diabetichealthcoach.co.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a2:00:c2:f3:60:01:f5:1b:d5:20:1a:14:41:d3:fa:bd:40 was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=diabetichealthcoach.co.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a2:00:c2:f3:60:01:f5:1b:d5:20:1a:14:41:d3:fa:bd:40Serial Number (int): 316463613478295369869494600894023240170816
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 45:fa:f4:8b:61:4c:6a:d1:ae:b3:ca:e9:c2:1b:ed:b3:fd:a9:9b:79
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): dd:71:8d:14:88:4e:56:31:a5:40:f5:75:03:c3:8b:39:e5:8c:72:9f
Fingerprint (sha256): af:ff:f8:e7:5b:4e:d9:13:99:25:f5:68:18:54:45:13:34:d3:9a:4b:2d:69:87:bb:1e:90:0d:40:a1:1d:19:a0
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate diabetichealthcoach.co.uk
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for diabetichealthcoach.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cpanel.diabetichealthcoach.co.uk
cpanel.diabetichealthcoach.crede-signo.co.uk
diabetichealthcoach.co.uk
diabetichealthcoach.crede-signo.co.uk
mail.diabetichealthcoach.co.uk
webdisk.diabetichealthcoach.co.uk
webdisk.diabetichealthcoach.crede-signo.co.uk
webmail.diabetichealthcoach.co.uk
webmail.diabetichealthcoach.crede-signo.co.uk
www.diabetichealthcoach.co.uk
www.diabetichealthcoach.crede-signo.co.uk
cpanel.diabetichealthcoach.crede-signo.co.uk
diabetichealthcoach.co.uk
diabetichealthcoach.crede-signo.co.uk
mail.diabetichealthcoach.co.uk
webdisk.diabetichealthcoach.co.uk
webdisk.diabetichealthcoach.crede-signo.co.uk
webmail.diabetichealthcoach.co.uk
webmail.diabetichealthcoach.crede-signo.co.uk
www.diabetichealthcoach.co.uk
www.diabetichealthcoach.crede-signo.co.uk
Other certificates including the domain name diabetichealthcoach.co.uk
(limited to 100 certificates)
diabetichealthcoach.co.uk
diabetichealthcoach.co.uk
diabetichealthcoach.co.uk
diabetichealthcoach.co.uk
diabetichealthcoach.co.uk
diabetichealthcoach.co.uk
*.neilsandersmindcontrol.com
diabetichealthcoach.co.uk
diabetichealthcoach.co.uk
*.121hydrotherapy.co.uk
diabetichealthcoach.co.uk
diabetichealthcoach.co.uk
*.corstorphinesecurityedinburgh.co.uk
diabetichealthcoach.co.uk
*.suitedreamsukltd.com
diabetichealthcoach.co.uk
diabetichealthcoach.co.uk
*.openavenues.co.uk
diabetichealthcoach.co.uk
diabetichealthcoach.co.uk
diabetichealthcoach.co.uk
diabetichealthcoach.co.uk
diabetichealthcoach.co.uk
*.neilsandersmindcontrol.com
diabetichealthcoach.co.uk
diabetichealthcoach.co.uk
*.121hydrotherapy.co.uk
diabetichealthcoach.co.uk
diabetichealthcoach.co.uk
*.corstorphinesecurityedinburgh.co.uk
diabetichealthcoach.co.uk
*.suitedreamsukltd.com
diabetichealthcoach.co.uk
diabetichealthcoach.co.uk
*.openavenues.co.uk
Certificate
The complete raw certificate details for diabetichealthcoach.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG9DCCBdygAwIBAgISA6IAwvNgAfUb1SAaFEHT+r1AMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMDYwMjE2MTVaFw0y MDAyMDQwMjE2MTVaMCQxIjAgBgNVBAMTGWRpYWJldGljaGVhbHRoY29hY2guY28u dWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu+ivPKJn+kL7LsXZT rPgsLtCPWF18sBoXntFa+/L3Z1sc2FC+M24/ywWo6L3liZTzo1PfVJSqRO9gMKWG RIaJQrZ0N0I/MCp1e5z9mwrPDFdS2jeepVaP9TtAAKHF6NMi11qQX2PoezAhbpqd YwL0kCNyehvnKmeINa/9kcWJIkyWMZdnbnUdlBLw4awvBmy2ATnomMN+opW2jDQB B2ipWLjKjPaajIbWG5bDc2adWEWxG/RGgPcXctDxkm6xM19PleTwE0g0Q04nrcIc 7n84/59UmvcpAbPZ5LVnWwAhoUktUJ7Ugc5e10kDQQk329T+h9JebLUrvr6wAMBx R6jpAgMBAAGjggP4MIID9DAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEX69IthTGrR rrPK6cIb7bP9qZt5MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wggGtBgNVHREEggGkMIIBoIIgY3BhbmVsLmRpYWJldGlj aGVhbHRoY29hY2guY28udWuCLGNwYW5lbC5kaWFiZXRpY2hlYWx0aGNvYWNoLmNy ZWRlLXNpZ25vLmNvLnVrghlkaWFiZXRpY2hlYWx0aGNvYWNoLmNvLnVrgiVkaWFi ZXRpY2hlYWx0aGNvYWNoLmNyZWRlLXNpZ25vLmNvLnVrgh5tYWlsLmRpYWJldGlj aGVhbHRoY29hY2guY28udWuCIXdlYmRpc2suZGlhYmV0aWNoZWFsdGhjb2FjaC5j by51a4Itd2ViZGlzay5kaWFiZXRpY2hlYWx0aGNvYWNoLmNyZWRlLXNpZ25vLmNv LnVrgiF3ZWJtYWlsLmRpYWJldGljaGVhbHRoY29hY2guY28udWuCLXdlYm1haWwu ZGlhYmV0aWNoZWFsdGhjb2FjaC5jcmVkZS1zaWduby5jby51a4Idd3d3LmRpYWJl dGljaGVhbHRoY29hY2guY28udWuCKXd3dy5kaWFiZXRpY2hlYWx0aGNvYWNoLmNy ZWRlLXNpZ25vLmNvLnVrMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIS hBh1loFxRVgAAAFuPrZ3rgAABAMARzBFAiEAugA5oYGIty+2kfbiVQiTL3nfmwvN 93Sxk0vS1/5aXQoCICScl3erH53sXty9a/26jSun/o+zoDfu764WxsvSfz5wAHUA sh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFuPrZ3nwAABAMARjBE AiBeQYo5Nz0LG6dVdMhDNTuZVFKHDv9aBGwq8EFr2di67QIgJUY/FNiToY+ELgEP 95LisT76w9SdYk8PRyvZQr5RMugwDQYJKoZIhvcNAQELBQADggEBAAP8QCBmNofw 6H8N3bXKd1tpim06Mae0sarnje5Pj3MGNUVqrYeeZg7lLsaMkv92B3W+crIlJJOT OlakZxbNYtZaAreh63XsmvAjuUQ0UDGtU6bjS+inph7cinsjTy6EGWs1GQN6L2YP O2JGwP3zZqI0lJxbEQATaWcW49J5SHgbWK2muXPFTRksRxatdsJjvc0ABj1qTQEt uh0FttPGKuWHOeDBn+Fa2demEXNkkQxQSfbCxbE85ZaK710638KbN/LhSmzYU0gY wj1QxzvQjb78IOuSVObrw0untwkBo1HgHP62FzGKP0IDkT2CxwHzp02/8cxMuYpA dZv2L6OH9e4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vorzyiZ/pC+y7F2U6z4 LC7Qj1hdfLAaF57RWvvy92dbHNhQvjNuP8sFqOi95YmU86NT31SUqkTvYDClhkSG iUK2dDdCPzAqdXuc/ZsKzwxXUto3nqVWj/U7QAChxejTItdakF9j6HswIW6anWMC 9JAjcnob5ypniDWv/ZHFiSJMljGXZ251HZQS8OGsLwZstgE56JjDfqKVtow0AQdo qVi4yoz2moyG1huWw3NmnVhFsRv0RoD3F3LQ8ZJusTNfT5Xk8BNINENOJ63CHO5/ OP+fVJr3KQGz2eS1Z1sAIaFJLVCe1IHOXtdJA0EJN9vU/ofSXmy1K76+sADAcUeo 6QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316463613478295369869494600894023240170816 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 02:16:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 02:16:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diabetichealthcoach.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30168080563835009945473975354248312875540458608763513011518502243768815852999926077246607471199243185346669454562800128428411135055696576989438140036607547497687996073630175134671462487584339325240916130631576193584042910205498664585416367624959274136423148156421566721189736924104155373215632598617571636930451789423951278976483830917706190593566795971482896025621773276709417408012272997650656243956097512723156540444424926085568629195076565598715413544587752780851368983620742682584880383958624665283970041834473524323886287701874849443876372167864665691821086854403814640952495336561488235632053093946043981605097 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 45faf48b614c6ad1aeb3cae9c21bedb3fda99b79 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (420 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.diabetichealthcoach.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.diabetichealthcoach.crede-signo.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diabetichealthcoach.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diabetichealthcoach.crede-signo.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.diabetichealthcoach.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.diabetichealthcoach.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.diabetichealthcoach.crede-signo.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.diabetichealthcoach.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.diabetichealthcoach.crede-signo.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diabetichealthcoach.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diabetichealthcoach.crede-signo.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e3eb677ae0000040300473045022100ba0039a18188b72fb691f6e25508932f79df9b0bcdf774b1934bd2d7fe5a5d0a0220249c9777ab1f9dec5edcbd6bfdba8d2ba7fe8fb3a037eeefae16c6cbd27f3e70007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e3eb6779f000004030046304402205e418a39373d0b1ba75574c843353b995452870eff5a046c2af0416bd9d8baed022025463f14d893a18f842e010ff792e2b13efac3d49d624f0f472bd942be5132e8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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