genarmor.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:7f:a7:b8:21:17:e5:48:2d:db:78:ad:b0:7f:75:2e:fd:39 was issued on by Let's Encrypt.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=genarmor.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:7f:a7:b8:21:17:e5:48:2d:db:78:ad:b0:7f:75:2e:fd:39Serial Number (int): 304775655523370700143575187552566722362681
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f7:18:1d:f8:2a:0c:74:5d:be:e4:55:7a:9a:c5:1a:75:0e:6f:48:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): fc:19:3b:15:6a:05:b1:89:c6:d2:06:42:6e:6c:ca:45:c4:d2:e8:49
Fingerprint (sha256): 99:8b:00:58:71:43:94:fc:29:a2:5d:ec:58:9f:d6:3d:43:c8:fd:08:3e:45:8b:a8:36:dc:a9:01:e5:7d:28:83
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate genarmor.com
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for genarmor.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
genarmor.com
genarmor.fightbcnow.com
lifeisdelicious.com
lifeisdelicious.fightbcnow.com
mail.genarmor.com
mail.lifeisdelicious.com
mail.mothersdaughters.org
mail.soyfoods.com
mothersdaughters-org.fightbcnow.com
mothersdaughters.org
soyfoods.com
soyfoods.fightbcnow.com
www.genarmor.com
www.genarmor.fightbcnow.com
www.lifeisdelicious.com
www.lifeisdelicious.fightbcnow.com
www.mothersdaughters-org.fightbcnow.com
www.mothersdaughters.org
www.soyfoods.com
www.soyfoods.fightbcnow.com
genarmor.fightbcnow.com
lifeisdelicious.com
lifeisdelicious.fightbcnow.com
mail.genarmor.com
mail.lifeisdelicious.com
mail.mothersdaughters.org
mail.soyfoods.com
mothersdaughters-org.fightbcnow.com
mothersdaughters.org
soyfoods.com
soyfoods.fightbcnow.com
www.genarmor.com
www.genarmor.fightbcnow.com
www.lifeisdelicious.com
www.lifeisdelicious.fightbcnow.com
www.mothersdaughters-org.fightbcnow.com
www.mothersdaughters.org
www.soyfoods.com
www.soyfoods.fightbcnow.com
Other certificates including the domain name genarmor.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for genarmor.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHPzCCBiegAwIBAgISA3+nuCEX5Ugt23itsH91Lv05MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTUxMjEwMzFaFw0y MDA2MTMxMjEwMzFaMBcxFTATBgNVBAMTDGdlbmFybW9yLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAL2+hZBDjlzkgw4298cvIQC7GlUtcgu5Er6b DI0sWp8IgYnQNvCKslNIwUYzxZUvDWs37BRk2lCqihs8QppNXONfGFdfA/7GW9Vk KmcQnvhgjuypxWtI2ryM9aGDes4/QRhFcEr+XBvel5ArKbkng7rPrzm+S31Z0JKX rlW6Ulas2EQiX2niQkHaIPf6MBcw9OxMHTmjH27/peyWnfiq1nnyXJgkZ+Wq4WXa qpIamW6/AGEmlSZVKfkzauWl19K0RRhOuybSC59xa+lLDLUFP143KRAbr/rFen5V eZVwSpotCYZFHENM8jsQUb91NyUfDO7POdKgIRNGvYD74lzKDHsCAwEAAaOCBFAw ggRMMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU9xgd+CoMdF2+5FV6msUadQ5vSEYw HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzCCAgQGA1UdEQSCAfswggH3ggxnZW5hcm1vci5jb22CF2dlbmFybW9yLmZpZ2h0 YmNub3cuY29tghNsaWZlaXNkZWxpY2lvdXMuY29tgh5saWZlaXNkZWxpY2lvdXMu ZmlnaHRiY25vdy5jb22CEW1haWwuZ2VuYXJtb3IuY29tghhtYWlsLmxpZmVpc2Rl bGljaW91cy5jb22CGW1haWwubW90aGVyc2RhdWdodGVycy5vcmeCEW1haWwuc295 Zm9vZHMuY29tgiNtb3RoZXJzZGF1Z2h0ZXJzLW9yZy5maWdodGJjbm93LmNvbYIU bW90aGVyc2RhdWdodGVycy5vcmeCDHNveWZvb2RzLmNvbYIXc295Zm9vZHMuZmln aHRiY25vdy5jb22CEHd3dy5nZW5hcm1vci5jb22CG3d3dy5nZW5hcm1vci5maWdo dGJjbm93LmNvbYIXd3d3LmxpZmVpc2RlbGljaW91cy5jb22CInd3dy5saWZlaXNk ZWxpY2lvdXMuZmlnaHRiY25vdy5jb22CJ3d3dy5tb3RoZXJzZGF1Z2h0ZXJzLW9y Zy5maWdodGJjbm93LmNvbYIYd3d3Lm1vdGhlcnNkYXVnaHRlcnMub3JnghB3d3cu c295Zm9vZHMuY29tght3d3cuc295Zm9vZHMuZmlnaHRiY25vdy5jb20wTAYDVR0g BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0 cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA dQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAXDeUT5+AAAEAwBG MEQCIHl6wj2iUy21Bv2KgYaKTaKSMPEJO37EhEgUDN/bWCQTAiANDbJOqUTfAOUs umRisOhAVlBRA0OqT6I5h0kVZFPv2AB3ALIeBcyLos2KIE6HZvkruYolIGdr2vpw 57JJUy3vi5BeAAABcN5RPncAAAQDAEgwRgIhAMEV5DXYqjezOLEmYQWioF16BnE3 kabJyNnC0nviyo+JAiEAga3gWZxqKXsVBW/Z/fgzrDhXZngRt+S/2lyNv61PSgIw DQYJKoZIhvcNAQELBQADggEBABS12bnY+cT2/GkGX8lyP3zdM0n4wokxidF2qecF 14obyhNSQx1oaaxFv4c4smJu+Xf0TWIZvNPSHQeb2W5k1RDLS7fqCGd077ud/NVh k9vWzNP0n3Iq/ZbDn3a/3EFR3Z1Ac9AORbU4XAPlL17Ds49D2dQDbYqGgGIsDkMA 8SVlG3N7ZRhVuY3oMYuOSwNnvyjPlJRTHcFMMqvIGZmpJTy3zx2LSiMWhTSCWqL8 VwBry3ZRGNXJDgmaLU3B9ugKbiC8cMjHAvPElgk80aLPFO2VF4BiJJSznugpPGzI 2o2UsNvyWzjjBRQDXwyx06pSC13Cf4iNJUUc/lyDw+wGjUU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb6FkEOOXOSDDjb3xy8h ALsaVS1yC7kSvpsMjSxanwiBidA28IqyU0jBRjPFlS8NazfsFGTaUKqKGzxCmk1c 418YV18D/sZb1WQqZxCe+GCO7KnFa0javIz1oYN6zj9BGEVwSv5cG96XkCspuSeD us+vOb5LfVnQkpeuVbpSVqzYRCJfaeJCQdog9/owFzD07EwdOaMfbv+l7Jad+KrW efJcmCRn5arhZdqqkhqZbr8AYSaVJlUp+TNq5aXX0rRFGE67JtILn3Fr6UsMtQU/ XjcpEBuv+sV6flV5lXBKmi0JhkUcQ0zyOxBRv3U3JR8M7s850qAhE0a9gPviXMoM ewIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 304775655523370700143575187552566722362681 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 12:10:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-13 12:10:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'genarmor.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23952989406457480119659239915902648047251212585848337615214297008523482572857473755218149735953760765124959546659586812159978990891477882926952134794643764386512253542649883727334624897342945479791138791775332799447058313538919941123012583236771725164934267279187663398647320107934253478320560416176926662706628757321605968735856791551382043059702499744050235645154148802671970345292388724050486475096948853390258880049300261390066420117868826306211255660712614599429538538634837249922768618123718886253963010353693829058357967490077603853499489245091833062325377978331157630487722593174953631171310957633623569337467 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f7181df82a0c745dbee4557a9ac51a750e6f4846 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (507 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genarmor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genarmor.fightbcnow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeisdelicious.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeisdelicious.fightbcnow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.genarmor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lifeisdelicious.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mothersdaughters.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.soyfoods.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mothersdaughters-org.fightbcnow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mothersdaughters.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soyfoods.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soyfoods.fightbcnow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genarmor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genarmor.fightbcnow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeisdelicious.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeisdelicious.fightbcnow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mothersdaughters-org.fightbcnow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mothersdaughters.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soyfoods.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soyfoods.fightbcnow.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170de513e7e00000403004630440220797ac23da2532db506fd8a81868a4da29230f1093b7ec48448140cdfdb58241302200d0db24ea944df00e52cba6462b0e8405650510343aa4fa2398749156453efd8007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170de513e770000040300483046022100c115e435d8aa37b338b1266105a2a05d7a06713791a6c9c8d9c2d27be2ca8f8902210081ade0599c6a297b15056fd9fdf833ac3857667811b7e4bfda5c8dbfad4f4a02 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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