bases-alienor.wedia-group.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:31:f8:d8:7b:9c:c8:b3:17:31:9c:40:09:18:c0:84:6b:0d was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bases-alienor.wedia-group.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:31:f8:d8:7b:9c:c8:b3:17:31:9c:40:09:18:c0:84:6b:0dSerial Number (int): 278341466360640915419421218427067206757133
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 17:cc:40:99:02:8c:75:f7:b4:8f:df:7d:b8:16:12:d7:51:ed:a4:91
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 50:45:54:54:ff:ac:94:14:f3:9d:7e:aa:af:9c:d4:62:f2:9e:da:78
Fingerprint (sha256): 5b:4d:ec:16:52:3e:a3:93:ae:5f:61:f9:02:9b:8b:b2:d5:ab:da:7d:60:e4:83:2d:72:ef:29:c1:89:b4:35:5e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate bases-alienor.wedia-group.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bases-alienor.wedia-group.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bases-alienor.wedia-group.com
bases.alienor.org
bases.alienor.org
Other certificates including the domain name wedia-group.com
(limited to 100 certificates)
go.wedia-group.com
sl.wedia-group.com
www.wedia-group.com
go.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
copper.wedia-group.com
wedia-group.com
bases-alienor.wedia-group.com
wedia-group.com
copper.wedia-group.com
wedia-group.com
sl.wedia-group.com
wedia-group.com
brandcenter.enedis.fr
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
bases-alienor.wedia-group.com
wedia-group.com
wedia-group.com
go.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
copper.wedia-group.com
*.wedia-group.com
copper.wedia-group.com
wedia-group.com
copper.wedia-group.com
teampass.ibrams.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
sl.wedia-group.com
copper.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
teampass.ibrams.com
wedia-group.com
brandcenter.enedis.fr
bases-alienor.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
*.prapixl.wedia-group.com
wedia-group.com
bases-alienor.wedia-group.com
wedia-group.com
*.wedia-group.com
wedia-group.com
copper.wedia-group.com
go.wedia-group.com
renault-trucks-pp.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
bases-alienor.wedia-group.com
bases.alienor.org
wedia-group.com
wedia-group.com
brandcenter.enedis.fr
wedia-group.com
bases-alienor.wedia-group.com
bases-alienor.wedia-group.com
brandcenter.enedis.fr
wedia-group.com
casa-test.wedia-group.com
wedia-group.com
engie-servicesv2-cdn.wedia-group.com
www.vaillant-germany-stage.wedia-group.com
wedia-group.com
go.wedia-group.com
wedia-group.com
wedia-group.com
*.wedia-group.com
wedia-group.com
wedia-group.com
teampass.ibrams.com
wedia-group.com
wedia-group.com
wedia-group.com
go.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
*.wedia-group.com
mediabox.erdfdistribution.fr
go.wedia-group.com
brandcenter.enedis.fr
wedia-group.com
sl.wedia-group.com
www.wedia-group.com
go.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
copper.wedia-group.com
wedia-group.com
bases-alienor.wedia-group.com
wedia-group.com
copper.wedia-group.com
wedia-group.com
sl.wedia-group.com
wedia-group.com
brandcenter.enedis.fr
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
bases-alienor.wedia-group.com
wedia-group.com
wedia-group.com
go.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
copper.wedia-group.com
*.wedia-group.com
copper.wedia-group.com
wedia-group.com
copper.wedia-group.com
teampass.ibrams.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
sl.wedia-group.com
copper.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
teampass.ibrams.com
wedia-group.com
brandcenter.enedis.fr
bases-alienor.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
*.prapixl.wedia-group.com
wedia-group.com
bases-alienor.wedia-group.com
wedia-group.com
*.wedia-group.com
wedia-group.com
copper.wedia-group.com
go.wedia-group.com
renault-trucks-pp.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
bases-alienor.wedia-group.com
bases.alienor.org
wedia-group.com
wedia-group.com
brandcenter.enedis.fr
wedia-group.com
bases-alienor.wedia-group.com
bases-alienor.wedia-group.com
brandcenter.enedis.fr
wedia-group.com
casa-test.wedia-group.com
wedia-group.com
engie-servicesv2-cdn.wedia-group.com
www.vaillant-germany-stage.wedia-group.com
wedia-group.com
go.wedia-group.com
wedia-group.com
wedia-group.com
*.wedia-group.com
wedia-group.com
wedia-group.com
teampass.ibrams.com
wedia-group.com
wedia-group.com
wedia-group.com
go.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
*.wedia-group.com
mediabox.erdfdistribution.fr
go.wedia-group.com
brandcenter.enedis.fr
wedia-group.com
Certificate
The complete raw certificate details for bases-alienor.wedia-group.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAzH42HucyLMXMZxACRjAhGsNMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDMwNjAwMTdaFw0y MDAxMDEwNjAwMTdaMCgxJjAkBgNVBAMTHWJhc2VzLWFsaWVub3Iud2VkaWEtZ3Jv dXAuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvibBWi4To8Zm Aq/4e8MM21CIgoxjLMkM22wPulKdobs/d7o4mNQBf4D1LDzrNqWJStAb4PvIQgJ7 YCt8craaEZwFhgvi2NmjqX5jZ0ticl3TMP5HT+vmfW1ud2wTs/dlFZXmkkkf+PKV lEOJ0ipyehsAPJ/JD0ht5ukdSTjrLxCFl2vvK4Y4/00RXYMh93Jx49jrwGwrFCcv o2bnc//+UvCPod7Z3Rd8noSemGBI2ST7TD5l2iRZhRIF4PoqUyvXg/x3JqmMXX4A 7AM34gNf40swZSuja6h6PW1ssTRbc1CizPYRPft9QeyHf79mPXoQKRf+evxAShLm XX8qGgXtBwIDAQABo4IChDCCAoAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQXzECZ Aox197SP3324FhLXUe2kkTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMDsGA1UdEQQ0MDKCHWJhc2VzLWFsaWVub3Iud2Vk aWEtZ3JvdXAuY29tghFiYXNlcy5hbGllbm9yLm9yZzBMBgNVHSAERTBDMAgGBmeB DAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxl dHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1ALIeBcyLos2K IE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABbZBrWQcAAAQDAEYwRAIgT5FyXzDt 359HFAPivIbUQJlUwMAYkEFAcqzWi8/aZ/cCIDFN/HstTvanBPJxYwV+KsTyJzyB oRz2e7CjWK4d7LbNAHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMA AAFtkGtbEQAABAMARzBFAiEAlN2eDEnlZE6Dlky2yCM+l7EapC7BL09w3rIzRxH4 /lUCIDq7WREaNnC2XxwVt7A7a3bjhDWUjUuf7fSB6XJMPEiBMA0GCSqGSIb3DQEB CwUAA4IBAQBqgDoGDjDXz9Fo7Ybz2a7sY+Odytr3KJUFqbV5tSg5qXzBOp+0hI20 mvS/7XdWZT7rbKYJqltkPjoxwOfYwowbDQabXoCuYP3jMl9kdrwa2O3v1T4V6U2t vNy+v1lx2Fa+lrfAkTuLydXLoLHF0sNee0EGTG3Oza7+Gk4XM3qMRz7MER9o+8Sz QxRQY7kOQeyl5/dwZLje7pYm8RUuZ+EB89BV1Tm1ioUN+rc5TS1sJ6f8dhMpOWOg +rUW9lbOY3tsfSqx3IGDPYmO/pOQvaRglwmj1SyJoESMou1xSAiuBswqrGtvgPpZ Fp2zAIrAhVsxUTUw4BplOj1RtwFnfuLP -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvibBWi4To8ZmAq/4e8MM 21CIgoxjLMkM22wPulKdobs/d7o4mNQBf4D1LDzrNqWJStAb4PvIQgJ7YCt8craa EZwFhgvi2NmjqX5jZ0ticl3TMP5HT+vmfW1ud2wTs/dlFZXmkkkf+PKVlEOJ0ipy ehsAPJ/JD0ht5ukdSTjrLxCFl2vvK4Y4/00RXYMh93Jx49jrwGwrFCcvo2bnc//+ UvCPod7Z3Rd8noSemGBI2ST7TD5l2iRZhRIF4PoqUyvXg/x3JqmMXX4A7AM34gNf 40swZSuja6h6PW1ssTRbc1CizPYRPft9QeyHf79mPXoQKRf+evxAShLmXX8qGgXt BwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 278341466360640915419421218427067206757133 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-03 06:00:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-01 06:00:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bases-alienor.wedia-group.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24004388885521617707974916782940174343342919155319407227636361581842824815401960167163842106004240177238349300363321215357988593688838588780894243803728194221172567689919316147324759995386891803344327143399292271595265956408541269143455398102200162167784466293652961293852010752939229807246948977824498489984920499340200302580492661286127741701863147712973759270896336009476085375183815338337767384700154539014641759207827210654517439560460769699313297629112853302994250247301529423804835929853767713269883873514062232755626173840523567807401182504753267060029382139816677678427195343928127068521052507738415825284359 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 17cc4099028c75f7b48fdf7db81612d751eda491 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bases-alienor.wedia-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bases.alienor.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016d906b5907000004030046304402204f91725f30eddf9f471403e2bc86d4409954c0c01890414072acd68bcfda67f70220314dfc7b2d4ef6a704f27163057e2ac4f2273c81a11cf67bb0a358ae1decb6cd007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016d906b5b11000004030047304502210094dd9e0c49e5644e83964cb6c8233e97b11aa42ec12f4f70deb2334711f8fe5502203abb59111a3670b65f1c15b7b03b6b76e38435948d4b9fedf481e9724c3c4881 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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