darkink.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:5b:cb:f6:70:b3:64:63:b7:9e:e3:cc:1d:97:68:e0:2d:0c was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=darkink.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:5b:cb:f6:70:b3:64:63:b7:9e:e3:cc:1d:97:68:e0:2d:0cSerial Number (int): 379685951990860710002261525344321917693196
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 4a:c6:c3:01:61:af:16:06:f1:0b:05:71:f8:ae:c1:b7:0d:ee:c7:0c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): fd:8c:08:f4:7e:24:a6:d2:c2:eb:14:dd:e5:24:ca:63:ff:87:2a:bd
Fingerprint (sha256): 49:fc:be:a6:23:92:85:c1:90:59:a0:6f:84:c0:db:82:00:99:40:68:91:9d:f3:1d:24:1e:85:a5:88:e6:15:0e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate darkink.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for darkink.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
darkink.ch
www.darkink.ch
www.darkink.ch
Other certificates including the domain name darkink.ch
(limited to 100 certificates)
cloud.darkink.ch
shipyard.darkink.ch
mail.darkink.ch
drone-ci.darkink.ch
darkink.ch
darkink.ch
darkink.ch
office.darkink.ch
docker-registry.darkink.ch
darkink.ch
darkink.ch
imap.darkink.ch
imap.darkink.ch
drone-ci.darkink.ch
darkink.ch
darkink.ch
mail.darkink.ch
bitwarden.darkink.ch
drone-ci.darkink.ch
drone-ci.darkink.ch
redmine.darkink.ch
cloud.darkink.ch
darkink.ch
drone-ci.darkink.ch
darkink.ch
redmine.darkink.ch
darkink.ch
mail.darkink.ch
redmine.darkink.ch
cloud.darkink.ch
darkink.ch
shipyard.darkink.ch
darkink.ch
redmine.darkink.ch
drone-ci.darkink.ch
bitwarden.darkink.ch
darkink.ch
cloud.darkink.ch
cloud.darkink.ch
drone-ci.darkink.ch
imap.darkink.ch
mail.darkink.ch
cloud.darkink.ch
cloud.darkink.ch
bitwarden.darkink.ch
darkink.ch
shipyard.darkink.ch
darkink.ch
smtp.darkink.ch
darkink.ch
isp.darkink.ch
mail.darkink.ch
redmine.darkink.ch
cloud.darkink.ch
drone-ci.darkink.ch
shipyard.darkink.ch
isp.darkink.ch
darkink.ch
smtp.darkink.ch
darkink.ch
office.darkink.ch
darkink.ch
cloud.darkink.ch
office.darkink.ch
darkink.ch
drone-ci.darkink.ch
shipyard.darkink.ch
darkink.ch
imap.darkink.ch
darkink.ch
imap.darkink.ch
office.darkink.ch
redmine.darkink.ch
redmine.darkink.ch
shipyard.darkink.ch
shipyard.darkink.ch
mail.darkink.ch
isp.darkink.ch
darkink.ch
redmine.darkink.ch
smtp.darkink.ch
smtp.darkink.ch
isp.darkink.ch
darkink.ch
darkink.ch
discourse.darkink.ch
bitwarden.darkink.ch
shipyard.darkink.ch
mail.darkink.ch
drone-ci.darkink.ch
darkink.ch
darkink.ch
darkink.ch
office.darkink.ch
docker-registry.darkink.ch
darkink.ch
darkink.ch
imap.darkink.ch
imap.darkink.ch
drone-ci.darkink.ch
darkink.ch
darkink.ch
mail.darkink.ch
bitwarden.darkink.ch
drone-ci.darkink.ch
drone-ci.darkink.ch
redmine.darkink.ch
cloud.darkink.ch
darkink.ch
drone-ci.darkink.ch
darkink.ch
redmine.darkink.ch
darkink.ch
mail.darkink.ch
redmine.darkink.ch
cloud.darkink.ch
darkink.ch
shipyard.darkink.ch
darkink.ch
redmine.darkink.ch
drone-ci.darkink.ch
bitwarden.darkink.ch
darkink.ch
cloud.darkink.ch
cloud.darkink.ch
drone-ci.darkink.ch
imap.darkink.ch
mail.darkink.ch
cloud.darkink.ch
cloud.darkink.ch
bitwarden.darkink.ch
darkink.ch
shipyard.darkink.ch
darkink.ch
smtp.darkink.ch
darkink.ch
isp.darkink.ch
mail.darkink.ch
redmine.darkink.ch
cloud.darkink.ch
drone-ci.darkink.ch
shipyard.darkink.ch
isp.darkink.ch
darkink.ch
smtp.darkink.ch
darkink.ch
office.darkink.ch
darkink.ch
cloud.darkink.ch
office.darkink.ch
darkink.ch
drone-ci.darkink.ch
shipyard.darkink.ch
darkink.ch
imap.darkink.ch
darkink.ch
imap.darkink.ch
office.darkink.ch
redmine.darkink.ch
redmine.darkink.ch
shipyard.darkink.ch
shipyard.darkink.ch
mail.darkink.ch
isp.darkink.ch
darkink.ch
redmine.darkink.ch
smtp.darkink.ch
smtp.darkink.ch
isp.darkink.ch
darkink.ch
darkink.ch
discourse.darkink.ch
bitwarden.darkink.ch
Certificate
The complete raw certificate details for darkink.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgISBFvL9nCzZGO3nuPMHZdo4C0MMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMzEyMjA0MDBaFw0y MDAxMjkyMjA0MDBaMBUxEzARBgNVBAMTCmRhcmtpbmsuY2gwggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQDqAK5taThWe9frMD+Nyuc1LIwrtAUHHG9P1F8d vUDv6JFkn9ZIWM2iuInVIf/7A2dw56s5LemErM4D3nQNHvleYWrRNDK7+feP4T22 UQM9OtyMbKM17tSB+yLKLFDBesLFk8+6Qz54m7ZsHXc7rh4YMlxHARMCDE/RJMBK /wwtBf1/xdM6S+4w9GoURbcEGefWMhiwRWMdeefZ7JzwbYv+S3+Xh4EYknReNB2w Az7yFLyOAYlOzmSmjq+xS9IynwhEsk0hpqC5mayTOy9VwzF5aokGLj5gRzQbQoeE JI/JEM2NqdGxZ9MhzGZ3v1eOCMloqcWUj2b89LMVwZPIxN2DTA2TRljxK0GerRG+ UZs6LnWJiDTdsQXqsqzN6v7F4PLlY42qh+5axo46lJnL5GjP41ldZY/JUnAEmfcz Cc0qkUub9aeW0oFyDr1BCkZTPJkrJtMz2rlNapEos1gEOmCGktEDutJsZdop+5d1 cHURx6kuTbjvFljI+RYCg2sv7n6go0KRUEKkWfEZoBE7G0fW4JeHIElvjkNAeNvY 9hjwWtj1uBTinptrZtD27B3aqmAtWtEILSJD9RwFpZD8bDPd7ElzoZZidEP4YlLe Jf3XDKX+a7I3Vza9S5dMXjMsPKyFi2gmkgfcSCYKgMxBlsIZsS+lZhv6unBqwr2e tmZsAwIDAQABo4ICcDCCAmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRKxsMBYa8W BvELBXH4rsG3De7HDDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMCUGA1UdEQQeMByCCmRhcmtpbmsuY2iCDnd3dy5kYXJr aW5rLmNoMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHW eQIEAgSB9gSB8wDxAHcAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMA AAFuJA+7AQAABAMASDBGAiEAnUBMCwaK2k9siEdR9oTWN3sq0fpgLqXbmLy54DXx UiYCIQDNfMTeOGRw8sT8T4ZHNB3fbuVLBBsOlFKEQHbFIrB5kwB2AAe3XBvlfWj/ 8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABbiQPuwIAAAQDAEcwRQIgT8nLNKmB Y+HGQQE1QZB1IySkHoc12yrq88eCWAJ1Eu0CIQCkN1dvI6xOTZdSZpgCAKqxzP80 6JG1R1jnqGzGiW7VgzANBgkqhkiG9w0BAQsFAAOCAQEAGZgO5jCJAjsATmjHFyFQ ylzy0j5empViWQroRZUCpqOjF3noPO28bYxh00a6+bm0m85w6/ATKH0XEVkLDkdf zAANiCcX1o5vkPXJOcRMRhjGYNfSj/QvDyd7fihvwkJ2gB3niKKwiuBYv/E3ZT1J D+QTPif/BmlyXG13crCepEil9q8bQW/k9BMnMwxz2itBhR2QmnvE9kPEf32Zmf6C fP8k5t4jnXtvY4nIjwLLc1mQfHu6i+7kfwuUO3OK4/Qwe5ophnsJDC0nx8u338bl 5ImXIn9VU1hcxvudJA7nVIS83hxMskZkFsOeHIpPZaOaem4dOM3j3kDE3aN9rZRG Aw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6gCubWk4VnvX6zA/jcrn NSyMK7QFBxxvT9RfHb1A7+iRZJ/WSFjNoriJ1SH/+wNncOerOS3phKzOA950DR75 XmFq0TQyu/n3j+E9tlEDPTrcjGyjNe7UgfsiyixQwXrCxZPPukM+eJu2bB13O64e GDJcRwETAgxP0STASv8MLQX9f8XTOkvuMPRqFEW3BBnn1jIYsEVjHXnn2eyc8G2L /kt/l4eBGJJ0XjQdsAM+8hS8jgGJTs5kpo6vsUvSMp8IRLJNIaaguZmskzsvVcMx eWqJBi4+YEc0G0KHhCSPyRDNjanRsWfTIcxmd79XjgjJaKnFlI9m/PSzFcGTyMTd g0wNk0ZY8StBnq0RvlGbOi51iYg03bEF6rKszer+xeDy5WONqofuWsaOOpSZy+Ro z+NZXWWPyVJwBJn3MwnNKpFLm/WnltKBcg69QQpGUzyZKybTM9q5TWqRKLNYBDpg hpLRA7rSbGXaKfuXdXB1EcepLk247xZYyPkWAoNrL+5+oKNCkVBCpFnxGaAROxtH 1uCXhyBJb45DQHjb2PYY8FrY9bgU4p6ba2bQ9uwd2qpgLVrRCC0iQ/UcBaWQ/Gwz 3exJc6GWYnRD+GJS3iX91wyl/muyN1c2vUuXTF4zLDyshYtoJpIH3EgmCoDMQZbC GbEvpWYb+rpwasK9nrZmbAMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 379685951990860710002261525344321917693196 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 22:04:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 22:04:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'darkink.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 954647570096241279581582004209150445816555973685849111976339600471058029496724943713847559419020481865461102170895840441683048018801116933167795288354889869515064046863177977784862858407387559058913680277493139551549055877595584639975788467569957535195783189714265147663154771252508672252718772697646542908480179116484479756496633398464360536636307054193760387488501421221368666367798966128847850161476945310093769424144606892943060447894760709365318949391686041352925558000485400864237878490213562656658088639562417896957774682293391322866208831695933950500062209629801305914863854442255243662863402524716461708989031350733554165431900318554534529201131849492873262402763436985864551620228040028440583910031753830276999297683881495536717716984892275869463020514017546743546695896946160836014585850243711530169395682390883780011532119175268273692248226881865773247763389862855969017298846290072290543571977458362202070194830096910616331468858526593839366942427037556302576030623067797184032649401015110042740715820562947508118724342887706258958619121396762033845636472431649380340284286266190878237950911710637978056678478132857096685273614503324752896928576416670346475706739610833676843038390030737219588241882826644384815750999043 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4ac6c30161af1606f10b0571f8aec1b70deec70c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darkink.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darkink.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e240fbb0100000403004830460221009d404c0b068ada4f6c884751f684d6377b2ad1fa602ea5db98bcb9e035f15226022100cd7cc4de386470f2c4fc4f8647341ddf6ee54b041b0e9452844076c522b0799300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e240fbb02000004030047304502204fc9cb34a98163e1c64101354190752324a41e8735db2aeaf3c78258027512ed022100a437576f23ac4e4d975266980200aab1ccff34e891b54758e7a86cc6896ed583 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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