ssl.newsmanapp.eu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ea:5f:ff:d4:85:58:54:64:a3:db:3c:c7:0e:1e:f3:22:35 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ssl.newsmanapp.eu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ea:5f:ff:d4:85:58:54:64:a3:db:3c:c7:0e:1e:f3:22:35Serial Number (int): 341090536660514352073716171657014955680309
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 51:6b:22:c3:91:12:55:00:d5:63:93:75:23:f2:03:22:c0:6a:0e:bc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6b:ed:e3:70:88:5f:08:22:21:2e:d6:af:5e:8b:4c:70:34:1d:d6:13
Fingerprint (sha256): 4e:cd:d7:14:6f:65:ec:6e:6f:96:f1:2a:b1:6c:f9:70:4d:7e:4e:f8:83:75:a4:95:72:7e:b1:02:94:03:f6:e1
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ssl.newsmanapp.eu
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ssl.newsmanapp.eu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dmonster.dazoot.ro
ssl.newsman.app
ssl.newsman.ro
ssl.newsmanapp.eu
ssl.newsman.app
ssl.newsman.ro
ssl.newsmanapp.eu
Other certificates including the domain name newsmanapp.eu
(limited to 100 certificates)
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.clintelica-feedback.eu
ssl.newsmanapp.eu
ssl.newsman.ro
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.clintelica-feedback.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsman.ro
ssl.newsmanapp.eu
ssl.newsmanapp.eu
newsmanapp.eu
cdn.clintelica-feedback.eu
cdn.newsmanapp.eu
cdn.newsmanapp.eu
cdn.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.clintelica-feedback.eu
ssl.newsmanapp.eu
ssl.newsman.ro
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
cdn.clintelica-feedback.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsman.ro
ssl.newsmanapp.eu
ssl.newsmanapp.eu
newsmanapp.eu
cdn.clintelica-feedback.eu
cdn.newsmanapp.eu
cdn.newsmanapp.eu
cdn.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
ssl.newsmanapp.eu
cdn.newsmanapp.eu
ssl.newsmanapp.eu
Certificate
The complete raw certificate details for ssl.newsmanapp.eu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGjjCCBXagAwIBAgISA+pf/9SFWFRko9s8xw4e8yI1MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMDQwNzI0MjFaFw0y MDAyMDIwNzI0MjFaMBwxGjAYBgNVBAMTEXNzbC5uZXdzbWFuYXBwLmV1MIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr9JoEqct2W2RfOLpXpkEzTGxwvNY 2piNsqSFCtZkIcUAGPG4zqvMhoqb8x1wk9dve1zszVo89dzr4EsIxAnHv+XBMj3R bQQBBynW5ouTJUgoc8bDZIWYJHnPq811gksJQODCB5xAWLVbxKxvBEqMJgcPuMz1 6WbmWIujqgkKRqAHZPLdMM6c7vmf4olH+2aQcjVlpxRUpIWAwMXzLLFx792ofuNb rfDqDuRjO++mnpqiiFKls9oM/DpCbeZBRyWzdlcKkKlnME8PsMSXJnMqChpyfDtJ YkQ9Mtf0xILBVtO3cq4kPHyMBjKtusaAZzIhcxxrFpcEZg/iElCDBkDY8KOdYKRg hibyO79+ony7Tog0VvuVaJ97vp1rBWZvUQv21bgTd3s6I1xxywb/g/vPYy2TQ0m5 aRCYTf4kNv1UUZ+khLgM0S6c6VFUbseF0vUSWHSh0Ih5LWHFZGQ8lxseaFPwOv9q Fds8op0/WYHi0l4pnAnJhYlEVteEvBkJyma/yhOy6RDtiJylnepVFfmSDH+78x5F 54MUrGbkbMydk5hItYirvP94kOBMa/Slf5B9J2w4JTgGRX+DSgzsbhTb1VQ2Yn/2 iW7E7inmycAjnTnkjjAqvjVix6TAQetM8Yka0NxkTMWFZw2TjWwH+szZ5+VuSZOY vAnj1FP1qxWnffMCAwEAAaOCApowggKWMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU UWsiw5ESVQDVY5N1I/IDIsBqDrwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl 7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p bnQteDMubGV0c2VuY3J5cHQub3JnLzBRBgNVHREESjBIghJkbW9uc3Rlci5kYXpv b3Qucm+CD3NzbC5uZXdzbWFuLmFwcIIOc3NsLm5ld3NtYW4ucm+CEXNzbC5uZXdz bWFuYXBwLmV1MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYB BAHWeQIEAgSB9ASB8QDvAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFx RVgAAAFuNYPRsQAABAMARzBFAiEAijOhZOpzNnc/UEa0Y1b8OUSAVa53GhKSnBKD g8x6d80CIEZKsVyI5EuHxiL5hBSJg+VvyxWoLL88ObSAPi0KrniAAHUAB7dcG+V9 aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFuNYPR3QAABAMARjBEAiBxvsP2 Kd3hhllp9lMS9U4U2T0/BrWjdij7/fputLxNsgIgSmZBDR9KGFkYghq2ttIm9h27 Rq8Mq+Zl3K4hhVY/PB4wDQYJKoZIhvcNAQELBQADggEBABIvE6WCIEdUErwi+UsJ 7eUwla3JqUzNTGp/8xrRbHBNcKSh2Be2ybWpHxGWql640r3FDOJvk79oOias2w4s FxLdp2C93B7Qg2Sm9O4hSjyR2s6+/sT8Dz60bMLgefrS7w7KLmxPNsadAcqgUpKN vJG5TueIgxxTdlOwUhh0gvs2tI5LmoqVt/iBZbiQ8Zq8pbesiZzUsVtYgfKH1Lnl xHohPDUw0Th8A1GJD2YPucWjbfGWEvNWd7L1/WTEdNzRjZJsXSlnVds229FuHwqL ASbxBnQy3HlSofuEAXGFsRBM38reLQoPY4FLrPctt1ao5qrzJu61a/q3fiznNNH2 4n8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr9JoEqct2W2RfOLpXpkE zTGxwvNY2piNsqSFCtZkIcUAGPG4zqvMhoqb8x1wk9dve1zszVo89dzr4EsIxAnH v+XBMj3RbQQBBynW5ouTJUgoc8bDZIWYJHnPq811gksJQODCB5xAWLVbxKxvBEqM JgcPuMz16WbmWIujqgkKRqAHZPLdMM6c7vmf4olH+2aQcjVlpxRUpIWAwMXzLLFx 792ofuNbrfDqDuRjO++mnpqiiFKls9oM/DpCbeZBRyWzdlcKkKlnME8PsMSXJnMq ChpyfDtJYkQ9Mtf0xILBVtO3cq4kPHyMBjKtusaAZzIhcxxrFpcEZg/iElCDBkDY 8KOdYKRghibyO79+ony7Tog0VvuVaJ97vp1rBWZvUQv21bgTd3s6I1xxywb/g/vP Yy2TQ0m5aRCYTf4kNv1UUZ+khLgM0S6c6VFUbseF0vUSWHSh0Ih5LWHFZGQ8lxse aFPwOv9qFds8op0/WYHi0l4pnAnJhYlEVteEvBkJyma/yhOy6RDtiJylnepVFfmS DH+78x5F54MUrGbkbMydk5hItYirvP94kOBMa/Slf5B9J2w4JTgGRX+DSgzsbhTb 1VQ2Yn/2iW7E7inmycAjnTnkjjAqvjVix6TAQetM8Yka0NxkTMWFZw2TjWwH+szZ 5+VuSZOYvAnj1FP1qxWnffMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 341090536660514352073716171657014955680309 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-04 07:24:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 07:24:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.newsmanapp.eu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717290773508392524125529494954794498950547812258140679581354854809990533643156109524756221741774612034676087835625213044508963373343780486572048628495079378233098582353949056785180064215923978541430392727078973057434642610791484185834213409726879833330203577558954645601075029878711617185943776947309973560354325222706639293228190079368897113312324863521150075955269634557793647859862354385616304555369023043804386299213872863500083395464527596301715016753771925799333680778897730062262555010867540257686245735055206588786245584679439265255177660411088523658850788896010162513858915607597162829691886199824632899455894309329812435236928483926069481755909377996648312126237955637942198723985409247213482597229360720897843572380699639053656326473615058865832612416140634470844955638464687715940870923032111853265669033010516829998213092376244912997174838454973658103905268189234450607727045972106388594946628786326647028787905222465060051356662174970914818537765063956572430680964714804349726363390670462501107036991877704937189470698177676427563997192104562231602481530741040263330323781309241677352370225694548323083360198590438292040234342687074580590029410725547044287075439833213532098974487966879367838585748069223984453116198387 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 516b22c391125500d563937523f20322c06a0ebc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmonster.dazoot.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.newsman.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.newsman.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.newsmanapp.eu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e3583d1b100000403004730450221008a33a164ea7336773f5046b46356fc39448055ae771a12929c128383cc7a77cd0220464ab15c88e44b87c622f984148983e56fcb15a82cbf3c39b4803e2d0aae788000750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e3583d1dd0000040300463044022071bec3f629dde1865969f65312f54e14d93d3f06b5a37628fbfdfa6eb4bc4db202204a66410d1f4a185918821ab6b6d226f61dbb46af0cabe665dcae2185563f3c1e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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