ribacertifica.nersant.pt
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:21:ff:ae:18:f4:8b:0b:0c:dd:23:2d:6f:a6:02:24:58:ce was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ribacertifica.nersant.pt
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:21:ff:ae:18:f4:8b:0b:0c:dd:23:2d:6f:a6:02:24:58:ceSerial Number (int): 272906033008402781758178329972261154740430
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b2:4c:23:2b:89:57:79:7b:62:b8:23:c6:77:8f:82:bc:4d:74:1f:a0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 66:c5:77:25:9e:89:35:04:68:5b:98:97:4e:bc:97:17:06:9b:b2:5c
Fingerprint (sha256): 81:24:d1:e2:de:59:09:73:70:3b:ea:61:0d:e9:5f:31:53:83:88:15:87:de:89:0b:d4:d1:b9:ec:05:a6:78:5b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ribacertifica.nersant.pt
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ribacertifica.nersant.pt
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ribacertifica.nersant.pt
Other certificates including the domain name nersant.pt
(limited to 100 certificates)
startup-santarem.nersant.pt
negocios.nersant.pt
nersant.pt
sitiodoempreendedor.nersant.pt
truckr.me
incubarmaisleziria.nersant.pt
ribacertifica.nersant.pt
gesinov.nersant.pt
diogo-santos.com
www.tcff.co
nersant.pt
stg.propo.fm
startup-santarem.nersant.pt
moodle.nersant.pt
startup-ourem.nersant.pt
minimoly.com
negocios.nersant.pt
www.father.beer
ribacertifica.nersant.pt
inqueritos.nersant.pt
www.business.nersant.pt
incubarmaisleziria.nersant.pt
repositorio.nersant.pt
www.nfd2019.live
inqueritos.nersant.pt
startup-ourem.nersant.pt
ribacertifica.nersant.pt
www.tombscoaching.co.uk
business.nersant.pt
bioware.nersant.pt
incubarmaisleziria.nersant.pt
sitiodoempreendedor.nersant.pt
nersant.pt
gesinov.nersant.pt
ribacertifica.nersant.pt
bolsaideias.nersant.pt
app.fruitful.ag
inovpme.nersant.pt
nersant.pt
ribacertifica.nersant.pt
ribacertifica.nersant.pt
business2021.nersant.pt
www.nfd2019.live
ribacertifica.nersant.pt
moodle.nersant.pt
bolsaideias.nersant.pt
gesinov.nersant.pt
negocios.nersant.pt
moodle.nersant.pt
inovpme.nersant.pt
inqueritos.nersant.pt
demo.expressquote.mx
gesinov.nersant.pt
admin.jarous.com
business.nersant.pt
inqueritos.nersant.pt
moodle.nersant.pt
bioware.nersant.pt
moodle.nersant.pt
bioware.nersant.pt
gesinov.nersant.pt
nersant.pt
www.sgp2019.com
incubarmaisleziria.nersant.pt
ribacertifica.nersant.pt
repositorio.nersant.pt
ribacertifica.nersant.pt
ribacertifica.nersant.pt
nersant.pt
www.strassen.co
bolsaideias.nersant.pt
nersant.pt
ribacertifica.nersant.pt
gocab.com.mx
startup-santarem.nersant.pt
inovpme.nersant.pt
inqueritos.nersant.pt
admin.digme.dk
bolsaideias.nersant.pt
david.govea.tech
leziria-sustentavel.nersant.pt
incubarmaisleziria.nersant.pt
nersant.pt
startup-ourem.nersant.pt
repositorio.nersant.pt
demo.expressquote.mx
admin.sparta.sportkit.app
startup-santarem.nersant.pt
bolsaideias.nersant.pt
www.father.beer
nersant.pt
nersant.pt
bioware.nersant.pt
staging.xuxu.fund
backend.hirmer-hospitality.de
ribacertifica.nersant.pt
gesinov.nersant.pt
nersant.pt
ribacertifica.nersant.pt
ribacertifica.nersant.pt
negocios.nersant.pt
nersant.pt
sitiodoempreendedor.nersant.pt
truckr.me
incubarmaisleziria.nersant.pt
ribacertifica.nersant.pt
gesinov.nersant.pt
diogo-santos.com
www.tcff.co
nersant.pt
stg.propo.fm
startup-santarem.nersant.pt
moodle.nersant.pt
startup-ourem.nersant.pt
minimoly.com
negocios.nersant.pt
www.father.beer
ribacertifica.nersant.pt
inqueritos.nersant.pt
www.business.nersant.pt
incubarmaisleziria.nersant.pt
repositorio.nersant.pt
www.nfd2019.live
inqueritos.nersant.pt
startup-ourem.nersant.pt
ribacertifica.nersant.pt
www.tombscoaching.co.uk
business.nersant.pt
bioware.nersant.pt
incubarmaisleziria.nersant.pt
sitiodoempreendedor.nersant.pt
nersant.pt
gesinov.nersant.pt
ribacertifica.nersant.pt
bolsaideias.nersant.pt
app.fruitful.ag
inovpme.nersant.pt
nersant.pt
ribacertifica.nersant.pt
ribacertifica.nersant.pt
business2021.nersant.pt
www.nfd2019.live
ribacertifica.nersant.pt
moodle.nersant.pt
bolsaideias.nersant.pt
gesinov.nersant.pt
negocios.nersant.pt
moodle.nersant.pt
inovpme.nersant.pt
inqueritos.nersant.pt
demo.expressquote.mx
gesinov.nersant.pt
admin.jarous.com
business.nersant.pt
inqueritos.nersant.pt
moodle.nersant.pt
bioware.nersant.pt
moodle.nersant.pt
bioware.nersant.pt
gesinov.nersant.pt
nersant.pt
www.sgp2019.com
incubarmaisleziria.nersant.pt
ribacertifica.nersant.pt
repositorio.nersant.pt
ribacertifica.nersant.pt
ribacertifica.nersant.pt
nersant.pt
www.strassen.co
bolsaideias.nersant.pt
nersant.pt
ribacertifica.nersant.pt
gocab.com.mx
startup-santarem.nersant.pt
inovpme.nersant.pt
inqueritos.nersant.pt
admin.digme.dk
bolsaideias.nersant.pt
david.govea.tech
leziria-sustentavel.nersant.pt
incubarmaisleziria.nersant.pt
nersant.pt
startup-ourem.nersant.pt
repositorio.nersant.pt
demo.expressquote.mx
admin.sparta.sportkit.app
startup-santarem.nersant.pt
bolsaideias.nersant.pt
www.father.beer
nersant.pt
nersant.pt
bioware.nersant.pt
staging.xuxu.fund
backend.hirmer-hospitality.de
ribacertifica.nersant.pt
gesinov.nersant.pt
nersant.pt
ribacertifica.nersant.pt
ribacertifica.nersant.pt
Certificate
The complete raw certificate details for ribacertifica.nersant.pt in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAyH/rhj0iwsM3SMtb6YCJFjOMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MTMyMTAyMDJaFw0x OTA5MTEyMTAyMDJaMCMxITAfBgNVBAMTGHJpYmFjZXJ0aWZpY2EubmVyc2FudC5w dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKxJIX8r5T+Gg3rKogME +8IRLKAMTKNnQWLIMhHEwd4gM24AGcpF1oYOGdBrM3eF4oJG+P3xyeOPl6NlLA8R n7oAQqY3N0MF60iQZALj23ZgITiB/VV486nl0UC66Y06NLv0w5zWGiy7N9/SMM2E dYvXTh7uzSXaCDU/cRMvUVTi6A9V9QsvxATQigpUo7I2yXi+G+b3qmksfQ06uVFg QSgH/IbHsw7cGWOdRiqdR/fttvBOyOL7EHuVbB30wsIy7MFGmU7E0El5j0h6TdRp 9aDrYnjRYJplYme4aUchI6YvyHQKwPDatqBXRnr6xKJVvQKr3jnxdU4lzHwM0tdB ZeMCAwEAAaOCAm0wggJpMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUskwjK4lXeXti uCPGd4+CvE10H6AwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzAjBgNVHREEHDAaghhyaWJhY2VydGlmaWNhLm5lcnNhbnQu cHQwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWtS 3LA0AAAEAwBHMEUCIQD0eQjlXbGXsfCck3IIveUTyUcecJqOFpnti2x4ljNIHwIg bI0QNbEYqrhaRZgkDYTH/4B0qIC4N7DX0pEEhR5egqcAdgBj8tvN6DvMLM8LcoQn V2szpI1hd4+9daY4scdoVEvYjQAAAWtS3LBZAAAEAwBHMEUCIFDh3asXhb/ol/BQ 2pEtOUxTFHEAPc4Z6XnRTuPWWyb8AiEAj4VgG5W5YcR/VWrbjy+EuapgECAZHH21 uoIW/vDsQ/swDQYJKoZIhvcNAQELBQADggEBAH38GWmIgSeEdlUjgtVk9kv6LQ9y r8xhvuR2q5EnetIQvyOq8vQJBu9XuGejo1YJi4HKyPI7xbW/lOIzBJqC0odaFU0A +gDNvCDXIutngQn2qAgYjxrY7tsAVymyN+SPkUgGoljYt35nda0Fqs5OKCL+KkGF hphbULBBZj+8eZDmpRDa/BM7Ij2PFuTda9BcYItE+wy4UDCc0L3wAqM5kHRzBrFk eExniRIMeVBIUzcfISmLbnpYQrln+2PtgwK1tecHPCBCnl6UqlNSj0wNAvPlZmx1 79BfVKE1o43TaKus2X0J+0ueNAmzy7sdn7JJ8cAP5etGsGN/DbWzCH2KLmI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEkhfyvlP4aDesqiAwT7 whEsoAxMo2dBYsgyEcTB3iAzbgAZykXWhg4Z0Gszd4Xigkb4/fHJ44+Xo2UsDxGf ugBCpjc3QwXrSJBkAuPbdmAhOIH9VXjzqeXRQLrpjTo0u/TDnNYaLLs339IwzYR1 i9dOHu7NJdoINT9xEy9RVOLoD1X1Cy/EBNCKClSjsjbJeL4b5veqaSx9DTq5UWBB KAf8hsezDtwZY51GKp1H9+228E7I4vsQe5VsHfTCwjLswUaZTsTQSXmPSHpN1Gn1 oOtieNFgmmViZ7hpRyEjpi/IdArA8Nq2oFdGevrEolW9AqveOfF1TiXMfAzS10Fl 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 272906033008402781758178329972261154740430 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 21:02:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 21:02:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ribacertifica.nersant.pt' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21749050618741201647602447601248538084398285625115797471081871510067535252826494178021345707645042391143703033135557634826478370860297320039204633355601468254581381009272253111881461451432436714588107721670245885029054433806713261729959593325346209146321391492870687766101616334035321927381794381684512308126976357707106436716003669451555019448823679883813522926370716322974473180253620196973763834738746874737762776566148906920230891865796282829265411132646329476797599515821370659166034275405181378928110589086871495911140682518331899576378404069933885051740851712704316401384548172725924588015817952907004341216739 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b24c232b8957797b62b823c6778f82bc4d741fa0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ribacertifica.nersant.pt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b52dcb0340000040300473045022100f47908e55db197b1f09c937208bde513c9471e709a8e1699ed8b6c789633481f02206c8d1035b118aab85a4598240d84c7ff8074a880b837b0d7d29104851e5e82a700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b52dcb0590000040300473045022050e1ddab1785bfe897f050da912d394c531471003dce19e979d14ee3d65b26fc0221008f85601b95b961c47f556adb8f2f84b9aa601020191c7db5ba8216fef0ec43fb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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