asse.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:e3:41:b4:e9:14:ba:9f:a1:a4:0e:8b:c3:80:26:78:21:a3 was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=asse.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:e3:41:b4:e9:14:ba:9f:a1:a4:0e:8b:c3:80:26:78:21:a3Serial Number (int): 425780580178698331688877419202196239032739
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 27:94:a5:67:07:3c:3a:e6:22:ac:c6:55:8d:f5:eb:80:af:59:f5:9a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 18:6b:8f:cd:08:f6:8f:05:4f:50:e9:c7:72:12:b1:d5:72:85:5b:e4
Fingerprint (sha256): 56:4d:be:48:60:34:b5:2a:2a:e5:cf:73:bf:d9:8c:85:50:e5:06:fe:77:9f:9b:a2:fa:dc:fe:6d:61:e1:a0:77
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate asse.com
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for asse.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
asse.com
db-mail.asse.com
db.asse.com
dev-db.asse.com
dev2-db.asse.com
dev3-db.asse.com
dev4-db.asse.com
dev5-db.asse.com
host.asse.com
host.world-heritage.org
mail.db.asse.com
phs.asse.com
world-heritage.org
www.asse.com
www.db.asse.com
www.host.asse.com
www.host.world-heritage.org
www.world-heritage.org
db-mail.asse.com
db.asse.com
dev-db.asse.com
dev2-db.asse.com
dev3-db.asse.com
dev4-db.asse.com
dev5-db.asse.com
host.asse.com
host.world-heritage.org
mail.db.asse.com
phs.asse.com
world-heritage.org
www.asse.com
www.db.asse.com
www.host.asse.com
www.host.world-heritage.org
www.world-heritage.org
Other certificates including the domain name asse.com
(limited to 100 certificates)
dev-payment.asse.com
payment.asse.com
sentry-io.asse.com
asse.com
canada.asse.com
payment.asse.com
payment.asse.com
dev-payment.asse.com
sentry-io.asse.com
asse.com
aspireworldwide.com
sentry-io.asse.com
payment.asse.com
sentry-io.asse.com
dev-payment.asse.com
payment.asse.com
db-inbound.asse.com
mail.asse.com
dev-payment.asse.com
dev-payment.asse.com
canada.asse.com
dev-payment.asse.com
sentry-io.asse.com
payment.asse.com
db-outbound.asse.com
asse.com
asse.com
asse.com
asse.com
db.asse.com
payment.asse.com
aspireworldwide.com
asse.com
db-inbound.asse.com
canada-english.asse.com
asse.com
asse.com
new.aspireww.com
dev-payment.asse.com
db-inbound.asse.com
payment.asse.com
db-outbound.asse.com
asse.com
asse.com
payment.asse.com
db.asse.com
db-outbound.asse.com
canada.asse.com
asse.com
asse.com
sentry-io.asse.com
aspireworldwide.com
sentry-io.asse.com
canada.asse.com
aspireworldwide.com
db-outbound.asse.com
db-outbound.asse.com
aspireworldwide.com
asse.com
asse.com
db-inbound.asse.com
*.asse.com
asse.com
asse.com
db-inbound.asse.com
dev-payment.asse.com
canada-english.asse.com
db-outbound.asse.com
dev-payment.asse.com
dev-payment.asse.com
asse.com
db-outbound.asse.com
sentry-io.asse.com
asse.com
payment.asse.com
asse.com
dev-payment.asse.com
asse.com
db.asse.com
aspireworldwide.com
payment.asse.com
aspireworldwide.com
aspireworldwide.com
db-outbound.asse.com
asse.com
db.asse.com
db-outbound.asse.com
db.asse.com
aspireworldwide.com
canada-english.asse.com
canada-english.asse.com
canada.asse.com
canada.asse.com
dev-payment.asse.com
aspireworldwide.com
db-inbound.asse.com
dev-payment.asse.com
asse.com
aspireworldwide.com
asse.com
payment.asse.com
sentry-io.asse.com
asse.com
canada.asse.com
payment.asse.com
payment.asse.com
dev-payment.asse.com
sentry-io.asse.com
asse.com
aspireworldwide.com
sentry-io.asse.com
payment.asse.com
sentry-io.asse.com
dev-payment.asse.com
payment.asse.com
db-inbound.asse.com
mail.asse.com
dev-payment.asse.com
dev-payment.asse.com
canada.asse.com
dev-payment.asse.com
sentry-io.asse.com
payment.asse.com
db-outbound.asse.com
asse.com
asse.com
asse.com
asse.com
db.asse.com
payment.asse.com
aspireworldwide.com
asse.com
db-inbound.asse.com
canada-english.asse.com
asse.com
asse.com
new.aspireww.com
dev-payment.asse.com
db-inbound.asse.com
payment.asse.com
db-outbound.asse.com
asse.com
asse.com
payment.asse.com
db.asse.com
db-outbound.asse.com
canada.asse.com
asse.com
asse.com
sentry-io.asse.com
aspireworldwide.com
sentry-io.asse.com
canada.asse.com
aspireworldwide.com
db-outbound.asse.com
db-outbound.asse.com
aspireworldwide.com
asse.com
asse.com
db-inbound.asse.com
*.asse.com
asse.com
asse.com
db-inbound.asse.com
dev-payment.asse.com
canada-english.asse.com
db-outbound.asse.com
dev-payment.asse.com
dev-payment.asse.com
asse.com
db-outbound.asse.com
sentry-io.asse.com
asse.com
payment.asse.com
asse.com
dev-payment.asse.com
asse.com
db.asse.com
aspireworldwide.com
payment.asse.com
aspireworldwide.com
aspireworldwide.com
db-outbound.asse.com
asse.com
db.asse.com
db-outbound.asse.com
db.asse.com
aspireworldwide.com
canada-english.asse.com
canada-english.asse.com
canada.asse.com
canada.asse.com
dev-payment.asse.com
aspireworldwide.com
db-inbound.asse.com
dev-payment.asse.com
asse.com
aspireworldwide.com
asse.com
Certificate
The complete raw certificate details for asse.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgISBONBtOkUup+hpA6Lw4AmeCGjMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAyMTIxOTI4MThaFw0x ODA1MTMxOTI4MThaMBMxETAPBgNVBAMTCGFzc2UuY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAyWej4Lt8BrKe2G/GWfu20IPsePO6YEtPqycW4yaC kbRVLnyjJpc4xqQXjeww5dfIeAl2r6Fjhfxuy8r/o4eEotxEEBOjBUQ5BdgjgdPr wdk0d5Nw70vHptP2KsayxvOCgvoHn5wrWOtvsHklPGOgY+EwT/ZSRZpneZuU8w0F bC/Ypb059K9aT8I9wEJKX18vE5XI+BGFGtaoi+1YtgOMgwIaGdwDAgmsw6PxI5/1 q6HgtHLYE+h/JzSPhe4/p8mTjwOOginHkiPhul094mHHdU1QiaBuKlaiaFXns3XE SsmLvnwZ32QoZiEaT/S54kMxpX8gIdbguQL/OKRneZCwLQIDAQABo4IDSTCCA0Uw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQnlKVnBzw65iKsxlWN9euAr1n1mjAfBgNV HSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYI KwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYI KwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIIB UgYDVR0RBIIBSTCCAUWCCGFzc2UuY29tghBkYi1tYWlsLmFzc2UuY29tggtkYi5h c3NlLmNvbYIPZGV2LWRiLmFzc2UuY29tghBkZXYyLWRiLmFzc2UuY29tghBkZXYz LWRiLmFzc2UuY29tghBkZXY0LWRiLmFzc2UuY29tghBkZXY1LWRiLmFzc2UuY29t gg1ob3N0LmFzc2UuY29tghdob3N0LndvcmxkLWhlcml0YWdlLm9yZ4IQbWFpbC5k Yi5hc3NlLmNvbYIMcGhzLmFzc2UuY29tghJ3b3JsZC1oZXJpdGFnZS5vcmeCDHd3 dy5hc3NlLmNvbYIPd3d3LmRiLmFzc2UuY29tghF3d3cuaG9zdC5hc3NlLmNvbYIb d3d3Lmhvc3Qud29ybGQtaGVyaXRhZ2Uub3JnghZ3d3cud29ybGQtaGVyaXRhZ2Uu b3JnMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUF BwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBv biBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRo IHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5j cnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAF/1ZmJNjAUA 21xZCANw2PjWU7nb48ro4qLcp9YhuWikVghvKQ88BEr23sYhakG6siUwKDOEQ5kf 9vp7xbLDyxq0yyJfxSTnvhMOP3hzPtLE7SEZo7HU7eNv0f1doiz42GwKofHii+sJ 4lekypMo6W4P3Au+/UAW3N9AU2RQnISMDlhHzcWqbSBa5RGKn54y1OtcE01Rzct8 bAQOJ0VcGGikCaIFxStc8bcZUm8A8KhhmBQwYvVwzsrV7I+zgF9OlcuaWrPNFWga LxDLZ16hNUz0X37V0XmzOuKzXXH4EFk8earbP3wMnPsn4KeV1eVwYvtIpUV5ksgM bFRCci8nQvw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWej4Lt8BrKe2G/GWfu2 0IPsePO6YEtPqycW4yaCkbRVLnyjJpc4xqQXjeww5dfIeAl2r6Fjhfxuy8r/o4eE otxEEBOjBUQ5BdgjgdPrwdk0d5Nw70vHptP2KsayxvOCgvoHn5wrWOtvsHklPGOg Y+EwT/ZSRZpneZuU8w0FbC/Ypb059K9aT8I9wEJKX18vE5XI+BGFGtaoi+1YtgOM gwIaGdwDAgmsw6PxI5/1q6HgtHLYE+h/JzSPhe4/p8mTjwOOginHkiPhul094mHH dU1QiaBuKlaiaFXns3XESsmLvnwZ32QoZiEaT/S54kMxpX8gIdbguQL/OKRneZCw LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 425780580178698331688877419202196239032739 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-12 19:28:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-13 19:28:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'asse.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25425006159882985308169478130815577770836151762534262330106126614118260076711719567082710608374543502977566295539830258741854124252552662029303003945244181217136666106801255820140209098672594083936761144505788487946312616982203267695377900101744542163553793719014039219841857651008474792526791848212121562881111657820676216189133414366298922974873741943621692500828023025597283557602310739988527953115190716081822460591759654887539888590246634653451720566712311789413621064432101407438396143994616667693108142973763945443619857227758245555185910075506999640969023329145368018240619088111725959892890738854234218868781 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2794a567073c3ae622acc6558df5eb80af59f59a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (329 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'db-mail.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'db.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-db.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-db.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev3-db.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev4-db.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev5-db.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.world-heritage.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.db.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'world-heritage.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.db.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.host.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.host.world-heritage.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.world-heritage.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005ff566624d8c0500db5c59080370d8f8d653b9dbe3cae8e2a2dca7d621b968a456086f290f3c044af6dec6216a41bab2253028338443991ff6fa7bc5b2c3cb1ab4cb225fc524e7be130e3f78733ed2c4ed2119a3b1d4ede36fd1fd5da22cf8d86c0aa1f1e28beb09e257a4ca9328e96e0fdc0bbefd4016dcdf405364509c848c0e5847cdc5aa6d205ae5118a9f9e32d4eb5c134d51cdcb7c6c040e27455c1868a409a205c52b5cf1b719526f00f0a86198143062f570cecad5ec8fb3805f4e95cb9a5ab3cd15681a2f10cb675ea1354cf45f7ed5d179b33ae2b35d71f810593c79aadb3f7c0c9cfb27e0a795d5e57062fb48a5457992c80c6c5442722f2742fc