team-montage.dk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a3:38:f2:8f:32:c6:ed:cc:5e:57:fa:20:ae:d0:2e:33:dc was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=team-montage.dk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a3:38:f2:8f:32:c6:ed:cc:5e:57:fa:20:ae:d0:2e:33:dcSerial Number (int): 316878579811404977161939535453016606782428
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f8:02:5f:3b:71:67:53:d8:c6:6b:fc:6a:08:87:7e:fe:39:5a:7e:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b3:ee:1a:0b:d7:0e:3e:fe:29:9e:92:2d:ed:be:ef:d5:57:97:82:a4
Fingerprint (sha256): 8f:fe:db:e9:35:09:34:4a:df:87:51:39:d2:17:6c:ae:20:24:65:f5:84:65:e6:ed:76:db:e5:b0:69:47:2c:64
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate team-montage.dk
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for team-montage.dk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.mksalfaservice.dk
autodiscover.team-montage.dk
cpanel.mksalfaservice.dk
cpanel.team-montage.dk
mail.mksalfaservice.dk
mail.team-montage.dk
mksalfaservice.dk
mksalfaservice.fronto.dk
team-montage.dk
team-montage.fronto.dk
webdisk.mksalfaservice.dk
webdisk.team-montage.dk
webmail.mksalfaservice.dk
webmail.team-montage.dk
www.mksalfaservice.dk
www.mksalfaservice.fronto.dk
www.team-montage.dk
www.team-montage.fronto.dk
autodiscover.team-montage.dk
cpanel.mksalfaservice.dk
cpanel.team-montage.dk
mail.mksalfaservice.dk
mail.team-montage.dk
mksalfaservice.dk
mksalfaservice.fronto.dk
team-montage.dk
team-montage.fronto.dk
webdisk.mksalfaservice.dk
webdisk.team-montage.dk
webmail.mksalfaservice.dk
webmail.team-montage.dk
www.mksalfaservice.dk
www.mksalfaservice.fronto.dk
www.team-montage.dk
www.team-montage.fronto.dk
Other certificates including the domain name team-montage.dk
(limited to 100 certificates)
www.team-montage.fronto.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
*.team-montage.dk
team-montage.dk
team-montage.fronto.dk
team-montage.dk
team-montage.dk
mksalfaservice.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
team-montage.dk
*.team-montage.dk
team-montage.dk
team-montage.fronto.dk
team-montage.dk
team-montage.dk
mksalfaservice.dk
Certificate
The complete raw certificate details for team-montage.dk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgISA6M48o8yxu3MXlf6IK7QLjPcMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MzEyMTIzNTZaFw0x OTEwMjkyMTIzNTZaMBoxGDAWBgNVBAMTD3RlYW0tbW9udGFnZS5kazCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBALsU6flXXBKGJaF4XuDMaD5lY7EWqkWf Vo8ntQa6op6Nyd8oMoewK5ln6gBIpCTRcbRvXfZX8NvrMRRec/Im/fFdbqqSdJxf aMuEBu5z07Z1Z2J2Rb8TF29CpbdjGeW3KvbZ45uYv4Vo31InPYFD1TAVJWf98TBP b5U25G70HayddY82tglQtkhP1l3g0ieOKf/WX+KGv5wyebGT2jBoLR6RfPZREO5B ofMsfO/2Vv+jHGv3wx/um2KwX8KW317qGlZ2GRe43+Z6HMzte78A5BrRgbuypblZ I+UZBqLOg5ahGFiv1bFvWldnXqHiAg5mNHfiaCXqf6pV4hSAYC2SyW8CAwEAAaOC BBwwggQYMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU+AJfO3FnU9jGa/xqCId+/jla foAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzCCAc8GA1UdEQSCAcYwggHCgh5hdXRvZGlzY292ZXIubWtzYWxmYXNlcnZp Y2UuZGuCHGF1dG9kaXNjb3Zlci50ZWFtLW1vbnRhZ2UuZGuCGGNwYW5lbC5ta3Nh bGZhc2VydmljZS5ka4IWY3BhbmVsLnRlYW0tbW9udGFnZS5ka4IWbWFpbC5ta3Nh bGZhc2VydmljZS5ka4IUbWFpbC50ZWFtLW1vbnRhZ2UuZGuCEW1rc2FsZmFzZXJ2 aWNlLmRrghhta3NhbGZhc2VydmljZS5mcm9udG8uZGuCD3RlYW0tbW9udGFnZS5k a4IWdGVhbS1tb250YWdlLmZyb250by5ka4IZd2ViZGlzay5ta3NhbGZhc2Vydmlj ZS5ka4IXd2ViZGlzay50ZWFtLW1vbnRhZ2UuZGuCGXdlYm1haWwubWtzYWxmYXNl cnZpY2UuZGuCF3dlYm1haWwudGVhbS1tb250YWdlLmRrghV3d3cubWtzYWxmYXNl cnZpY2UuZGuCHHd3dy5ta3NhbGZhc2VydmljZS5mcm9udG8uZGuCE3d3dy50ZWFt LW1vbnRhZ2UuZGuCGnd3dy50ZWFtLW1vbnRhZ2UuZnJvbnRvLmRrMEwGA1UdIARF MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6 Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA dH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFsSiH9jAAABAMARzBF AiEA5NdvXnUmFV6z5sRhy1uz2tGNjfAweLNYH6+knruuAlgCIDm0jzUOwq4PHQ7n lf2s/9+dQfqauGAVzOhjiCdmnLIaAHcAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWm OLHHaFRL2I0AAAFsSiH7MwAABAMASDBGAiEA8wrJD7iRITVaalN46uf0SRS5FNOh gZIxuHIAsnVV0TMCIQDSakrffurqEVqi6U+gXGkPvldwsNLXdc5n+eso10YLDjAN BgkqhkiG9w0BAQsFAAOCAQEAbQqfJLafO6fX3t+GSkZw7aW0eKT7LiNtrGwfvahv jtqdlUGLrrC+Zpr8v6yzmtES68vvT2W4eZcXLSmDvpLFpsUg+Z3c8WhHHecK6pVH bLhuWh4ffpmuF2yKRV8bbfu1TTwfb95dprUQXfPqh2W2qWWMQvQV+SC1i7g1UfOc /GMkfB220soqH6mM5hQ1ayYYyU3hYnBCUdzhBM/Pp+NgeiEA/2wfWo0LUNsONLMm bVsEOR/s7DFn6fx2Fc9T4C8vMSleS6a5A65AcYa7LJnKASVv0Izh9uBj20ZiBXOH i0pt+erlNjDofuzT4lAhC51vput3pKTq1+RYFJJwDv1Etw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxTp+VdcEoYloXhe4Mxo PmVjsRaqRZ9Wjye1Brqino3J3ygyh7ArmWfqAEikJNFxtG9d9lfw2+sxFF5z8ib9 8V1uqpJ0nF9oy4QG7nPTtnVnYnZFvxMXb0Klt2MZ5bcq9tnjm5i/hWjfUic9gUPV MBUlZ/3xME9vlTbkbvQdrJ11jza2CVC2SE/WXeDSJ44p/9Zf4oa/nDJ5sZPaMGgt HpF89lEQ7kGh8yx87/ZW/6Mca/fDH+6bYrBfwpbfXuoaVnYZF7jf5noczO17vwDk GtGBu7KluVkj5RkGos6DlqEYWK/VsW9aV2deoeICDmY0d+JoJep/qlXiFIBgLZLJ bwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316878579811404977161939535453016606782428 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-31 21:23:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-29 21:23:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'team-montage.dk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23616876087143496021460825360682745444447659729105501538647017885246257395122675237402884438047069408688878653085661284590720255142556192122091687581215664017346120450028983067608713481956710534721060999749618670175001808864341118699303329035884690890512187780865642835057955831586375458124067212719334474182327050825581236043974496003562388043108268504352992892838693437501145387226717922392518545052667425625282335496661865628117215474440661450293092016095761678915305791622851645869390620734630043317143270868206856394047005625361291447422408619767738621724775496915776918629640907576055108402676641067981702613359 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f8025f3b716753d8c66bfc6a08877efe395a7e80 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (454 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mksalfaservice.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.team-montage.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.mksalfaservice.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.team-montage.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mksalfaservice.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.team-montage.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mksalfaservice.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mksalfaservice.fronto.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team-montage.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team-montage.fronto.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.mksalfaservice.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.team-montage.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.mksalfaservice.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.team-montage.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mksalfaservice.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mksalfaservice.fronto.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.team-montage.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.team-montage.fronto.dk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c4a21fd8c0000040300473045022100e4d76f5e7526155eb3e6c461cb5bb3dad18d8df03078b3581fafa49ebbae0258022039b48f350ec2ae0f1d0ee795fdacffdf9d41fa9ab86015cce8638827669cb21a00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c4a21fb330000040300483046022100f30ac90fb89121355a6a5378eae7f44914b914d3a1819231b87200b27555d133022100d26a4adf7eeaea115aa2e94fa05c690fbe5770b0d2d775ce67f9eb28d7460b0e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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