my.opel.ba
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:5b:ed:8c:93:1c:d3:1c:e8:89:2f:24:9f:ce:3e:25:76:78 was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=my.opel.ba
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:5b:ed:8c:93:1c:d3:1c:e8:89:2f:24:9f:ce:3e:25:76:78Serial Number (int): 292618310125445296625094816098227413415544
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c6:2c:00:ae:0c:b5:2b:ed:3d:e0:d0:85:c0:8b:42:45:c4:35:68:cd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 2b:b2:a1:fb:3e:b2:46:fa:11:3c:6d:56:3c:a4:11:cb:33:e5:f8:a1
Fingerprint (sha256): 50:3e:d8:06:da:7a:69:3e:2c:71:9e:de:8e:78:61:d7:3b:de:33:b0:1c:5b:3f:c3:b1:44:73:2a:4c:37:1e:5d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate my.opel.ba
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for my.opel.ba
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
my.opel.ba
my.opel.com.cy
my.opel.com.tr
my.opel.cz
my.opel.dk
my.opel.ee
my.opel.fi
my.opel.hu
my.opel.mk
my.opel.rs
my.opel.se
my.opel.sk
my.opel.com.cy
my.opel.com.tr
my.opel.cz
my.opel.dk
my.opel.ee
my.opel.fi
my.opel.hu
my.opel.mk
my.opel.rs
my.opel.se
my.opel.sk
Other certificates including the domain name opel.ba
(limited to 100 certificates)
www.opel.cz
www.gm.com
my.opel.ba
my.opel.ba
my.opel.ba
my.opel.ba
www.opel.cz
my.opel.ba
www.gm.com
my.opel.ba
www.opel.cz
www.opel.cz
www.gm.com
www.opel.cz
www.opel.cz
www.opel.cz
my.opel.ba
my.opel.ba
www.gm.com
www.opel.cz
www.opel.cz
my.opel.ba
www.opel.cz
www.opel.cz
my.opel.ba
www.gm.com
www.opel.cz
my.opel.ba
www.opel.cz
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
www.opel.cz
my-pp.opel.at
www.opel.cz
www.opel.cz
www.opel.cz
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
www.opel.cz
my.opel.ba
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.gr
my-pp.opel.at
www.gm.com
my.opel.ba
opel.fr
www.opel.cz
www.gm.com
www.opel.cz
my-pp.opel.at
www.opel.cz
opel.fr
www.opel.cz
www.gm.com
my.opel.ba
www.opel.cz
my-pp.opel.at
www.opel.cz
my.opel.ba
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
my.opel.ba
www.opel.cz
www.opel.cz
www.opel.gr
www.opel.cz
my-pp.opel.at
www.opel.cz
www.opel.cz
my.opel.ba
www.opel.cz
my.opel.ba
opel.fr
my-pp.opel.at
www.opel.cz
www.opel.cz
my-pp.opel.at
www.opel.cz
www.opel.cz
www.opel.cz
www.opel.cz
my.opel.ba
my-pp.opel.at
www.opel.cz
my.opel.ba
www.opel.cz
www.gm.com
my.opel.ba
my.opel.ba
www.gm.com
my.opel.ba
my.opel.ba
my.opel.ba
my.opel.ba
www.opel.cz
my.opel.ba
www.gm.com
my.opel.ba
www.opel.cz
www.opel.cz
www.gm.com
www.opel.cz
www.opel.cz
www.opel.cz
my.opel.ba
my.opel.ba
www.gm.com
www.opel.cz
www.opel.cz
my.opel.ba
www.opel.cz
www.opel.cz
my.opel.ba
www.gm.com
www.opel.cz
my.opel.ba
www.opel.cz
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
www.opel.cz
my-pp.opel.at
www.opel.cz
www.opel.cz
www.opel.cz
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
www.opel.cz
my.opel.ba
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.gr
my-pp.opel.at
www.gm.com
my.opel.ba
opel.fr
www.opel.cz
www.gm.com
www.opel.cz
my-pp.opel.at
www.opel.cz
opel.fr
www.opel.cz
www.gm.com
my.opel.ba
www.opel.cz
my-pp.opel.at
www.opel.cz
my.opel.ba
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
my.opel.ba
www.opel.cz
www.opel.cz
www.opel.gr
www.opel.cz
my-pp.opel.at
www.opel.cz
www.opel.cz
my.opel.ba
www.opel.cz
my.opel.ba
opel.fr
my-pp.opel.at
www.opel.cz
www.opel.cz
my-pp.opel.at
www.opel.cz
www.opel.cz
www.opel.cz
www.opel.cz
my.opel.ba
my-pp.opel.at
www.opel.cz
my.opel.ba
www.opel.cz
www.gm.com
my.opel.ba
my.opel.ba
Certificate
The complete raw certificate details for my.opel.ba in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgISA1vtjJMc0xzoiS8kn84+JXZ4MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjMwMTA1NThaFw0x OTEyMjIwMTA1NThaMBUxEzARBgNVBAMTCm15Lm9wZWwuYmEwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDfp4SkVBDkznM9U3LJK6LXuL78BprthZVJEjjD ktXHTdUkQYYSAgAuv7QfzdJquyP2q9D6IUE0vwPGXzoPJgPNk4iiZFf6CAdScSCk VHdckgDu5o3lWxcG4V43xlttK8XzARcAYnptcQwJa11s7O7PXpwQ1US16vlGXhXo qnE2MXA4V0FO85dd3lElxlhVnCQqyG+jnmdMeRx7t3kiCAPRTzAKivpwrm/2ChU0 S4G9OX2na53LDoySUtqnSHCxWZfSfVlNut4jirHe+B130guY2FK1xpRb8DsXd4Bn 7uIPlt4luJgr1TmgCwPvOzTEWF7emlJHHjRUxzVWyW3iGvg3AgMBAAGjggH7MIIB 9zAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMYsAK4MtSvtPeDQhcCLQkXENWjNMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w gaMGA1UdEQSBmzCBmIIKbXkub3BlbC5iYYIObXkub3BlbC5jb20uY3mCDm15Lm9w ZWwuY29tLnRyggpteS5vcGVsLmN6ggpteS5vcGVsLmRrggpteS5vcGVsLmVlggpt eS5vcGVsLmZpggpteS5vcGVsLmh1ggpteS5vcGVsLm1rggpteS5vcGVsLnJzggpt eS5vcGVsLnNlggpteS5vcGVsLnNrMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysG AQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu b3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALrtHe jAvCFfClCGrdpS0KeI7sXG5rWehKzaOBM4B6uBpoLMuYnlRi1vhxkzUKx1d5umc9 XyoiSaLizZmjWO20blOd1pkADFCNA2jzHhuATHxQR40bTZ14i1Y3TJF2Nk9P2s5F 8j+OqkBHmHw07+96KRwNFh+5czrqTUTxHnTfVe7NXbXJFCOwgx5FcyiJitD1Vkbx dGNrKEIxmaRBdPE05HIB8hV991gdor9JP4MJ47Yb94Gkt5S+bI9Sc6IpWeyZhwUW 6vCLNczKHsYoxuzz9xF2y6zb4dKQLWwgtRuX/HP2qNj7QVdJwLsccY9Y9YnLdQ7S taoCNZHYDkGCgOYv -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36eEpFQQ5M5zPVNyySui 17i+/Aaa7YWVSRI4w5LVx03VJEGGEgIALr+0H83Sarsj9qvQ+iFBNL8Dxl86DyYD zZOIomRX+ggHUnEgpFR3XJIA7uaN5VsXBuFeN8ZbbSvF8wEXAGJ6bXEMCWtdbOzu z16cENVEter5Rl4V6KpxNjFwOFdBTvOXXd5RJcZYVZwkKshvo55nTHkce7d5IggD 0U8wCor6cK5v9goVNEuBvTl9p2udyw6MklLap0hwsVmX0n1ZTbreI4qx3vgdd9IL mNhStcaUW/A7F3eAZ+7iD5beJbiYK9U5oAsD7zs0xFhe3ppSRx40VMc1Vslt4hr4 NwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 292618310125445296625094816098227413415544 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 01:05:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-22 01:05:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'my.opel.ba' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28233748277321059341409222638939246505899141760216780256257614100194904930390157559406107695924702482122037472486417611647036463311004885738425616325115937536904307328429718383045800115693911197048848366212122523525576360007158442925351758480033525544641168937283510073915760369532724235090649467053131094763449719871707266742026105823344454157529691398773629715520503341490915093439631644301459791622561449660443488816080978054415233699513798391410405193897422605818811593986574611706048758709745844224825084189892556900967195261704080851846531676607491916678400962774901788268810214247242385027298625137765693192247 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c62c00ae0cb52bed3de0d085c08b4245c43568cd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (155 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.ba' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.com.cy' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.com.tr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.hu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.mk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.rs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.sk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000baed1de8c0bc215f0a5086adda52d0a788eec5c6e6b59e84acda38133807ab81a682ccb989e5462d6f87193350ac75779ba673d5f2a2249a2e2cd99a358edb46e539dd699000c508d0368f31e1b804c7c50478d1b4d9d788b56374c9176364f4fdace45f23f8eaa4047987c34efef7a291c0d161fb9733aea4d44f11e74df55eecd5db5c91423b0831e457328898ad0f55646f174636b28423199a44174f134e47201f2157df7581da2bf493f8309e3b61bf781a4b794be6c8f5273a22959ec99870516eaf08b35ccca1ec628c6ecf3f71176cbacdbe1d2902d6c20b51b97fc73f6a8d8fb415749c0bb1c718f58f589cb750ed2b5aa023591d80e418280e62f