k8s-prod-internal.migroszh.ch
Issued by R3
About this certificate
This digital certificate with serial number 03:b7:01:d2:dc:ae:c0:29:9a:4d:d7:1b:4c:6d:af:36:a1:40 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=k8s-prod-internal.migroszh.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b7:01:d2:dc:ae:c0:29:9a:4d:d7:1b:4c:6d:af:36:a1:40Serial Number (int): 323610955028123840480718275063741735674176
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 22:48:89:c2:0c:ee:4b:a2:f5:02:02:f2:52:d9:c3:dd:18:a8:ae:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 49:49:c8:09:59:47:c0:ee:d3:9c:a1:7c:28:fa:8b:dd:2a:ea:fe:71
Fingerprint (sha256): b4:39:30:8a:95:bc:80:2a:0c:76:5a:d6:6c:34:5a:7b:40:b5:a8:4e:7e:09:05:80:51:15:1a:1c:06:eb:31:37
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate k8s-prod-internal.migroszh.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for k8s-prod-internal.migroszh.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
k8s-prod-internal.migroszh.ch
Other certificates including the domain name migroszh.ch
(limited to 100 certificates)
portal.migroszh.ch
afag-sense-live.migroszh.ch
portal-t.migroszh.ch
k8s-dev-external.migroszh.ch
awa-t.deutscheinschaetzung.migroszh.ch
k8s-prod-external.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
outlook.migroszh.ch
k8s-infra-internal.migroszh.ch
webdeploypzs.migroszh.ch
k8s-infra-internal.migroszh.ch
alarm2.migroszh.ch
citrix.migroszh.ch
portal-s.migroszh.ch
k8s-prod-external.migroszh.ch
autodiscover.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
k8s-staging-internal.migroszh.ch
alarm1.migroszh.ch
alarm2.migroszh.ch
portal-t.migroszh.ch
anmeldung-s.feriencamp.migroszh.ch
afag-sense-live.migroszh.ch
mail.datacenter-migros.ch
citrix.migroszh.ch
citrix.migroszh.ch
k8s-prod-internal.migroszh.ch
k8s-infra-external.migroszh.ch
k8s-staging-external.migroszh.ch
anmeldung-s.feriencamp.migroszh.ch
k8s-staging-internal.migroszh.ch
k8s-dev-internal.migroszh.ch
mail.datacenter-migros.ch
k8s-infra-external.migroszh.ch
alarm2.migroszh.ch
szc.migroszh.ch
awa-s.deutscheinschaetzung.migroszh.ch
mail.datacenter-migros.ch
gmzsbc.migros.cloud
awa.deutscheinschaetzung.migroszh.ch
mail.datacenter-migros.ch
mail.datacenter-migros.ch
alarm1.migroszh.ch
outlook.migroszh.ch
k8s-staging-internal.migroszh.ch
k8s-prod-external.migroszh.ch
alarm1.migroszh.ch
anmeldung-t.feriencamp.migroszh.ch
portal-t.migroszh.ch
awa-t.deutscheinschaetzung.migroszh.ch
k8s-prod-internal.migroszh.ch
citrix.migroszh.ch
k8s-staging-internal.migroszh.ch
outlook.migroszh.ch
anmeldung-t.feriencamp.migroszh.ch
gmzsbc.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
k8s-dev-internal.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
citrix.migroszh.ch
awa-s.deutscheinschaetzung.migroszh.ch
awa-t.deutscheinschaetzung.migroszh.ch
k8s-staging-external.migroszh.ch
outlook.migroszh.ch
anmeldung.feriencamp.migroszh.ch
alarm1.migroszh.ch
autodiscover.migroszh.ch
outlook.migroszh.ch
k8s-infra-external.migroszh.ch
outlook.migroszh.ch
outlook.migroszh.ch
k8s-prod-internal.migroszh.ch
portal.migroszh.ch
anmeldung.feriencamp.migroszh.ch
anmeldung-t.feriencamp.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
k8s-dev-external.migroszh.ch
awa-s.deutscheinschaetzung.migroszh.ch
afag-sense-live.migroszh.ch
anmeldung.feriencamp.migroszh.ch
alarm1.migroszh.ch
portal.migroszh.ch
mail.datacenter-migros.ch
awa-t.deutscheinschaetzung.migroszh.ch
portal-t.migroszh.ch
autodiscover.migroszh.ch
k8s-staging-external.migroszh.ch
k8s-infra-external.migroszh.ch
outlook.migroszh.ch
alarm2.migroszh.ch
k8s-prod-external.migroszh.ch
awa-s.deutscheinschaetzung.migroszh.ch
outlook.migroszh.ch
owa.migroszh.ch
k8s-dev-external.migroszh.ch
gmzsbc.migros.cloud
alarm2.migroszh.ch
k8s-staging-external.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
citrix.migroszh.ch
afag-sense-live.migroszh.ch
portal-t.migroszh.ch
k8s-dev-external.migroszh.ch
awa-t.deutscheinschaetzung.migroszh.ch
k8s-prod-external.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
outlook.migroszh.ch
k8s-infra-internal.migroszh.ch
webdeploypzs.migroszh.ch
k8s-infra-internal.migroszh.ch
alarm2.migroszh.ch
citrix.migroszh.ch
portal-s.migroszh.ch
k8s-prod-external.migroszh.ch
autodiscover.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
k8s-staging-internal.migroszh.ch
alarm1.migroszh.ch
alarm2.migroszh.ch
portal-t.migroszh.ch
anmeldung-s.feriencamp.migroszh.ch
afag-sense-live.migroszh.ch
mail.datacenter-migros.ch
citrix.migroszh.ch
citrix.migroszh.ch
k8s-prod-internal.migroszh.ch
k8s-infra-external.migroszh.ch
k8s-staging-external.migroszh.ch
anmeldung-s.feriencamp.migroszh.ch
k8s-staging-internal.migroszh.ch
k8s-dev-internal.migroszh.ch
mail.datacenter-migros.ch
k8s-infra-external.migroszh.ch
alarm2.migroszh.ch
szc.migroszh.ch
awa-s.deutscheinschaetzung.migroszh.ch
mail.datacenter-migros.ch
gmzsbc.migros.cloud
awa.deutscheinschaetzung.migroszh.ch
mail.datacenter-migros.ch
mail.datacenter-migros.ch
alarm1.migroszh.ch
outlook.migroszh.ch
k8s-staging-internal.migroszh.ch
k8s-prod-external.migroszh.ch
alarm1.migroszh.ch
anmeldung-t.feriencamp.migroszh.ch
portal-t.migroszh.ch
awa-t.deutscheinschaetzung.migroszh.ch
k8s-prod-internal.migroszh.ch
citrix.migroszh.ch
k8s-staging-internal.migroszh.ch
outlook.migroszh.ch
anmeldung-t.feriencamp.migroszh.ch
gmzsbc.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
k8s-dev-internal.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
citrix.migroszh.ch
awa-s.deutscheinschaetzung.migroszh.ch
awa-t.deutscheinschaetzung.migroszh.ch
k8s-staging-external.migroszh.ch
outlook.migroszh.ch
anmeldung.feriencamp.migroszh.ch
alarm1.migroszh.ch
autodiscover.migroszh.ch
outlook.migroszh.ch
k8s-infra-external.migroszh.ch
outlook.migroszh.ch
outlook.migroszh.ch
k8s-prod-internal.migroszh.ch
portal.migroszh.ch
anmeldung.feriencamp.migroszh.ch
anmeldung-t.feriencamp.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
k8s-dev-external.migroszh.ch
awa-s.deutscheinschaetzung.migroszh.ch
afag-sense-live.migroszh.ch
anmeldung.feriencamp.migroszh.ch
alarm1.migroszh.ch
portal.migroszh.ch
mail.datacenter-migros.ch
awa-t.deutscheinschaetzung.migroszh.ch
portal-t.migroszh.ch
autodiscover.migroszh.ch
k8s-staging-external.migroszh.ch
k8s-infra-external.migroszh.ch
outlook.migroszh.ch
alarm2.migroszh.ch
k8s-prod-external.migroszh.ch
awa-s.deutscheinschaetzung.migroszh.ch
outlook.migroszh.ch
owa.migroszh.ch
k8s-dev-external.migroszh.ch
gmzsbc.migros.cloud
alarm2.migroszh.ch
k8s-staging-external.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
citrix.migroszh.ch
Certificate
The complete raw certificate details for k8s-prod-internal.migroszh.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgISA7cB0tyuwCmaTdcbTG2vNqFAMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjEwMjQwMzIwMjBaFw0yMzAxMjIwMzIwMTlaMCgxJjAkBgNVBAMT HWs4cy1wcm9kLWludGVybmFsLm1pZ3Jvc3poLmNoMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEA5Gx6Nq3DGfdI2WeLMOYqQnvI45HWxpuqEW1VkrHnL9wm Ho+/kyUbHqYj1EqbSa6x+6AIE12R28IMvcsrbL2ETKRtMrrChfzNWm/+LTS8rdsG B62ve+bpOxvEkRs3oTLZ8FjNbqpN2cVcuVDDRrY8psdumvpCO67P21EA2AT+rKjJ tBOfBrsdgnd5hN+muzGtbn/yxZNClamD7s11ziUSqy4K4TW3vAOdIZ39WDGH/Jwu dVun7F1TGbgvmzhSwYDdfBxqO7l8moI+oxQ5qRj7uXX/WgG1GlUPVH4QcB6K72K9 Dklno/RkKJCi1TVIaime9qk7G7a4JtOGkauTLIFyUQIDAQABo4ICWDCCAlQwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBQiSInCDO5LovUCAvJS2cPdGKiu6DAfBgNVHSME GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov L3IzLmkubGVuY3Iub3JnLzAoBgNVHREEITAfgh1rOHMtcHJvZC1pbnRlcm5hbC5t aWdyb3N6aC5jaDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisG AQQB1nkCBAIEgfUEgfIA8AB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl 7bSZAAABhAg4VukAAAQDAEcwRQIhALGmcx9EGXcQUFKNSHCf4wGOQ897JxZemzlV HUalpxH9AiB2kNT0Wz5ElawMSfTHcCD9xzlK/261ZdHwCGmO09vxvQB2AK33vvp8 /xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABhAg4VxQAAAQDAEcwRQIgCZ1f r0MjWeb/kyP0P6qFCL/HkwE01KCwkBiPh1e0AAsCIQDXM9LGTeXBwxbiJc6NDSXi ZCdu8RusxLZuet+sc1Wt/TANBgkqhkiG9w0BAQsFAAOCAQEAMMNSl5ckyeLavulg LpmzzHBRZMq/gXuDBASM11MKYYMZ/+vIjASN95DCj5FzU1RjkUCbse9FPSKnVUaD tVxNaOa0+RSAsRk8CkrhyBRdyVQx/y08bzGJR/xHL6Rl9cB8V8o/pv7eP06y1NJR H/kngOfw9AYsyl7c9ygh+LnsN1wURjPshKnxfowI5yWFdNcjzdW2rQk+ACt+jS1J cpIVmnPZz8w6K2q1wSbJl9ig1QOISYaW4/iQYMiecAGdmSTJlWTkRSsNZqUNwvQM +JNnIyK+NByvSzxUa2ySzPH2XKSDr+2rzZ+T2aH2DTYy2iCRwRik9qnA7fWQ0qLd RXcOlQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Gx6Nq3DGfdI2WeLMOYq QnvI45HWxpuqEW1VkrHnL9wmHo+/kyUbHqYj1EqbSa6x+6AIE12R28IMvcsrbL2E TKRtMrrChfzNWm/+LTS8rdsGB62ve+bpOxvEkRs3oTLZ8FjNbqpN2cVcuVDDRrY8 psdumvpCO67P21EA2AT+rKjJtBOfBrsdgnd5hN+muzGtbn/yxZNClamD7s11ziUS qy4K4TW3vAOdIZ39WDGH/JwudVun7F1TGbgvmzhSwYDdfBxqO7l8moI+oxQ5qRj7 uXX/WgG1GlUPVH4QcB6K72K9Dklno/RkKJCi1TVIaime9qk7G7a4JtOGkauTLIFy UQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 323610955028123840480718275063741735674176 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-24 03:20:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-22 03:20:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'k8s-prod-internal.migroszh.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28835825730320571126794199252944798438249163147387039137901005011740622226886781593292433548572636799133649556707248766745413919380203915135305975937575533240369301590599662255484815592999946302218710966168387340028107881203421088808073196210685521926078503225849672750049418243999845897850192929777369623565032891783040716039827752949440911987736542222834498602098489768230514039353453000764447835869642235528231552928576672333183662827683031359284035187240507344816447406051666093927288296871371193304047368876236659719250267089773997448851853807194933394005751760324656595049333930571662839932007817691265956409937 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 224889c20cee4ba2f50202f252d9c3dd18a8aee8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k8s-prod-internal.migroszh.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184083856e90000040300473045022100b1a6731f4419771050528d48709fe3018e43cf7b27165e9b39551d46a5a711fd02207690d4f45b3e4495ac0c49f4c77020fdc7394aff6eb565d1f008698ed3dbf1bd007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001840838571400000403004730450220099d5faf432359e6ff9323f43faa8508bfc7930134d4a0b090188f8757b4000b022100d733d2c64de5c1c316e225ce8d0d25e264276ef11bacc4b66e7adfac7355adfd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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