cats.customer.ingenit.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:fa:9d:96:a9:07:97:41:07:9d:33:8d:88:52:43:f3:10:d0 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cats.customer.ingenit.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:fa:9d:96:a9:07:97:41:07:9d:33:8d:88:52:43:f3:10:d0Serial Number (int): 346616920593710998829255396689781984530640
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ba:c5:20:a5:28:aa:d6:9c:b3:38:12:cc:bf:7d:92:3d:06:05:74:75
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c5:f5:70:3f:65:67:01:5a:8b:39:ae:32:66:81:40:b4:1e:94:11:75
Fingerprint (sha256): 5c:f5:5d:4d:7c:08:52:fb:4b:a1:2c:f5:89:29:e9:f7:77:4f:e2:ce:88:93:63:c5:e5:70:5f:0e:fe:b6:6c:10
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate cats.customer.ingenit.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cats.customer.ingenit.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cats.customer.ingenit.com
secure.cats.customer.ingenit.com
wbt.cats.customer.ingenit.com
secure.cats.customer.ingenit.com
wbt.cats.customer.ingenit.com
Other certificates including the domain name ingenit.com
(limited to 100 certificates)
*.projects.ingenit.com
portal.skpcloud2.ingenit.com
skpcloud2.ingenit.com
*.ingenit.com
sni90887.cloudflaressl.com
stwh.customer.ingenit.com
*.ingenit.com
sni90887.cloudflaressl.com
peerpricing.skpcloud2.ingenit.com
app.stwh.customer.ingenit.com
skpcloud2.ingenit.com
*.projects.ingenit.com
sni.cloudflaressl.com
sni90887.cloudflaressl.com
sni90887.cloudflaressl.com
*.ingenit.com
sni90887.cloudflaressl.com
*.ingenit.com
support-vm.ingenit.com
app.stwh.customer.ingenit.com
pwg.skpcloud2.ingenit.com
sni90887.cloudflaressl.com
catsaviation.com
*.local.ingenit.com
sni90887.cloudflaressl.com
api-dop.catsaviation.com
sni90887.cloudflaressl.com
cats.customer.ingenit.com
tableau.skpcloud2.ingenit.com
sni90887.cloudflaressl.com
support-vm.ingenit.com
catsaviation.com
*.ingenit.com
sni90887.cloudflaressl.com
app.stwh.customer.ingenit.com
sni90887.cloudflaressl.com
sni90887.cloudflaressl.com
sni.cloudflaressl.com
sni90887.cloudflaressl.com
app.stwh.customer.ingenit.com
*.ingenit.com
skpcloud2.ingenit.com
ingenit.com
sni90887.cloudflaressl.com
*.ingenit.com
sni90887.cloudflaressl.com
*.ingenit.com
api-dop.catsaviation.com
api-dop.catsaviation.com
catsaviation.com
*.projects.ingenit.com
*.local.ingenit.com
sni90887.cloudflaressl.com
*.ingenit.com
sni90887.cloudflaressl.com
ingenit.com
skpcloud2.ingenit.com
catsaviation.com
*.local.ingenit.com
*.local.ingenit.com
sni90887.cloudflaressl.com
*.projects.ingenit.com
app.stwh.customer.ingenit.com
sni90887.cloudflaressl.com
sni90887.cloudflaressl.com
taktkin.customer.ingenit.com
sni90887.cloudflaressl.com
*.projects.ingenit.com
tableau.skpcloud2.ingenit.com
sni90887.cloudflaressl.com
skpcloud2.ingenit.com
sni.cloudflaressl.com
sni90887.cloudflaressl.com
app.stwh.customer.ingenit.com
*.projects.ingenit.com
support-vm.ingenit.com
ingenit.com
catsaviation.com
portal.skpcloud2.ingenit.com
skpcloud2.ingenit.com
*.ingenit.com
sni90887.cloudflaressl.com
stwh.customer.ingenit.com
*.ingenit.com
sni90887.cloudflaressl.com
peerpricing.skpcloud2.ingenit.com
app.stwh.customer.ingenit.com
skpcloud2.ingenit.com
*.projects.ingenit.com
sni.cloudflaressl.com
sni90887.cloudflaressl.com
sni90887.cloudflaressl.com
*.ingenit.com
sni90887.cloudflaressl.com
*.ingenit.com
support-vm.ingenit.com
app.stwh.customer.ingenit.com
pwg.skpcloud2.ingenit.com
sni90887.cloudflaressl.com
catsaviation.com
*.local.ingenit.com
sni90887.cloudflaressl.com
api-dop.catsaviation.com
sni90887.cloudflaressl.com
cats.customer.ingenit.com
tableau.skpcloud2.ingenit.com
sni90887.cloudflaressl.com
support-vm.ingenit.com
catsaviation.com
*.ingenit.com
sni90887.cloudflaressl.com
app.stwh.customer.ingenit.com
sni90887.cloudflaressl.com
sni90887.cloudflaressl.com
sni.cloudflaressl.com
sni90887.cloudflaressl.com
app.stwh.customer.ingenit.com
*.ingenit.com
skpcloud2.ingenit.com
ingenit.com
sni90887.cloudflaressl.com
*.ingenit.com
sni90887.cloudflaressl.com
*.ingenit.com
api-dop.catsaviation.com
api-dop.catsaviation.com
catsaviation.com
*.projects.ingenit.com
*.local.ingenit.com
sni90887.cloudflaressl.com
*.ingenit.com
sni90887.cloudflaressl.com
ingenit.com
skpcloud2.ingenit.com
catsaviation.com
*.local.ingenit.com
*.local.ingenit.com
sni90887.cloudflaressl.com
*.projects.ingenit.com
app.stwh.customer.ingenit.com
sni90887.cloudflaressl.com
sni90887.cloudflaressl.com
taktkin.customer.ingenit.com
sni90887.cloudflaressl.com
*.projects.ingenit.com
tableau.skpcloud2.ingenit.com
sni90887.cloudflaressl.com
skpcloud2.ingenit.com
sni.cloudflaressl.com
sni90887.cloudflaressl.com
app.stwh.customer.ingenit.com
*.projects.ingenit.com
support-vm.ingenit.com
ingenit.com
catsaviation.com
Certificate
The complete raw certificate details for cats.customer.ingenit.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISA/qdlqkHl0EHnTONiFJD8xDQMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMzExMjU2MzZaFw0y MDA0MzAxMjU2MzZaMCQxIjAgBgNVBAMTGWNhdHMuY3VzdG9tZXIuaW5nZW5pdC5j b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq3u20GA3s1VZDFUqf mDpd/KlRQFaJ92B0FXWboJPSWoTK5J600a+Iaiw3NX6D+c65iyNzhryBiPcwv/N3 xuRySveMzi5Emdkll+M/dA2P24jipOUUm10kxp3CLUhtaNFItmtWdqqbwX9sr0mn aS897T1G1YmFlbJqlqeDuDB7WKADCuwxZP3r5K2Bmwd9d/QkMxSBNc8vD4nOvl/R UwTTBf+T7GGTVYoMxc/kUjEOtAGgnWNKc6ukfew/q8R9n8D9YfkeusydtILAghoy /cSOZ83MzXiFWoVf65u68NHusaIfIzxEABBsdI7pKlvFvrfCdREnzxNRL76LYgRJ 5LBXAgMBAAGjggKuMIICqjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLrFIKUoqtac szgSzL99kj0GBXR1MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wZQYDVR0RBF4wXIIZY2F0cy5jdXN0b21lci5pbmdlbml0 LmNvbYIgc2VjdXJlLmNhdHMuY3VzdG9tZXIuaW5nZW5pdC5jb22CHXdidC5jYXRz LmN1c3RvbWVyLmluZ2VuaXQuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysG AQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu b3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAXqdz+d9WwOe1Nkh90EngMnqR mgyEoRIShBh1loFxRVgAAAFv++OgPAAABAMARjBEAiBdyRY32pQKsmX0c+swzJ95 h5NLArxR/hnngVt8gngYZwIgbf7eUBy+VyJkiSHJVe/Br/Ku0Gtq/VAH3epm5fnX I1kAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW/746A8AAAE AwBHMEUCIQDWAEfJGeIaSqXkwHeHRMg/AoXO/bAEamFcfO6fviw58AIgPHLLYv6a YLfiAeed9j6HIHIwSD7Kbwn3QCqtVVrzgTAwDQYJKoZIhvcNAQELBQADggEBABc0 cH45KRJ5TRl+ey11g05+bIhPW1b3nWEdO8T4xn38qTsvYHUvmy9fOLSkQcADyMFr Q12Idg95dhAXqKzjQ4kkPxzl961kGEr/g2NqX5kfhrbOpFodmqOcIEe4tJzNUwy8 wFdbubc/zl0IrOA1AeFMyVfBSreWwZF1itvpwFfEzyH4Tn4uIkdrQ5zEGQvpeQrU efGLWsCDLRdHV7BNnuBLZiS5I+y694YQKtJNSDf9vatPWj10j3jF0FJraiNWZSVj nBmUS16ZK+kYTvmpEvcDtf5cWPw7WoVnOueGYZnfQ9DIeFbLp2xukVm1EBM89pUY yNYMVIRr5S7XU58MOLE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6t7ttBgN7NVWQxVKn5g6 XfypUUBWifdgdBV1m6CT0lqEyuSetNGviGosNzV+g/nOuYsjc4a8gYj3ML/zd8bk ckr3jM4uRJnZJZfjP3QNj9uI4qTlFJtdJMadwi1IbWjRSLZrVnaqm8F/bK9Jp2kv Pe09RtWJhZWyapang7gwe1igAwrsMWT96+StgZsHfXf0JDMUgTXPLw+Jzr5f0VME 0wX/k+xhk1WKDMXP5FIxDrQBoJ1jSnOrpH3sP6vEfZ/A/WH5HrrMnbSCwIIaMv3E jmfNzM14hVqFX+ubuvDR7rGiHyM8RAAQbHSO6Spbxb63wnURJ88TUS++i2IESeSw VwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 346616920593710998829255396689781984530640 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-31 12:56:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-30 12:56:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cats.customer.ingenit.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29649693516991659335750722747021616597563433894197435315347088785637304455875769312499213630259517229703993408689774034573337906529488070842176842965995062066478167181229989993102236728849150206572293722426359018782059862188406474070735498369131018064340842389513339870791401825893721288294570753562910636749768461032721423090492211109643528572116223192907713125613091624142825053749477789372479260993698067982907779204999759622326651555651119403725935502342990676726492995472042295781210702824550572651888512017188889757717498668370489578814774844297251233007173378730492747204235046851040313782217681202499861917783 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bac520a528aad69cb33812ccbf7d923d06057475 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cats.customer.ingenit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cats.customer.ingenit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbt.cats.customer.ingenit.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ffbe3a03c000004030046304402205dc91637da940ab265f473eb30cc9f7987934b02bc51fe19e7815b7c8278186702206dfede501cbe5722648921c955efc1aff2aed06b6afd5007ddea66e5f9d72359007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ffbe3a03c0000040300473045022100d60047c919e21a4aa5e4c0778744c83f0285cefdb0046a615c7cee9fbe2c39f002203c72cb62fe9a60b7e201e79df63e87207230483eca6f09f7402aad555af38130 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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