edu.hrdantwerp.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:63:86:2f:19:dd:67:ef:7d:d7:a1:16:56:5a:43:c4:cf:a5 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=edu.hrdantwerp.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:63:86:2f:19:dd:67:ef:7d:d7:a1:16:56:5a:43:c4:cf:a5Serial Number (int): 295203173234443008177113569262642464608165
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 83:c8:ac:af:3e:5a:41:8a:cc:4d:ae:e2:d7:9e:a0:5e:92:53:aa:68
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 90:ae:8d:f1:3c:2f:6a:7d:5c:f9:cf:8d:a5:7f:47:ef:49:5f:d1:80
Fingerprint (sha256): 9c:d8:4c:a0:31:e2:20:ee:b6:0c:8b:da:8f:8e:79:50:93:51:91:f8:7d:9f:6f:7f:10:d8:35:04:4b:7e:c1:98
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate edu.hrdantwerp.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for edu.hrdantwerp.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
edu.hrdantwerp.com
Other certificates including the domain name hrdantwerp.com
(limited to 100 certificates)
hrdantwerp.com
hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
sip.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
sip.hrdantwerp.com
edu.hrdantwerp.com
sip.hrdantwerp.com
edu.hrdantwerp.com
content.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
development.hrdantwerp.com
content.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
hrdantwerp.com
*.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
content.hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
ict.hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
*.hrdantwerp.com
*.hrdantwerp.com
edu.hrdantwerp.com
sip.hrdantwerp.com
edu.hrdantwerp.com
*.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
sip.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
sip.hrdantwerp.com
edu.hrdantwerp.com
sip.hrdantwerp.com
edu.hrdantwerp.com
content.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
development.hrdantwerp.com
content.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
hrdantwerp.com
*.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
content.hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
ict.hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
*.hrdantwerp.com
*.hrdantwerp.com
edu.hrdantwerp.com
sip.hrdantwerp.com
edu.hrdantwerp.com
*.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
Certificate
The complete raw certificate details for edu.hrdantwerp.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgISA2OGLxndZ+9916EWVlpDxM+lMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MTUxNzI0MjFaFw0x OTA3MTQxNzI0MjFaMB0xGzAZBgNVBAMTEmVkdS5ocmRhbnR3ZXJwLmNvbTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKZcoJ9IibCbgr6dsmUuEPj9KSft HE99wC/cUw5qsxhsTzEsbtZDvJeX2yNGv5PirSMBiE6Cc1ALZr8RoclSvgoKCTE8 QWoIGUAtt3CcMqt6Up/mIwfPwqv1ajrB4HiK5s8Ep10mjoiI3W7+vsV2kfBxh1nx 9kJIO8V1L2esXQCmFPjuwpRQ4s/NNLXD+RjiNbEBxLZ6uJEW39RsaJ6RaAikmHQr vZjfndEQSOBKnqeCYRThNxCX7iMaSFO4GxQFS7R4xUpWttYM8NtgnATVfMI9BFKf kavwEKL+6p+3z1BCjjl1xV+NsbhP8F91V6TCIILWj9DaezLXm1Xh+G8nW3ri32qz a9ZNKeZZaqUzJI1Yv4X5xZEn+9DT6hhkYdTNDFOwhDglZZuJ1Vg620aQGx6hTCXi myLr6NU2um/+YrEB/Z8KAC1gLdrMY3YXODbCXKQKn2xYuOLpjcNJyY2TwxUckBTe kL9HhnS6pPyMU9u0vLDuR8Hu2TWISwy+4TXpoDQWXKGxAOUY/nYely7xCYxtPmoQ 1HY28cUX43MX1rDbSG3ROhJYm/HYkxafUqPhr2fLKDACZLqGZ9x0+4rJIO4WNTdk AsJlYIzK5KiClUU96kyswVeEaWEXslEIsNh9O9Vjz+qsylIuHQ2q0vMkkeHhnRDd 9i+8mJUGNn9JrVyVAgMBAAGjggJoMIICZDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FIPIrK8+WkGKzE2u4teeoF6SU6poMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISZWR1LmhyZGFudHdl cnAuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHW eQIEAgSB9gSB8wDxAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4A AAFqIj4viAAABAMARzBFAiEAnOfts5hFEgo/JOJiBf++XU82L37pu7lI5aaRrNKo +QkCIB/GhvPkAJaKLNNTVKSvaulR9ahJ+OVDW8Ju2iSGoYv6AHcAY/Lbzeg7zCzP C3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFqIj4xgwAABAMASDBGAiEAk26I7iqD fJ1fANcxqrdh3eKaEkGXLlNwSMZQ/2t9FiICIQDheb4iEbL/z0zGkWYACS22unKx noVwG6Q876eqmgZiFDANBgkqhkiG9w0BAQsFAAOCAQEAdhYVbrgBiB/sxEKrGuH5 hhhX7T6/azI6Q0g7kBcg3uJbSPBXcFkP9zi7W56KtfI70kyppi5Kj3f4I683843G mzKRg5cMoO5LxnRoW/AY78NKf5dEYTjp3v24Ykr/v/JVT4MpLGKqgMEwmEppyzKG KmHkRjJnosOwDGaZ6ME8CbwnNjDVAqxtAMw8xZqkGvxjL1EcCBTCiL5BjpUYdB7+ lcvcKjTcvjM81coeGcqK2ZZRuNkvdPKL1TuuRzBjvGmxR2qHfa/FeIOTnNq2oT0V OqBdPOoLu1LplejObTFDmA3zGVNk+4ER/KImsT01btwEKv1lRJlLQ5MUKuWVryCU 6g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAplygn0iJsJuCvp2yZS4Q +P0pJ+0cT33AL9xTDmqzGGxPMSxu1kO8l5fbI0a/k+KtIwGIToJzUAtmvxGhyVK+ CgoJMTxBaggZQC23cJwyq3pSn+YjB8/Cq/VqOsHgeIrmzwSnXSaOiIjdbv6+xXaR 8HGHWfH2Qkg7xXUvZ6xdAKYU+O7ClFDiz800tcP5GOI1sQHEtnq4kRbf1GxonpFo CKSYdCu9mN+d0RBI4Eqep4JhFOE3EJfuIxpIU7gbFAVLtHjFSla21gzw22CcBNV8 wj0EUp+Rq/AQov7qn7fPUEKOOXXFX42xuE/wX3VXpMIggtaP0Np7MtebVeH4bydb euLfarNr1k0p5llqpTMkjVi/hfnFkSf70NPqGGRh1M0MU7CEOCVlm4nVWDrbRpAb HqFMJeKbIuvo1Ta6b/5isQH9nwoALWAt2sxjdhc4NsJcpAqfbFi44umNw0nJjZPD FRyQFN6Qv0eGdLqk/IxT27S8sO5Hwe7ZNYhLDL7hNemgNBZcobEA5Rj+dh6XLvEJ jG0+ahDUdjbxxRfjcxfWsNtIbdE6Elib8diTFp9So+GvZ8soMAJkuoZn3HT7iskg 7hY1N2QCwmVgjMrkqIKVRT3qTKzBV4RpYReyUQiw2H071WPP6qzKUi4dDarS8ySR 4eGdEN32L7yYlQY2f0mtXJUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 295203173234443008177113569262642464608165 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-15 17:24:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-14 17:24:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edu.hrdantwerp.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 678697036179064443097571492485933981002822710678890595329870757185375128449892982647887897820158236318628150772968690803314778561645697218372309280971019822613879070153961090479982840246895070310209544026812696224320468346350419807383421664248537917346358433205410148131929280691544527798310896142984745926305570544185787805654293843625908102622752202215020964982444617285172900209485923604832461035750582304717535988820303133059078280723641118203272082256807912044953920559418650404059336992059847086779475100001170439954722820156795193031328629769271971040117144674925213393262940127687306408901218664213297543551607605637321907608078242953773005790024757611691517855741561512455268851571216646652393897296429950363181451092246697648119498621873663356239191571812728376809491492665933027857233149103760033090650363932413915109658540758781460827653378730492136506803045070205379915066317090636404023774937227367365318853070110380662428147149925426432960438460461723412624433519670811988039363714491338167397379766450379120254258637361323225000550567476378283602637060777216251324612342759909169690484960961669247953900323126906230461955002324627165747542873796841474695357518622834272120687921121896152554880016497449954843814616213 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 83c8acaf3e5a418acc4daee2d79ea05e9253aa68 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu.hrdantwerp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a223e2f8800000403004730450221009ce7edb39845120a3f24e26205ffbe5d4f362f7ee9bbb948e5a691acd2a8f90902201fc686f3e400968a2cd35354a4af6ae951f5a849f8e5435bc26eda2486a18bfa00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a223e31830000040300483046022100936e88ee2a837c9d5f00d731aab761dde29a1241972e537048c650ff6b7d1622022100e179be2211b2ffcf4cc6916600092db6ba72b19e85701ba43cefa7aa9a066214 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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