kif.rocks
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:52:5b:fe:f8:c9:b2:e8:59:4a:fa:3a:3f:1c:fb:13:77:c0 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kif.rocks
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:52:5b:fe:f8:c9:b2:e8:59:4a:fa:3a:3f:1c:fb:13:77:c0Serial Number (int): 289362295519834000729713763347283074840512
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 52:f4:03:9a:c7:df:00:f5:4d:31:06:7c:56:a3:fa:b4:55:ad:e9:c8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 11:4a:80:b1:e9:2d:7e:8a:56:d2:56:b4:7c:f2:bd:f2:7d:92:c2:49
Fingerprint (sha256): 7c:dc:88:84:ae:a8:a1:de:5f:5a:cc:c0:39:a3:67:9b:b2:71:26:f7:78:9d:86:fe:4f:dd:4e:e1:64:e4:72:8b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate kif.rocks
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kif.rocks
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kif.rocks
Other certificates including the domain name kif.rocks
(limited to 100 certificates)
pretix.460.kif.rocks
podcast.kif.rocks
wiki.kif.rocks
plenum.kif.rocks
wiki.kif.rocks
kif.rocks
md.kif.rocks
kif.rocks
kif.rocks
riot.kif.rocks
kif.rocks
apfifoges.stugen.de
engel.kif.rocks
apfifoges.stugen.de
tix.kif.rocks
kif.rocks
md.kif.rocks
kifplan.d120.de
riot.kif.rocks
toot.kif.rocks
plenum.fsmpi.rwth-aachen.de
kifplan.d120.de
engel.480.kif.rocks
pretix.460.kif.rocks
riot.kif.rocks
tix.kif.rocks
apfifoges.stugen.de
pretix.460.kif.rocks
daemon.465.kif.rocks
md.kif.rocks
kif.rocks
matrix.kif.rocks
kif.rocks
kif.rocks
apfifoges.stugen.de
engel.475.kif.rocks
toot.kif.rocks
apfifoges.stugen.de
riot.kif.rocks
podcast.kif.rocks
toot.kif.rocks
engel.kif.rocks
toot.kif.rocks
toot.kif.rocks
apfifoges.stugen.de
apfifoges.stugen.de
matrix.kif.rocks
engel.475.kif.rocks
gallery.kif.rocks
podcast.kif.rocks
riot.kif.rocks
kif.rocks
riot.kif.rocks
engel.460.kif.rocks
md.kif.rocks
riot.kif.rocks
kif.rocks
md.kif.rocks
kif.rocks
riot.kif.rocks
podcast.kif.rocks
md.kif.rocks
toot.kif.rocks
matrix.kif.rocks
riot.kif.rocks
podcast.kif.rocks
gallery.kif.rocks
apfifoges.stugen.de
md.kif.rocks
kdv.kif.rocks
toot.kif.rocks
kif.rocks
pretix.460.kif.rocks
tix.kif.rocks
matrix.kif.rocks
470.kif.rocks
tix.kif.rocks
riot.kif.rocks
apfifoges.stugen.de
pretix.460.kif.rocks
engel.460.kif.rocks
plenum.fsmpi.rwth-aachen.de
*.kif.rocks
kif.rocks
md.kif.rocks
460.kif.rocks
engel.475.kif.rocks
apfifoges.stugen.de
md.kif.rocks
toot.kif.rocks
460.kif.rocks
engel.460.kif.rocks
md.kif.rocks
md.kif.rocks
kif.rocks
podcast.kif.rocks
460.kif.rocks
kif.rocks
460.kif.rocks
engel.kif.rocks
podcast.kif.rocks
wiki.kif.rocks
plenum.kif.rocks
wiki.kif.rocks
kif.rocks
md.kif.rocks
kif.rocks
kif.rocks
riot.kif.rocks
kif.rocks
apfifoges.stugen.de
engel.kif.rocks
apfifoges.stugen.de
tix.kif.rocks
kif.rocks
md.kif.rocks
kifplan.d120.de
riot.kif.rocks
toot.kif.rocks
plenum.fsmpi.rwth-aachen.de
kifplan.d120.de
engel.480.kif.rocks
pretix.460.kif.rocks
riot.kif.rocks
tix.kif.rocks
apfifoges.stugen.de
pretix.460.kif.rocks
daemon.465.kif.rocks
md.kif.rocks
kif.rocks
matrix.kif.rocks
kif.rocks
kif.rocks
apfifoges.stugen.de
engel.475.kif.rocks
toot.kif.rocks
apfifoges.stugen.de
riot.kif.rocks
podcast.kif.rocks
toot.kif.rocks
engel.kif.rocks
toot.kif.rocks
toot.kif.rocks
apfifoges.stugen.de
apfifoges.stugen.de
matrix.kif.rocks
engel.475.kif.rocks
gallery.kif.rocks
podcast.kif.rocks
riot.kif.rocks
kif.rocks
riot.kif.rocks
engel.460.kif.rocks
md.kif.rocks
riot.kif.rocks
kif.rocks
md.kif.rocks
kif.rocks
riot.kif.rocks
podcast.kif.rocks
md.kif.rocks
toot.kif.rocks
matrix.kif.rocks
riot.kif.rocks
podcast.kif.rocks
gallery.kif.rocks
apfifoges.stugen.de
md.kif.rocks
kdv.kif.rocks
toot.kif.rocks
kif.rocks
pretix.460.kif.rocks
tix.kif.rocks
matrix.kif.rocks
470.kif.rocks
tix.kif.rocks
riot.kif.rocks
apfifoges.stugen.de
pretix.460.kif.rocks
engel.460.kif.rocks
plenum.fsmpi.rwth-aachen.de
*.kif.rocks
kif.rocks
md.kif.rocks
460.kif.rocks
engel.475.kif.rocks
apfifoges.stugen.de
md.kif.rocks
toot.kif.rocks
460.kif.rocks
engel.460.kif.rocks
md.kif.rocks
md.kif.rocks
kif.rocks
podcast.kif.rocks
460.kif.rocks
kif.rocks
460.kif.rocks
engel.kif.rocks
Certificate
The complete raw certificate details for kif.rocks in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgISA1Jb/vjJsuhZSvo6Pxz7E3fAMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MDkyMjUxNTdaFw0x ODExMDcyMjUxNTdaMBQxEjAQBgNVBAMTCWtpZi5yb2NrczCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAPmCinuAevHJ2oKu2KgvwDCiH7FHwEEPVGWBEhkP qWtafg5MHr6MSQeP+sbXW70LAif9thL2H398YXzXsX0e0sjNjuxHHP8UpXzhkbQ3 Ct6Bec+DFJ7mMQhWLpw4notiDSXqRZ9f23OrYaEcTO0cirS32Nb+PSJHq3GNsGSb cC8iz7WcRtA9lMxbvLfFWq1yiXbJHCOCl0I7AWW3evfXbTkzD0gLbKkHabG5MUfO kEE9roDcZVRJRxI5Uhdgi6NvqvGTXJGZsF8SZPBfJ/C1Es5xWR0qW6BE+YI5+qsS TBXjX8iCelv7k2YnNQPr5R99VC3hSPGVwMY2l20lwas/AXxBEUKHu68kJOQIdDcB HwlPf7StUVK+9AUQEqJwp47ErhoiB88qoBe+UAUAWXkKsD/sjBTDtjQDdxdvXik2 2eLdShWQJMctG45jSyza34wEjW7FwIUJQPgwPVYyc7tSpjcs13ydiXUHJ7T/eS4t cRNs5U/5QBun+eUFNgI7/aS1eM0lAAyEZTgYYRQWhPhse/YNFl/v5VEhc1xieNRW 9aMeOHnZUlRv4jMzGmU6d+ZDtNdDvjxqqYbRoVGQ8gRsRj3r14qH9JFE/PHCr6pO styL1t7uKJuLRLX+4xSFn5P37vHGjjgXsJyis87d0AXRF86IYl2EHlwBdIG6KB+B A2zDAgMBAAGjggMQMIIDDDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFL0A5rH3wD1 TTEGfFaj+rRVrenIMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJa2lmLnJvY2tzMIH+BgNVHSAEgfYw gfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0 cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBD ZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBh cnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0 ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3Np dG9yeS8wggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgDbdK/uyynssf7KPnFtLOW5 qrs294Rxg8ddnU83th+/ZAAAAWUhGp8mAAAEAwBHMEUCIQCRhp8w0PGRzvswlawq QPXmAjrd6EaQVgobPdcFLkDQxAIgcEk7uc2iW/GwWIB9zLmht6/+Hk628NM3h4HI uhVBgh8AdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWUhGqEm AAAEAwBGMEQCIGSNEph5Xma0z5oHOxB2y/1HAFpSeXlur80Q4M69qoJQAiBaLyTX VNOZuvfYDzXWLwiY0KUqjbVebb5aE4dmOdO3yzANBgkqhkiG9w0BAQsFAAOCAQEA USNGmxGNbC4DpYqHG1Kg8CiPHOIu8B1WkDqg9+MnHaR25Td873D07J2jlCEPaN0t /XF/7PDb98uUfQU7Knp2zwFgKQN1zUriKXLQCycB++XvOt0RKAThzmqx2LHxCI4w 25eEN2Pxl2IfkbM0qJBmiFQu9ZsRofchPrF+chZxi6kHm/kWLs5IDmXRWurhF7DK Le/iVmU6wv6NxhxZZ3Q6ScPKbOgHLObEfg3ngetXH8yAN+jFSiVkgPaVc3nIioSv LqS3mWI6UvdxQJbLtRzca3xEey7prkWugbeajs8wh6yYuSFQRLGNBHWrgLzZIz5y gWvzeO44ip5XL0LUKSmKug== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA+YKKe4B68cnagq7YqC/A MKIfsUfAQQ9UZYESGQ+pa1p+DkwevoxJB4/6xtdbvQsCJ/22EvYff3xhfNexfR7S yM2O7Ecc/xSlfOGRtDcK3oF5z4MUnuYxCFYunDiei2INJepFn1/bc6thoRxM7RyK tLfY1v49IkercY2wZJtwLyLPtZxG0D2UzFu8t8VarXKJdskcI4KXQjsBZbd699dt OTMPSAtsqQdpsbkxR86QQT2ugNxlVElHEjlSF2CLo2+q8ZNckZmwXxJk8F8n8LUS znFZHSpboET5gjn6qxJMFeNfyIJ6W/uTZic1A+vlH31ULeFI8ZXAxjaXbSXBqz8B fEERQoe7ryQk5Ah0NwEfCU9/tK1RUr70BRASonCnjsSuGiIHzyqgF75QBQBZeQqw P+yMFMO2NAN3F29eKTbZ4t1KFZAkxy0bjmNLLNrfjASNbsXAhQlA+DA9VjJzu1Km NyzXfJ2JdQcntP95Li1xE2zlT/lAG6f55QU2Ajv9pLV4zSUADIRlOBhhFBaE+Gx7 9g0WX+/lUSFzXGJ41Fb1ox44edlSVG/iMzMaZTp35kO010O+PGqphtGhUZDyBGxG PevXiof0kUT88cKvqk6y3IvW3u4om4tEtf7jFIWfk/fu8caOOBewnKKzzt3QBdEX zohiXYQeXAF0gbooH4EDbMMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 289362295519834000729713763347283074840512 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-09 22:51:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-07 22:51:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kif.rocks' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1017911687780830787708770852259504886099655615385040056774751478400638627115987511715906058686387245863318178579208587319238569260386795853855390042820812003831986147757116165802801283700889808083284466379281450636481519671760017882855445092353977426214481824220325436141551008126927492337020450360328210504900127052384549312563552118502231757305421076399672556945186919132036045788796506832521439323560538314429947252734560923780558607877764724222308818584280743008947713385649732738088308050996790724563211983952455573483711408155749464767354961778123438103001611538088757716686485985439752054213470249162850053379882262199993907112697601394967840102939816585534241579589328841275631776736020742576555812138510075533047825690501079388415057175217648135378579347006510360099909733542953828016967494768291165973609848699541574479495155689215383245832590351422641046698781953909335374421955468257139840236662161675124124288522752907982375446637419519559266077440231427304550843322815146224830828091859341776197931804235354443610009546936638392349606422682891709178018861896546858400249423300042248628736664755850740070415178615343498325998200730245040697532482464185506309474720188181795863593720056737890024220060973075738018093165763 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 52f4039ac7df00f54d31067c56a3fab455ade9c8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kif.rocks' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165211a9f26000004030047304502210091869f30d0f191cefb3095ac2a40f5e6023adde84690560a1b3dd7052e40d0c4022070493bb9cda25bf1b058807dccb9a1b7affe1e4eb6f0d3378781c8ba1541821f007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165211aa12600000403004630440220648d1298795e66b4cf9a073b1076cbfd47005a5279796eafcd10e0cebdaa825002205a2f24d754d399baf7d80f35d62f0898d0a52a8db55e6dbe5a13876639d3b7cb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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