id
pkbm.nuri.sch.id
md.nuri.sch.id
pkbm.nuri.sch.id
pkbm.nuri.sch.id
pkbm.nuri.sch.id
md.nuri.sch.id
alimron.sch.id
md.nuri.sch.id
nuri.sch.id
md.nuri.sch.id
md.nuri.sch.id
pkbm.nuri.sch.id
md.nuri.sch.id
md.nuri.sch.id
nuri.sch.id
md.nuri.sch.id
pkbm.nuri.sch.id
nuri.sch.id
keprisatu.com
nuri.sch.id
pkbm.nuri.sch.id
md.nuri.sch.id
nuri.sch.id
pkbm.nuri.sch.id
mi.nuri.sch.id
md.nuri.sch.id
pkbm.nuri.sch.id
pkbm.nuri.sch.id
md.nuri.sch.id
md.nuri.sch.id
nuri.sch.id
nuri.sch.id
nuri.sch.id
nuri.sch.id
nulenteng.com
keprisatu.com
nuri.sch.id
md.nuri.sch.id
humasprotokolsitubondo.com
nuri.sch.id
pkbm.nuri.sch.id
md.nuri.sch.id
nuri.sch.id
pkbm.nuri.sch.id
md.nuri.sch.id
pkbm.nuri.sch.id
pkbm.nuri.sch.id
pkbm.nuri.sch.id
md.nuri.sch.id
alimron.sch.id
md.nuri.sch.id
nuri.sch.id
md.nuri.sch.id
md.nuri.sch.id
pkbm.nuri.sch.id
md.nuri.sch.id
md.nuri.sch.id
nuri.sch.id
md.nuri.sch.id
pkbm.nuri.sch.id
nuri.sch.id
keprisatu.com
nuri.sch.id
Certificate
The complete raw certificate details for md.nuri.sch.id in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgISA9b0p8RRNVXRvdTP7LzsPT5BMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MDExODQ2NTRaFw0x OTA3MzAxODQ2NTRaMBkxFzAVBgNVBAMTDm1kLm51cmkuc2NoLmlkMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/siPHx7e9mR+6mdDU26APRa9oJdMOgZ SFkqEzEIfTusQmFWdqi+YjtqrdjRzC4AOhOTnsBEZeNSnazpZevOj0nMvODpfBsy hHsCqzRRFcVyYm2yBvM6VtrvCdL3mYri7ZCGN/MSw6NFtrhrKw3ddwZ7Rq04lpMv fBW1lglOelB3SqVRUQT4jSN5Au7Atyq96mD0EWLGDFSQb/e1OQrFPMkOWBqhsoKR 00lCT4Xf7HVbMtHYkGNz2yHTOlHBuqm057eqeDUbFVhX+/2Wpv/4Pp3LaWrk1p5L ruCIaIEPb5WKnXFxh4433DKfnnyoxquM/OTGPCUIQsk6IXbFXXaKKwIDAQABo4ID XTCCA1kwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRwsG0HqKDx6bftnJSsRS23yNvD WDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMIIBEQYDVR0RBIIBCDCCAQSCDm1kLm51cmkuc2NoLmlkgg5taS5udXJpLnNj aC5pZIIObXQubnVyaS5zY2guaWSCD210cy5udXJpLnNjaC5pZIIQcGF1ZC5udXJp LnNjaC5pZIIOcmEubnVyaS5zY2guaWSCD3Ntay5udXJpLnNjaC5pZIISd3d3Lm1k Lm51cmkuc2NoLmlkghJ3d3cubWkubnVyaS5zY2guaWSCEnd3dy5tdC5udXJpLnNj aC5pZIITd3d3Lm10cy5udXJpLnNjaC5pZIIUd3d3LnBhdWQubnVyaS5zY2guaWSC End3dy5yYS5udXJpLnNjaC5pZIITd3d3LnNtay5udXJpLnNjaC5pZDBMBgNVHSAE RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1 AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABanTvggIAAAQDAEYw RAIgI1lGKhMeWY5AxmfzclSGNqbcdX7AOuYQulxF8ZsVw08CIFjibG+ZBsI/L6BL OF/EfeaUUSFTbMekYNwQoA5hx8n/AHcAKTxRllTIOWW6qlD8WAfUt2+/WHopctyk wwz05UVH9HgAAAFqdO+CMgAABAMASDBGAiEA9+4QKpNrLmZtr6q6Q4Z9ppf56nx+ sMUhk9kvN3hdGLsCIQCNjbP7uDM7ameZOnq9c5b+sO+0e20nVRb4fLDQ+H/dHzAN BgkqhkiG9w0BAQsFAAOCAQEATzBv1ljwDr5T2HxgXY2uZMlMcTRvUDgH04jsKEz/ uRnlbfrTG579wO790x8GuWzj5sH2OYTZNWJLGgsJQSxXXJsgPDLT+Tpqvla8W2Mx O6y9dkU1KyLuKtc6HHnGk1kkl6ETBC0iErLpmXi5bGIEF6mYwI52SPh/otRfxh5o VuPU3UzyS7DmjS8cbNKkkxGuZug2vOrUrfrECodHGN9Cc/58NLC9V8ZTshrcn0S8 GL2WrjkyVMVh5Xk6A/j+ONMGJaxgGayJupcUbR7taXO2rW7c9/IhNr3pcDcOD6kd WwA6eu25bVsw2l5128xdzWqW4iqgGiSIOwoin/k4Nea9KQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/siPHx7e9mR+6mdDU26 APRa9oJdMOgZSFkqEzEIfTusQmFWdqi+YjtqrdjRzC4AOhOTnsBEZeNSnazpZevO j0nMvODpfBsyhHsCqzRRFcVyYm2yBvM6VtrvCdL3mYri7ZCGN/MSw6NFtrhrKw3d dwZ7Rq04lpMvfBW1lglOelB3SqVRUQT4jSN5Au7Atyq96mD0EWLGDFSQb/e1OQrF PMkOWBqhsoKR00lCT4Xf7HVbMtHYkGNz2yHTOlHBuqm057eqeDUbFVhX+/2Wpv/4 Pp3LaWrk1p5LruCIaIEPb5WKnXFxh4433DKfnnyoxquM/OTGPCUIQsk6IXbFXXaK KwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 334482487042694735844310735269691679129153 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 18:46:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 18:46:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'md.nuri.sch.id' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19185822710353886234761288495909315871573936140566916376634856602025589629136324781953522611228471863857503905261553356392789569735396666992141144867217505279776421935945838184049645770393935048062829883784797582147951642837772459634281775944575062437179973873317390010998534255902872573179722657041033637848448458487507165686496467457207530302723362969890854747194123860014470108438023557566414670097218747429331526901948519169890211142820562006647752890698526761839781202507072311962230702875894266517250147364872462015081127238388771111124398255774501045617000429663330946528658424343779876331413901561141329824299 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 70b06d07a8a0f1e9b7ed9c94ac452db7c8dbc358 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'md.nuri.sch.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.nuri.sch.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mt.nuri.sch.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mts.nuri.sch.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paud.nuri.sch.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra.nuri.sch.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smk.nuri.sch.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.md.nuri.sch.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mi.nuri.sch.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mt.nuri.sch.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mts.nuri.sch.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paud.nuri.sch.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ra.nuri.sch.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smk.nuri.sch.id' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a74ef8202000004030046304402202359462a131e598e40c667f372548636a6dc757ec03ae610ba5c45f19b15c34f022058e26c6f9906c23f2fa04b385fc47de6945121536cc7a460dc10a00e61c7c9ff007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a74ef82320000040300483046022100f7ee102a936b2e666dafaaba43867da697f9ea7c7eb0c52193d92f37785d18bb0221008d8db3fbb8333b6a67993a7abd7396feb0efb47b6d275516f87cb0d0f87fdd1f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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