asse.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:06:56:46:ab:e8:f3:05:a2:1a:6b:da:59:8d:30:cd:77:fb was issued on by Let's Encrypt.
With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=asse.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:06:56:46:ab:e8:f3:05:a2:1a:6b:da:59:8d:30:cd:77:fbSerial Number (int): 350605518483732405165550981131545472759803
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: a7:20:5c:b5:fc:bf:fd:4e:76:2e:04:ff:39:2b:23:88:de:5b:cc:b4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 77:cd:be:6d:83:a1:21:57:1e:18:f6:66:e6:6c:35:83:78:ea:e7:79
Fingerprint (sha256): 57:85:76:96:1f:76:60:4c:a4:2a:bd:74:63:b8:0d:3d:50:f7:60:fd:40:20:b8:04:66:1b:35:71:e0:de:83:3d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate asse.com
15
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for asse.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
asse.com
db-mail.asse.com
db.asse.com
dev-db.asse.com
host.asse.com
host.world-heritage.org
internal-mailbox-api.db.asse.com
mail.db.asse.com
phs.asse.com
world-heritage.org
www.asse.com
www.db.asse.com
www.host.asse.com
www.host.world-heritage.org
www.world-heritage.org
db-mail.asse.com
db.asse.com
dev-db.asse.com
host.asse.com
host.world-heritage.org
internal-mailbox-api.db.asse.com
mail.db.asse.com
phs.asse.com
world-heritage.org
www.asse.com
www.db.asse.com
www.host.asse.com
www.host.world-heritage.org
www.world-heritage.org
Other certificates including the domain name asse.com
(limited to 100 certificates)
dev-payment.asse.com
payment.asse.com
sentry-io.asse.com
asse.com
canada.asse.com
payment.asse.com
payment.asse.com
dev-payment.asse.com
sentry-io.asse.com
asse.com
aspireworldwide.com
sentry-io.asse.com
payment.asse.com
sentry-io.asse.com
dev-payment.asse.com
payment.asse.com
db-inbound.asse.com
mail.asse.com
dev-payment.asse.com
dev-payment.asse.com
canada.asse.com
dev-payment.asse.com
sentry-io.asse.com
payment.asse.com
db-outbound.asse.com
asse.com
asse.com
asse.com
asse.com
db.asse.com
payment.asse.com
aspireworldwide.com
asse.com
db-inbound.asse.com
canada-english.asse.com
asse.com
asse.com
new.aspireww.com
dev-payment.asse.com
db-inbound.asse.com
payment.asse.com
db-outbound.asse.com
asse.com
asse.com
payment.asse.com
db.asse.com
db-outbound.asse.com
canada.asse.com
asse.com
asse.com
sentry-io.asse.com
aspireworldwide.com
sentry-io.asse.com
canada.asse.com
aspireworldwide.com
db-outbound.asse.com
db-outbound.asse.com
aspireworldwide.com
asse.com
asse.com
db-inbound.asse.com
*.asse.com
asse.com
asse.com
db-inbound.asse.com
dev-payment.asse.com
canada-english.asse.com
db-outbound.asse.com
dev-payment.asse.com
dev-payment.asse.com
asse.com
db-outbound.asse.com
sentry-io.asse.com
asse.com
payment.asse.com
asse.com
dev-payment.asse.com
asse.com
db.asse.com
aspireworldwide.com
payment.asse.com
aspireworldwide.com
aspireworldwide.com
db-outbound.asse.com
asse.com
db.asse.com
db-outbound.asse.com
db.asse.com
aspireworldwide.com
canada-english.asse.com
canada-english.asse.com
canada.asse.com
canada.asse.com
dev-payment.asse.com
aspireworldwide.com
db-inbound.asse.com
dev-payment.asse.com
asse.com
aspireworldwide.com
asse.com
payment.asse.com
sentry-io.asse.com
asse.com
canada.asse.com
payment.asse.com
payment.asse.com
dev-payment.asse.com
sentry-io.asse.com
asse.com
aspireworldwide.com
sentry-io.asse.com
payment.asse.com
sentry-io.asse.com
dev-payment.asse.com
payment.asse.com
db-inbound.asse.com
mail.asse.com
dev-payment.asse.com
dev-payment.asse.com
canada.asse.com
dev-payment.asse.com
sentry-io.asse.com
payment.asse.com
db-outbound.asse.com
asse.com
asse.com
asse.com
asse.com
db.asse.com
payment.asse.com
aspireworldwide.com
asse.com
db-inbound.asse.com
canada-english.asse.com
asse.com
asse.com
new.aspireww.com
dev-payment.asse.com
db-inbound.asse.com
payment.asse.com
db-outbound.asse.com
asse.com
asse.com
payment.asse.com
db.asse.com
db-outbound.asse.com
canada.asse.com
asse.com
asse.com
sentry-io.asse.com
aspireworldwide.com
sentry-io.asse.com
canada.asse.com
aspireworldwide.com
db-outbound.asse.com
db-outbound.asse.com
aspireworldwide.com
asse.com
asse.com
db-inbound.asse.com
*.asse.com
asse.com
asse.com
db-inbound.asse.com
dev-payment.asse.com
canada-english.asse.com
db-outbound.asse.com
dev-payment.asse.com
dev-payment.asse.com
asse.com
db-outbound.asse.com
sentry-io.asse.com
asse.com
payment.asse.com
asse.com
dev-payment.asse.com
asse.com
db.asse.com
aspireworldwide.com
payment.asse.com
aspireworldwide.com
aspireworldwide.com
db-outbound.asse.com
asse.com
db.asse.com
db-outbound.asse.com
db.asse.com
aspireworldwide.com
canada-english.asse.com
canada-english.asse.com
canada.asse.com
canada.asse.com
dev-payment.asse.com
aspireworldwide.com
db-inbound.asse.com
dev-payment.asse.com
asse.com
aspireworldwide.com
asse.com
Certificate
The complete raw certificate details for asse.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgISBAZWRqvo8wWiGmvaWY0wzXf7MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MjAyMTU4MjZaFw0x OTA5MTgyMTU4MjZaMBMxETAPBgNVBAMTCGFzc2UuY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAwoaKuyYOr/QnrGDGRkPOGt05ALAiCO7eY6kqUV1d DsMy0yR81t4izDXNsZ6Ylr5hlS4ha8nYUYqJ7tF+95da/gUzl9VWDkUY60kdXomX V8Sn6bxN043i4Nq7KieWHlE2aRab9+MumUvql1dhTqYSdGjTBE2LXhT5FeurXvGH zaFvOr54YBMVVINAQLKLx9/V3kpFbazeSqE0memKAPvtK/m2DnlIHvuAH6M1Jr8b TMRdVVzfkq3ECCCmlFg7E257CBJ0lr4IFncD/gxF+Gp67lQVOQml9aWwELvhff3F PbSP2I0xBCEtIeDxt1Ph7s4rgwMTzOD/pikKSRP4HXgAtQIDAQABo4IDeTCCA3Uw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSnIFy1/L/9TnYuBP85KyOI3lvMtDAfBgNV HSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYI KwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYI KwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIIB LAYDVR0RBIIBIzCCAR+CCGFzc2UuY29tghBkYi1tYWlsLmFzc2UuY29tggtkYi5h c3NlLmNvbYIPZGV2LWRiLmFzc2UuY29tgg1ob3N0LmFzc2UuY29tghdob3N0Lndv cmxkLWhlcml0YWdlLm9yZ4IgaW50ZXJuYWwtbWFpbGJveC1hcGkuZGIuYXNzZS5j b22CEG1haWwuZGIuYXNzZS5jb22CDHBocy5hc3NlLmNvbYISd29ybGQtaGVyaXRh Z2Uub3Jnggx3d3cuYXNzZS5jb22CD3d3dy5kYi5hc3NlLmNvbYIRd3d3Lmhvc3Qu YXNzZS5jb22CG3d3dy5ob3N0LndvcmxkLWhlcml0YWdlLm9yZ4IWd3d3Lndvcmxk LWhlcml0YWdlLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEB ATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUG CisGAQQB1nkCBAIEgfYEgfMA8QB2AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiT AZ3d8dv+AAABa3cc1D4AAAQDAEcwRQIhAN7YWOC8MxMiJwDMNVU0z/fti7Qqj3wu qdu8iDi/AbZBAiATr+gbWUDPxTdPcmAAKF0dsLDohxshJ+6yD1FxhS6G0QB3AGPy 283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABa3cc1DEAAAQDAEgwRgIh AIfeczGbtMfPEEUT1dkfupRHOWpDy8lxaTzPYCVv+H+7AiEAnWQDl9ACbnuCXKiZ JFyf/MCqmfo06wKR7ED15c5NIEowDQYJKoZIhvcNAQELBQADggEBAF+2RGBtiaO8 kB7HWsoCeVN6iRMn9hLVci+umrfNjxiXKQl5xAnhVrhfnxvusLSIMP02pj8OICON JYiPsIA9NwThUKzZt/xQuLzbMmqkIyaK+37xlDJRah5WmYnMVbL1U14hZrQO/GP/ f5LXjH0rMmdzePMh/s0W4qThuImOQ6xkx/EpxHvefvb1SP4NTUEuJtYyLWkqA2lm SEOU2nJoqLtDjBxZH12fERlRmOfkxky2mmbm/rzxmUt3LLnHTh2tBWYZTPlayhS5 v6Qh6top2zDYvzGEiXUyUMVCFvEcDhn7tNr4zMENHqKIUNsOIgcDraFauf+1Rye5 4syqGDG4NEI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoaKuyYOr/QnrGDGRkPO Gt05ALAiCO7eY6kqUV1dDsMy0yR81t4izDXNsZ6Ylr5hlS4ha8nYUYqJ7tF+95da /gUzl9VWDkUY60kdXomXV8Sn6bxN043i4Nq7KieWHlE2aRab9+MumUvql1dhTqYS dGjTBE2LXhT5FeurXvGHzaFvOr54YBMVVINAQLKLx9/V3kpFbazeSqE0memKAPvt K/m2DnlIHvuAH6M1Jr8bTMRdVVzfkq3ECCCmlFg7E257CBJ0lr4IFncD/gxF+Gp6 7lQVOQml9aWwELvhff3FPbSP2I0xBCEtIeDxt1Ph7s4rgwMTzOD/pikKSRP4HXgA tQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 350605518483732405165550981131545472759803 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 21:58:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-18 21:58:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'asse.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24556576255976493237059987710052067480994426291559877058964520360210140045633671222641290887599884436939485778662275680964167904071862119138743918766492435705640279984423589364249150336350120612538635873122695945992864449286395972025404121767926751069180766682529566326618910644973480695791563517056135911414070074243060202665553393001072331228664162156403757548176372767109962550894219964514681483949560386880828559838881881977706125732531072919385666133812713366868720117924391817237567278433299104253434445422003873228330667149302939452452158318110978369877303727159584195005412456705989821092266545343079948746933 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a7205cb5fcbffd4e762e04ff392b2388de5bccb4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (291 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'db-mail.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'db.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-db.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.world-heritage.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal-mailbox-api.db.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.db.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'world-heritage.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.db.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.host.asse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.host.world-heritage.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.world-heritage.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b771cd43e0000040300473045022100ded858e0bc3313222700cc355534cff7ed8bb42a8f7c2ea9dbbc8838bf01b641022013afe81b5940cfc5374f726000285d1db0b0e8871b2127eeb20f5171852e86d100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b771cd431000004030048304602210087de73319bb4c7cf104513d5d91fba9447396a43cbc971693ccf60256ff87fbb0221009d640397d0026e7b825ca899245c9ffcc0aa99fa34eb0291ec40f5e5ce4d204a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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