deflector.k8s.e8.no
Issued by R3
About this certificate
This digital certificate with serial number 04:79:12:38:e2:4a:0f:55:d1:05:35:d2:45:99:dc:99:2e:49 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=deflector.k8s.e8.no
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:79:12:38:e2:4a:0f:55:d1:05:35:d2:45:99:dc:99:2e:49Serial Number (int): 389647531586714947573869162836646499528265
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 1a:1d:3a:74:71:dd:79:d0:22:03:53:8a:4d:08:a3:97:09:c9:5b:1a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): e2:ab:ac:7f:6f:ca:72:c4:1d:4a:cc:6b:e4:eb:65:56:a5:d8:f0:5e
Fingerprint (sha256): b1:20:37:d8:a7:9e:d6:cb:70:a8:ec:4a:11:13:c2:55:0b:55:77:85:80:9c:0e:d1:82:b1:9a:dc:26:09:e2:50
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate deflector.k8s.e8.no
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for deflector.k8s.e8.no
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
deflector.k8s.e8.no
minerabatkoder.dk
rabattkoder.aftenposten.no
rabattkoder.aftonbladet.se
minerabatkoder.dk
rabattkoder.aftenposten.no
rabattkoder.aftonbladet.se
Other certificates including the domain name e8.no
(limited to 100 certificates)
vgbf-backend.k8s.e8.no
vgbf-backend.k8s.e8.no
t.e8.no
afton-bf-backend.k8s.e8.no
rover.k8s.e8.no
rabattkoder.aftenposten.no
rover-backend-ts.k8s.e8.no
vgno-bf-backend.k8s.e8.no
sagabar.kickback.no
t.e8.no
deflector.k8s.e8.no
gohm.kickback.no
echo2.k8s.e8.no
rover.k8s.e8.no
ws.e8.no
kickback.no
gohm.kickback.no
*.e8.no
vgbf-socket-backend.k8s.e8.no
vgbf-backend.k8s.e8.no
leovalen.no
deflector.k8s.e8.no
brigid-backend.k8s.e8.no
gohm.kickback.no
gohm.kickback.no
afton-bf-backend.k8s.e8.no
gohm.kickback.no
sagabar.kickback.no
brigid-backend.k8s.e8.no
gohm.kickback.no
gohm.kickback.no
domlinger.k8s.e8.no
gohm.kickback.no
afton-bf-backend.k8s.e8.no
domlinger.k8s.e8.no
gohm.kickback.no
rover-backend-ts.k8s.e8.no
brigid-backend.k8s.e8.no
gohm.kickback.no
rover-backend-ts.k8s.e8.no
t.e8.no
sagabar.kickback.no
sagabar.kickback.no
t.e8.no
domlinger.k8s.e8.no
kickback.no
echo.k8s.e8.no
rover-backend-ts.k8s.e8.no
t.e8.no
domlinger.k8s.e8.no
kickback.no
rover-backend-ts.k8s.e8.no
gohm.kickback.no
rover-backend-ts.k8s.e8.no
sagabar.kickback.no
t.e8.no
kickback.no
sagabar.kickback.no
brigid-backend.k8s.e8.no
gohm.kickback.no
rover-backend-ts.k8s.e8.no
e8.no
gohm.kickback.no
rover.k8s.e8.no
gohm.kickback.no
deflector.k8s.e8.no
kickback.no
brigid-backend.k8s.e8.no
*.e8.no
sagabar.kickback.no
brigid-backend.k8s.e8.no
vgno-bf-backend.k8s.e8.no
brigid-backend.k8s.e8.no
deflector.k8s.e8.no
t.e8.no
vgbf-backend.k8s.e8.no
t.e8.no
deflector.k8s.e8.no
rover-backend-ts.k8s.e8.no
vgbf-backend.k8s.e8.no
deflector.k8s.e8.no
vgno-bf-backend.k8s.e8.no
kickback.no
gohm.kickback.no
sagabar.kickback.no
vgbf-backend.k8s.e8.no
t.e8.no
afton-bf-backend.k8s.e8.no
rover.k8s.e8.no
rabattkoder.aftenposten.no
rover-backend-ts.k8s.e8.no
vgno-bf-backend.k8s.e8.no
sagabar.kickback.no
t.e8.no
deflector.k8s.e8.no
gohm.kickback.no
echo2.k8s.e8.no
rover.k8s.e8.no
ws.e8.no
kickback.no
gohm.kickback.no
*.e8.no
vgbf-socket-backend.k8s.e8.no
vgbf-backend.k8s.e8.no
leovalen.no
deflector.k8s.e8.no
brigid-backend.k8s.e8.no
gohm.kickback.no
gohm.kickback.no
afton-bf-backend.k8s.e8.no
gohm.kickback.no
sagabar.kickback.no
brigid-backend.k8s.e8.no
gohm.kickback.no
gohm.kickback.no
domlinger.k8s.e8.no
gohm.kickback.no
afton-bf-backend.k8s.e8.no
domlinger.k8s.e8.no
gohm.kickback.no
rover-backend-ts.k8s.e8.no
brigid-backend.k8s.e8.no
gohm.kickback.no
rover-backend-ts.k8s.e8.no
t.e8.no
sagabar.kickback.no
sagabar.kickback.no
t.e8.no
domlinger.k8s.e8.no
kickback.no
echo.k8s.e8.no
rover-backend-ts.k8s.e8.no
t.e8.no
domlinger.k8s.e8.no
kickback.no
rover-backend-ts.k8s.e8.no
gohm.kickback.no
rover-backend-ts.k8s.e8.no
sagabar.kickback.no
t.e8.no
kickback.no
sagabar.kickback.no
brigid-backend.k8s.e8.no
gohm.kickback.no
rover-backend-ts.k8s.e8.no
e8.no
gohm.kickback.no
rover.k8s.e8.no
gohm.kickback.no
deflector.k8s.e8.no
kickback.no
brigid-backend.k8s.e8.no
*.e8.no
sagabar.kickback.no
brigid-backend.k8s.e8.no
vgno-bf-backend.k8s.e8.no
brigid-backend.k8s.e8.no
deflector.k8s.e8.no
t.e8.no
vgbf-backend.k8s.e8.no
t.e8.no
deflector.k8s.e8.no
rover-backend-ts.k8s.e8.no
vgbf-backend.k8s.e8.no
deflector.k8s.e8.no
vgno-bf-backend.k8s.e8.no
kickback.no
gohm.kickback.no
sagabar.kickback.no
Certificate
The complete raw certificate details for deflector.k8s.e8.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISBHkSOOJKD1XRBTXSRZncmS5JMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA0MTUwMTU4MjZaFw0yMTA3MTQwMTU4MjZaMB4xHDAaBgNVBAMT E2RlZmxlY3Rvci5rOHMuZTgubm8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDNXnnlP+C9WX4YkDVrDWCZOjbUg0qoeHiWyfPuVrAIm1gmE1PpI3KoxqVB oNlLnoHxyYxbG9EgDx97Qd4jRiP5yg1nD0eCDWIWJ3mEb0Nm8xTHIfyJXM7wrz5B 4Nyn5ISngJBdbN8A9dn98CToc6fX0xpUFmBOiesoG15vmzhRMp+okB1IkO2+VzhY KO3Ylf7IG/0uyYHK9MUCOvfGOZkOS8tvC2VsA8YKrRj4pkehCau0bVgMOKt32J8R eL6dlRjG/2tlzVF9gP5SQzhTddPvvEdure8e0xELZK1BYIf16qYvs7FBLkYzy9n8 qSmy9FyNd0dSK2hC5i19qxUgtqa1AgMBAAGjggKZMIIClTAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFBodOnRx3XnQIgNTik0Io5cJyVsaMB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMGkGA1UdEQRiMGCCE2RlZmxlY3Rvci5rOHMuZTgubm+CEW1pbmVyYWJh dGtvZGVyLmRrghpyYWJhdHRrb2Rlci5hZnRlbnBvc3Rlbi5ub4IacmFiYXR0a29k ZXIuYWZ0b25ibGFkZXQuc2UwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC 3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw ggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgCUILwejtWNbIhzH4KLIiwN0dpNXmxP lD1h204vWE2iwgAAAXjTdy/CAAAEAwBHMEUCIHr3gk1kjarKoTw4dndej2GgmR3v i0sPfBiqNq76bYNWAiEA+ebZQFm/N6RSezQvGnFoYVrStjuQmpB4sXNszbWg36cA dgD2XJQv0XcwIhRUGAgwlFaO400TGTO/3wwvIAvMTvFk4wAAAXjTdy+yAAAEAwBH MEUCIApHWzxtxNlcFBcdKFC3l2asVnnKm4Mr35vr5Xc6oF76AiEA8huPMEdq5lje E9y2jlUCh0X5RUjwGJhOE05QlJh4HB4wDQYJKoZIhvcNAQELBQADggEBAJrgwmPu xhoVGpB739tA6/patrhc31GkbjCDZiV4kWmGjXiDvPctkmFBhCHr5/GWcJ2iPCj7 5kbvc+h69qotS34Hv9udZnJrTq+MWJ7Zx76UwQ5z4NYD9JAbJazu7B4tAd6dIffJ /jWy7vatRXfwI42QEsaLO5lR58DUvDXh7WFaeCR/fE6ZspVasvkr/Jq2HDn+VyHg bA8DJv5cIaar3IgiUbzDWEmIwVBIytGXzeAzy7cYkd8KuD68Fp814PHoRPKqocDH YMfhK7AJRbjbZ1HPUpbDAwPZ9JcXj9yltcbal6IK2IozzUmrHWfQdyMhYqfh4+Ig SO/s/88trpXTBYw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV555T/gvVl+GJA1aw1g mTo21INKqHh4lsnz7lawCJtYJhNT6SNyqMalQaDZS56B8cmMWxvRIA8fe0HeI0Yj +coNZw9Hgg1iFid5hG9DZvMUxyH8iVzO8K8+QeDcp+SEp4CQXWzfAPXZ/fAk6HOn 19MaVBZgTonrKBteb5s4UTKfqJAdSJDtvlc4WCjt2JX+yBv9LsmByvTFAjr3xjmZ DkvLbwtlbAPGCq0Y+KZHoQmrtG1YDDird9ifEXi+nZUYxv9rZc1RfYD+UkM4U3XT 77xHbq3vHtMRC2StQWCH9eqmL7OxQS5GM8vZ/KkpsvRcjXdHUitoQuYtfasVILam tQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 389647531586714947573869162836646499528265 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-15 01:58:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-14 01:58:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'deflector.k8s.e8.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25925440446093123012027102566349321702215820366789213782508038586987690173741657683971757239193205004888893418483172041140718663112514073980205811618596828865596483395470970277401692995028047130108966888078046205045341291185575027502367815816745409940131133929865637917481611459843563920099331218513232553237984381847275160978789812002157135699242628062825755834817988673420667950879545781605756123946529345093802002825609790959503691049014315319990679977414264278771983439892066840648217697323858083172854260282757765549190519538930730625280090797440711207382893460127704443052831018292396894213178652968775952279221 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1a1d3a7471dd79d02203538a4d08a39709c95b1a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deflector.k8s.e8.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minerabatkoder.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rabattkoder.aftenposten.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rabattkoder.aftonbladet.se' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000178d3772fc2000004030047304502207af7824d648daacaa13c3876775e8f61a0991def8b4b0f7c18aa36aefa6d8356022100f9e6d94059bf37a4527b342f1a7168615ad2b63b909a9078b1736ccdb5a0dfa7007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000178d3772fb2000004030047304502200a475b3c6dc4d95c14171d2850b79766ac5679ca9b832bdf9bebe5773aa05efa022100f21b8f30476ae658de13dcb68e55028745f94548f018984e134e509498781c1e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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