corpoapp.wast.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f3:55:16:3e:99:f6:3f:5f:a4:18:7f:7d:c1:e4:36:88:1a was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=corpoapp.wast.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:55:16:3e:99:f6:3f:5f:a4:18:7f:7d:c1:e4:36:88:1a
Serial Number (int): 344138572836948906394356923098202165905434
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 49:c2:de:2d:53:f8:da:af:6c:40:72:52:ef:8d:24:55:ce:d1:62:59
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:f7:d6:39:82:65:7c:28:88:24:de:e1:33:0a:0a:a8:fc:61:a5:68
Fingerprint (sha256): 73:1e:83:1f:33:84:6e:dd:23:cc:ec:4c:ad:03:9a:53:40:0f:74:ce:d7:10:48:0b:60:d5:a0:80:97:2e:f4:e4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate corpoapp.wast.fr

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for corpoapp.wast.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adventure.tyf.com
ammonia.3bz.co.uk
app.tryspecter.com
assetmanagement.genesis-tec.com
c4approval.converge-digital.com
check.ticketpay.de
client.lesbottes.ch
complex1.propertydashboard.co.za
complex2.propertydashboard.co.za
contractor.captivatesolutions.org
corpoapp.wast.fr
coty.asecca.co.uk
creditduediligence.polymathandboffinrems.com
db.weconnectminds.com
designer.captivatesolutions.org
fieldservice.mango-solar.de
grc.orangeoaks.nl
grim.sesam.secoiam.fr
hosting.oblonet.cloud
inhus.dsst.lt
itbytesize.euvrg.com
kunden-portal.ccsys.de
login.aimloop.com
members.icssweep.co.uk
my.answerbee.co.uk
my.converge-digital.com
my.orgavoice.com
my.sixlinks.com
myapp.atelieruldeit.ro
neptune.rotarod.co.uk
nova.tutorsunited.org
partner.billyard.de
partnership.coherenze.com
pat.acegasapsamga.it
permissions.genesis-tec.com
portaal.damenshipleasefinance.nl
portal.avatarjo.co.uk
portal.bathpilates.co.uk
portal.damenshipleasefinance.nl
portal.ezireturns.com
portal.pleaseconnectme.co.uk
portal.tonbridgedancefestival.co.uk
privacy.appzco.uk
richieste.acegasapsamga.it
rteapproval.converge-digital.com
select.converge-digital.com
signature.genesis-tec.com
ssioforms.euvrg.com
startersleavers.genesis-tec.com
trades.wineowners.com
tv3approval.converge-digital.com
v2.dieschrankhelden.de
vehiclechecks.genesis-tec.com
virtualvda.intelauto.co.uk
wanapptest.workapp.be
www.f2b2.org
www.fernoxwqt.com
www.isp-proof-of-concept.com
www.sovereigntesting.com
www.swaletesting.com
www.test.sencontrol.com
www.yfcmedlem.dk

Other certificates including the domain name wast.fr

(limited to 100 certificates)

Certificate

The complete raw certificate details for corpoapp.wast.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTSo6MstSalb2tHX7/M9
nTJJ9qxf4jMdgPwDRDIZk5mSnpIKUezB1lkCRGmchb1wRejNm4/CTHvWD7a8IwSq
IzUBpd7gijAHDZwYVqoSr4uEFNkWoquCmWNrpBt2tuoShI7VubH7A87swEjMA93G
eMnPX4EbeBouQ5n9vOpQd4/yUehAKIxZFThQFQUozNdL2MlDsixhdF6US4/nfxmk
hqDTasdX4M63R2NFH9n1VbA5KiXpim5+bUPqTnU/uAmIjh8AuoqZu0a1fTPBqULg
MS57fJSZVrycrpeAyu3Rc1sB9CSHTB8e+xUWw1T2oSqCUSU96y8sk1k3d+ECpixe
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344138572836948906394356923098202165905434
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 22:00:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-21 22:00:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'corpoapp.wast.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19845381395933633089571693182426778247512406940643254135344481241926469954221925333638510370462308737925249655004097040400206885060275247199432638141298478477490525708380054281467322566786899356569674464172009398751963850366855664552727688651994681504908247521011876728187638085173446606766697424832865201810586245379298912266852011887628903297462996066522898050492916995784839190269630174616322314017836878561322937534147878233737227123266081044849441117962502107362168447294229666859897236362949217775900710086624942775033987687980322443895610527042462884092921138166637196215683573545581609486945641772182443679281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49c2de2d53f8daaf6c407252ef8d2455ced16259
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1572 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventure.tyf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ammonia.3bz.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tryspecter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.genesis-tec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c4approval.converge-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'check.ticketpay.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.lesbottes.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'complex1.propertydashboard.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'complex2.propertydashboard.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contractor.captivatesolutions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpoapp.wast.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coty.asecca.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditduediligence.polymathandboffinrems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'db.weconnectminds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designer.captivatesolutions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldservice.mango-solar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grc.orangeoaks.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grim.sesam.secoiam.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosting.oblonet.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inhus.dsst.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itbytesize.euvrg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kunden-portal.ccsys.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.aimloop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.icssweep.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.answerbee.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.converge-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.orgavoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.sixlinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myapp.atelieruldeit.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neptune.rotarod.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nova.tutorsunited.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.billyard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnership.coherenze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pat.acegasapsamga.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permissions.genesis-tec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaal.damenshipleasefinance.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.avatarjo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.bathpilates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.damenshipleasefinance.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ezireturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.pleaseconnectme.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.tonbridgedancefestival.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.appzco.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richieste.acegasapsamga.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rteapproval.converge-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'select.converge-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature.genesis-tec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssioforms.euvrg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startersleavers.genesis-tec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trades.wineowners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv3approval.converge-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.dieschrankhelden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehiclechecks.genesis-tec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualvda.intelauto.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanapptest.workapp.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.f2b2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fernoxwqt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isp-proof-of-concept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereigntesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swaletesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.sencontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yfcmedlem.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017069fb6e7b000004030046304402201a9ff90340cb93340b2a92677955e2d1164ecea431747e9ee42bebbed5c684a20220790a840861aa2205020925cc44839504377681b6b862532202eda15607599b1e00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017069fb6ea70000040300473045022100eb4ac1297d49a6442b72f29e616453333e393ffc0a920244eb0d32dede46def00220569cd31b05289d12a7f41037c2d2ed4baaf1c3651b4723950b49a0b1cee6a981
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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