www.cafonline.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:b9:a3:09:aa:35:94:3a:b4:fe:81:39:95:26:d7:d0:bf:36 was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.cafonline.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b9:a3:09:aa:35:94:3a:b4:fe:81:39:95:26:d7:d0:bf:36Serial Number (int): 411618095953653870415863707941411367206710
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e5:f9:41:3e:98:05:bf:40:fc:9d:ef:26:36:fd:ba:51:95:75:25:b5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 52:26:b7:d4:f2:15:04:ae:fd:86:03:73:13:73:88:75:4b:86:44:62
Fingerprint (sha256): 50:a7:2f:d8:51:ce:1f:13:db:b7:89:ca:fc:25:f3:3e:fc:61:fa:de:31:9a:39:2e:5a:46:a5:a2:b3:4a:94:ad
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.cafonline.com
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.cafonline.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
admin.cafonline.com
ar.cafonline.com
caf-prd-widgets.cafonline.com
cafonline.com
competitions.cafonline.com
fr.cafonline.com
images.cafonline.com
pt.cafonline.com
services.cafonline.com
staging.cafonline.com
webmail.cafonline.com
www.cafonline.com
ar.cafonline.com
caf-prd-widgets.cafonline.com
cafonline.com
competitions.cafonline.com
fr.cafonline.com
images.cafonline.com
pt.cafonline.com
services.cafonline.com
staging.cafonline.com
webmail.cafonline.com
www.cafonline.com
Other certificates including the domain name cafonline.com
(limited to 100 certificates)
*.cafonline.com
www.cafonline.com
helpdesk.zoolatech.com
support.cafonline.com
support.cafonline.com
*.cafonline.com
cahelpdesk.ca-usa.com
cahelpdesk.ca-usa.com
servicedesk.patri.com.br
ssl378358.cloudflaressl.com
fr.cafonline.com
ssl378358.cloudflaressl.com
sni.cloudflaressl.com
ssl378560.cloudflaressl.com
*.cafonline.com
www.cafonline.com
www.highq.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
sd.mareven.com
*.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
support.cafonline.com
ssl378357.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
ssl378558.cloudflaressl.com
ssl378357.cloudflaressl.com
*.cafonline.com
www.cafonline.com
ssl378560.cloudflaressl.com
ssl378358.cloudflaressl.com
sni.cloudflaressl.com
ssl378357.cloudflaressl.com
sni.cloudflaressl.com
servicedesk.patri.com.br
ssl378358.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
ssl378357.cloudflaressl.com
support.cafonline.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
support.cafonline.com
ssl378560.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
www.cafonline.com
www.cafonline.com
www.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
servicedesk.gspretail.com
ssl378358.cloudflaressl.com
*.cafonline.com
support.cafonline.com
support.cafonline.com
ssl378359.cloudflaressl.com
cafonline.com
ssl378357.cloudflaressl.com
www.cafonline.com
support.cafonline.com
ssl378357.cloudflaressl.com
support.cafonline.com
www.cafonline.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
cafonline.com
support.cafonline.com
www.cafonline.com
helpdesk.zoolatech.com
support.cafonline.com
support.cafonline.com
*.cafonline.com
cahelpdesk.ca-usa.com
cahelpdesk.ca-usa.com
servicedesk.patri.com.br
ssl378358.cloudflaressl.com
fr.cafonline.com
ssl378358.cloudflaressl.com
sni.cloudflaressl.com
ssl378560.cloudflaressl.com
*.cafonline.com
www.cafonline.com
www.highq.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
sd.mareven.com
*.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
support.cafonline.com
ssl378357.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
ssl378558.cloudflaressl.com
ssl378357.cloudflaressl.com
*.cafonline.com
www.cafonline.com
ssl378560.cloudflaressl.com
ssl378358.cloudflaressl.com
sni.cloudflaressl.com
ssl378357.cloudflaressl.com
sni.cloudflaressl.com
servicedesk.patri.com.br
ssl378358.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378359.cloudflaressl.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378358.cloudflaressl.com
www.cafonline.com
ssl378359.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378358.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
www.cafonline.com
ssl378357.cloudflaressl.com
support.cafonline.com
ssl378358.cloudflaressl.com
ssl378358.cloudflaressl.com
support.cafonline.com
ssl378560.cloudflaressl.com
ssl378357.cloudflaressl.com
ssl378357.cloudflaressl.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
www.cafonline.com
www.cafonline.com
www.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
servicedesk.gspretail.com
ssl378358.cloudflaressl.com
*.cafonline.com
support.cafonline.com
support.cafonline.com
ssl378359.cloudflaressl.com
cafonline.com
ssl378357.cloudflaressl.com
www.cafonline.com
support.cafonline.com
ssl378357.cloudflaressl.com
support.cafonline.com
www.cafonline.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
ssl378358.cloudflaressl.com
cafonline.com
support.cafonline.com
Certificate
The complete raw certificate details for www.cafonline.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgISBLmjCao1lDq0/oE5lSbX0L82MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MDcxNTAyNTNaFw0x OTA5MDUxNTAyNTNaMBwxGjAYBgNVBAMTEXd3dy5jYWZvbmxpbmUuY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbWdNo0c6iwY4xjW+6IBoEkGCKDW GkukHgw+I5P9fDh9lbq+7K0+a61tPeJ7gmno2lJPVYMgDdnXHlllohTobJIQHr5M iFaaRKlaOC2sZcbO3tzyeahBdGqenxOSPSsRJ8k9VzdGkNJvOEK9A+KTFiEgg5Ew d+9s4uPC818s47UNC1pxHfqIqeB4V3ssbmxNs55oVBcsFfAIE6bNWsg0JDK/YTEx J8fuvvq41JE6fCvF1QEUzjHrxKDjt4/HK5U3dG0UOwXGusO2J6aA3rPdt8gfm8g5 1Mu3g2VP4naZmHVGThQY63VY9QGtfeBof8eqI8fauOEgAJSnkCmOEk484wIDAQAB o4ICajCCAmYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTl+UE+mAW/QPyd7yY2/bpR lXUltTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw dC5vcmcvMIIBEQYDVR0RBIIBCDCCAQSCE2FkbWluLmNhZm9ubGluZS5jb22CEGFy LmNhZm9ubGluZS5jb22CHWNhZi1wcmQtd2lkZ2V0cy5jYWZvbmxpbmUuY29tgg1j YWZvbmxpbmUuY29tghpjb21wZXRpdGlvbnMuY2Fmb25saW5lLmNvbYIQZnIuY2Fm b25saW5lLmNvbYIUaW1hZ2VzLmNhZm9ubGluZS5jb22CEHB0LmNhZm9ubGluZS5j b22CFnNlcnZpY2VzLmNhZm9ubGluZS5jb22CFXN0YWdpbmcuY2Fmb25saW5lLmNv bYIVd2VibWFpbC5jYWZvbmxpbmUuY29tghF3d3cuY2Fmb25saW5lLmNvbTBMBgNV HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzATBgorBgEEAdZ5AgQDAQH/BAIFADAN BgkqhkiG9w0BAQsFAAOCAQEAkz012hBSkOtTZGVPodARjE8JPPu73jgDZkEWj9kv Lu+UPxLI1v1V9cl/Dmesz2eD0LEBD0fcgTuJPi+n71u+oyTcRQKoUw1LD3E7GkGC 5MTQbXD7Wlv5OhMJbTvrKy8WHj6wqawzcyRi5TtUMVBDp0tmcsdDy9UknVVmsrSv vTXt4VMNrmxoiIxXcxpG/cQuo7dNGVKFoiXTfVPySIq706yK+9dWzgB9QJTrTOXA 0fMbzZcgnRjjK34AdQfqSw1XJnOnuVgsRKtGFUEOv05P1HkxYj+f9ldPVZZY15Hd ZXRV5NmXIOXSBKLVqbzyYbKrSVGxHnOQJLLeZhOaWHEkgA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbWdNo0c6iwY4xjW+6IB oEkGCKDWGkukHgw+I5P9fDh9lbq+7K0+a61tPeJ7gmno2lJPVYMgDdnXHlllohTo bJIQHr5MiFaaRKlaOC2sZcbO3tzyeahBdGqenxOSPSsRJ8k9VzdGkNJvOEK9A+KT FiEgg5Ewd+9s4uPC818s47UNC1pxHfqIqeB4V3ssbmxNs55oVBcsFfAIE6bNWsg0 JDK/YTExJ8fuvvq41JE6fCvF1QEUzjHrxKDjt4/HK5U3dG0UOwXGusO2J6aA3rPd t8gfm8g51Mu3g2VP4naZmHVGThQY63VY9QGtfeBof8eqI8fauOEgAJSnkCmOEk48 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 411618095953653870415863707941411367206710 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-07 15:02:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-05 15:02:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cafonline.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22938690456135012426362841551748774974669332239724878098486012624485150586750376376538537328221541225268716489107487590331846185898797230732877293916076884787258819102924442901114544546219730357296791315040453374070164831537410999899686557724647096880239913147956329918950308693719176411115498763103141357933833065786140436015803505085879763823394346055849981760251355294580042416759903241217305596617399676417599773319092842880931900393540456295399395392828677871611564159726277926694525751095940853022005828924309408468490832350678042071021571622979813304610291659340239022873706095483316010753541661002330570374371 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e5f9413e9805bf40fc9def2636fdba51957525b5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cafonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.cafonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caf-prd-widgets.cafonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'competitions.cafonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.cafonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.cafonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.cafonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.cafonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cafonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.cafonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cafonline.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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