gitlab.advantum.ru
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:77:9d:8e:0d:f9:6c:a0:45:e1:98:e6:49:eb:60:49:f1:50 was issued on by Let's Encrypt.
With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gitlab.advantum.ru
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:77:9d:8e:0d:f9:6c:a0:45:e1:98:e6:49:eb:60:49:f1:50Serial Number (int): 389152171775557562928926526823054627696976
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: fc:46:af:ae:85:54:10:dc:75:61:3c:39:84:6b:14:a5:5d:d2:4a:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ab:17:f6:0a:8c:dc:59:bf:14:d0:8c:83:05:15:3a:5d:ee:ca:62:1e
Fingerprint (sha256): a7:b9:de:d4:df:6b:d6:e6:93:30:13:4c:ee:72:60:db:84:9a:ac:2a:e9:ce:21:91:dd:80:43:e8:28:c0:31:70
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate gitlab.advantum.ru
16
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gitlab.advantum.ru
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
atms-dev.advantum.ru
atms-test.advantum.ru
atms.advantum.ru
auth-dev.advantum.ru
auth-test.advantum.ru
auth.advantum.ru
av.advantum.ru
av.logaritm.ru
gitlab.advantum.ru
metro.advantum.ru
osm2.advantum.ru
osm3.advantum.ru
ozon-pilot.advantum.ru
ozon.advantum.ru
ref.advantum.ru
registry.gitlab.advantum.ru
atms-test.advantum.ru
atms.advantum.ru
auth-dev.advantum.ru
auth-test.advantum.ru
auth.advantum.ru
av.advantum.ru
av.logaritm.ru
gitlab.advantum.ru
metro.advantum.ru
osm2.advantum.ru
osm3.advantum.ru
ozon-pilot.advantum.ru
ozon.advantum.ru
ref.advantum.ru
registry.gitlab.advantum.ru
Other certificates including the domain name advantum.ru
(limited to 100 certificates)
advantum.ru
gitlab.advantum.ru
gitlab.advantum.ru
beta.advantum.ru
advantum.ru
x5.advantum.ru
gitlab.advantum.ru
advantum.ru
gitlab.advantum.ru
advantum.ru
gitlab.advantum.ru
advantum.ru
x5.advantum.ru
gitlab.advantum.ru
advantum.ru
x5.advantum.ru
x5.advantum.ru
x5.advantum.ru
x5.advantum.ru
beta.advantum.ru
x5.advantum.ru
gitlab.advantum.ru
gitlab.advantum.ru
x5.advantum.ru
ref.advantum.ru
advantum.ru
gitlab.advantum.ru
advantum.ru
beta.advantum.ru
advantum.ru
x5.advantum.ru
gitlab.advantum.ru
gitlab.advantum.ru
gitlab.advantum.ru
advantum.ru
advantum.ru
gitlab.advantum.ru
autolocator.advantum.ru
x5.advantum.ru
x5.advantum.ru
x5.advantum.ru
advantum.ru
advantum.ru
gett.advantum.ru
gitlab.advantum.ru
gitlab.advantum.ru
bb.advantum.ru
advantum.ru
gps.x5.advantum.ru
advantum.ru
advantum.ru
x5.advantum.ru
som.x5.advantum.ru
beta.advantum.ru
beta.advantum.ru
x5.advantum.ru
x5.advantum.ru
advantum.ru
gitlab.advantum.ru
beta.advantum.ru
beta.advantum.ru
gitlab.advantum.ru
gitlab.advantum.ru
beta.advantum.ru
advantum.ru
x5.advantum.ru
gitlab.advantum.ru
advantum.ru
gitlab.advantum.ru
advantum.ru
gitlab.advantum.ru
advantum.ru
x5.advantum.ru
gitlab.advantum.ru
advantum.ru
x5.advantum.ru
x5.advantum.ru
x5.advantum.ru
x5.advantum.ru
beta.advantum.ru
x5.advantum.ru
gitlab.advantum.ru
gitlab.advantum.ru
x5.advantum.ru
ref.advantum.ru
advantum.ru
gitlab.advantum.ru
advantum.ru
beta.advantum.ru
advantum.ru
x5.advantum.ru
gitlab.advantum.ru
gitlab.advantum.ru
gitlab.advantum.ru
advantum.ru
advantum.ru
gitlab.advantum.ru
autolocator.advantum.ru
x5.advantum.ru
x5.advantum.ru
x5.advantum.ru
advantum.ru
advantum.ru
gett.advantum.ru
gitlab.advantum.ru
gitlab.advantum.ru
bb.advantum.ru
advantum.ru
gps.x5.advantum.ru
advantum.ru
advantum.ru
x5.advantum.ru
som.x5.advantum.ru
beta.advantum.ru
beta.advantum.ru
x5.advantum.ru
x5.advantum.ru
advantum.ru
gitlab.advantum.ru
beta.advantum.ru
beta.advantum.ru
Certificate
The complete raw certificate details for gitlab.advantum.ru in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGkDCCBXigAwIBAgISBHedjg35bKBF4ZjmSetgSfFQMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMjUwODM4NDhaFw0y MDA2MjMwODM4NDhaMB0xGzAZBgNVBAMTEmdpdGxhYi5hZHZhbnR1bS5ydTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMQIil8ot+Gs9z614epHFxgCgI9f oKVvEh2JUJOnstYWSJjgcjyIhb8Dlr1OwoIfMAeR1M6WdVoox5nQISmyEgBrxIb7 8IBdFMaX9Sj8BPVuRkmoKmdpVrLHy3NS+APDU4GjUyYFXQrMZEMUhkMdg3hY4MEJ FvdeYeA2ZZDURkOpnLx3D3aufmJoP6xMuLcg1MmDLW2m6p2cMhG8rJ/FKiDKNOmC tv6a3DOxJxYSbOHkaWlXqT4gx6+ckGf1QsX0czZADNEdedvvKCv+Os8uryLSmze1 IuZMw9s7HbgcX4dxPejr6YWVYiEyRbgoba/VuQ8s17jJCu40v8WVxOXTjI0CAwEA AaOCA5swggOXMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU/EavroVUENx1YTw5hGsU pV3SSswwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzCCAU4GA1UdEQSCAUUwggFBghRhdG1zLWRldi5hZHZhbnR1bS5ydYIV YXRtcy10ZXN0LmFkdmFudHVtLnJ1ghBhdG1zLmFkdmFudHVtLnJ1ghRhdXRoLWRl di5hZHZhbnR1bS5ydYIVYXV0aC10ZXN0LmFkdmFudHVtLnJ1ghBhdXRoLmFkdmFu dHVtLnJ1gg5hdi5hZHZhbnR1bS5ydYIOYXYubG9nYXJpdG0ucnWCEmdpdGxhYi5h ZHZhbnR1bS5ydYIRbWV0cm8uYWR2YW50dW0ucnWCEG9zbTIuYWR2YW50dW0ucnWC EG9zbTMuYWR2YW50dW0ucnWCFm96b24tcGlsb3QuYWR2YW50dW0ucnWCEG96b24u YWR2YW50dW0ucnWCD3JlZi5hZHZhbnR1bS5ydYIbcmVnaXN0cnkuZ2l0bGFiLmFk dmFudHVtLnJ1MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYB BAHWeQIEAgSB9gSB8wDxAHcAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo3 2RMAAAFxEQ8BOwAABAMASDBGAiEA2wkN+WlpX+vxvYpED/5XqU1cREedU7Ko1Zie SXnhf54CIQD4W7iLqDVXCiwrLKT45rqRTxc91lULVbH/kMO0eja0eAB2AAe3XBvl fWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABcREPAUQAAAQDAEcwRQIhANA2 5gazUtddORxYvgaWWHsugPUUtAMBm/MP+vz7TswEAiBzmHp9d941mP02PVl5/rM/ cYhAWpZHyVQm6U20LrT0UzANBgkqhkiG9w0BAQsFAAOCAQEAZYK/V2qB/n1frami DuC7PjQUnCmwDn/e5lMY01QXdQF7HDlnUwgkd6UsUqjc+NLGBPRrJH4zv6QhXtBs zFEGlD+l7Ucc1xMD4gp5hKH7p1JPkry3GI2gS/4MjLAW635ND+gE89IW1wuMzNZX 69hWXhcLvtkpV6wpUVwnaznx1wLEg3WiYGUXw9Vp7Xpx75UMPxSpwZUqQDxiSnNm zRZUflareAQjXXY/UrU8H92dxVTZVid9XrUsqLCRU+rRXPUJcKpPGlIUYUrRRLvB 6O8dB6uuSHvXqQes7dH8Vucc8Sg6Owzv3G76efAsJwRvXnaXikaz5KTWZiMCZGtn O5sxTQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAiKXyi34az3PrXh6kcX GAKAj1+gpW8SHYlQk6ey1hZImOByPIiFvwOWvU7Cgh8wB5HUzpZ1WijHmdAhKbIS AGvEhvvwgF0Uxpf1KPwE9W5GSagqZ2lWssfLc1L4A8NTgaNTJgVdCsxkQxSGQx2D eFjgwQkW915h4DZlkNRGQ6mcvHcPdq5+Ymg/rEy4tyDUyYMtbabqnZwyEbysn8Uq IMo06YK2/prcM7EnFhJs4eRpaVepPiDHr5yQZ/VCxfRzNkAM0R152+8oK/46zy6v ItKbN7Ui5kzD2zsduBxfh3E96OvphZViITJFuChtr9W5DyzXuMkK7jS/xZXE5dOM jQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 389152171775557562928926526823054627696976 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 08:38:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-23 08:38:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab.advantum.ru' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24746919258017520644967383822633286289559251281926968273581369689179597622222266104348675007850199185648859240813903941524768989358372949428821610188240881571136734676067067893771742924215625356525607688602428659029431691580733588112931834252905093530552661550000939390730910344412969506464835361802315854603636749130686118991483283236361201666753412428255253606444505887312250438444152763636545817069548673389592008791956564627377198187358547852722331025959174402044523255049474478482191252091401059322616494413229395756051942457237130088349147002856600934006723777370306207871711554593208140441666123526713090739341 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fc46afae855410dc75613c39846b14a55dd24acc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (325 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atms-dev.advantum.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atms-test.advantum.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atms.advantum.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-dev.advantum.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-test.advantum.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.advantum.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'av.advantum.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'av.logaritm.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.advantum.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metro.advantum.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osm2.advantum.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osm3.advantum.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozon-pilot.advantum.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozon.advantum.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref.advantum.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.gitlab.advantum.ru' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000171110f013b0000040300483046022100db090df969695febf1bd8a440ffe57a94d5c44479d53b2a8d5989e4979e17f9e022100f85bb88ba835570a2c2b2ca4f8e6ba914f173dd6550b55b1ff90c3b47a36b47800760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171110f01440000040300473045022100d036e606b352d75d391c58be0696587b2e80f514b403019bf30ffafcfb4ecc04022073987a7d77de3598fd363d5979feb33f7188405a9647c95426e94db42eb4f453 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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