saretec.org.za
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:cc:0a:bd:97:78:23:1d:63:1c:85:a6:b9:7d:e6:21:cb:fb was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=saretec.org.za
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:cc:0a:bd:97:78:23:1d:63:1c:85:a6:b9:7d:e6:21:cb:fbSerial Number (int): 330768737343378395882897840413961684634619
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ae:c0:97:a0:dd:6c:5b:a6:0c:20:c6:22:4a:91:2f:1f:3b:e4:22:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 25:66:5b:fb:a5:85:03:30:37:03:bf:a6:b8:40:eb:6e:8e:84:d5:83
Fingerprint (sha256): b9:e3:a9:e6:72:2d:89:51:ea:3d:cc:05:2b:4c:03:26:36:c0:8c:cd:63:6e:b3:67:f2:f6:67:03:4e:b3:60:7d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate saretec.org.za
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for saretec.org.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
saretec.org.za
www.saretec.org.za
www.saretec.org.za
Other certificates including the domain name saretec.org.za
(limited to 100 certificates)
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
saretec.org.za
saretec.org.za
thescenter.co.za
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
saretec.org.za
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
synercuity.com
sni70396.cloudflaressl.com
lavitalifestyle.photography
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
lavitalifestyle.photography
saretec.org.za
precision-diesel.co.za
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
www.saretec.org.za
saretec.org.za
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
saretec.org.za
www.saretec.org.za
sni70396.cloudflaressl.com
saretec.org.za
sni70396.cloudflaressl.com
saretec.org.za
saretec.org.za
sni70396.cloudflaressl.com
www.pennyferrytraining.com
synercuity.com
saretec.org.za
sni70396.cloudflaressl.com
www.talk2us.capetown
www.pennyferrytraining.com
sni70396.cloudflaressl.com
devscreen.net
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
talk2us.durban
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
www.detourafrica.com
www.pennyferrytraining.com
www.saretec.org.za
saretec.org.za
saretec.org.za
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
saretec.org.za
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
www.talk2us.capetown
www.lavitalifestyle.photography
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
www.bpsystems.co.za
precision-diesel.co.za
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
saretec.org.za
saretec.org.za
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
saretec.org.za
saretec.org.za
thescenter.co.za
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
saretec.org.za
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
synercuity.com
sni70396.cloudflaressl.com
lavitalifestyle.photography
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
lavitalifestyle.photography
saretec.org.za
precision-diesel.co.za
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
www.saretec.org.za
saretec.org.za
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
saretec.org.za
www.saretec.org.za
sni70396.cloudflaressl.com
saretec.org.za
sni70396.cloudflaressl.com
saretec.org.za
saretec.org.za
sni70396.cloudflaressl.com
www.pennyferrytraining.com
synercuity.com
saretec.org.za
sni70396.cloudflaressl.com
www.talk2us.capetown
www.pennyferrytraining.com
sni70396.cloudflaressl.com
devscreen.net
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
talk2us.durban
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
www.detourafrica.com
www.pennyferrytraining.com
www.saretec.org.za
saretec.org.za
saretec.org.za
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
saretec.org.za
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
www.talk2us.capetown
www.lavitalifestyle.photography
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
www.bpsystems.co.za
precision-diesel.co.za
sni70396.cloudflaressl.com
sni70396.cloudflaressl.com
saretec.org.za
saretec.org.za
Certificate
The complete raw certificate details for saretec.org.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISA8wKvZd4Ix1jHIWmuX3mIcv7MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjYwMzM5MjZaFw0x OTEwMjQwMzM5MjZaMBkxFzAVBgNVBAMTDnNhcmV0ZWMub3JnLnphMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SoC24HfwqBoSpWDvE8kB6VhI9tEJetq aQY16l/KB22hKoCDtTsd6s2wHuVXjFwdoS70UmfimYo9SdVYlHk4POkDfrnQQIFn plHPE28xlEKzPkV8PMkJYYda9fD/0tcrV71vaj+dW0fBmPJTArFXEwChDyBprfP2 8WkbijWluKYmpLk4EowCWDxgXZi35lChoIZzj5HsFyjltChJjjwM3s+0yTpG4QnX USUED62Yw/0mtni6HiwRxz7fXP8zrfaK5yKXSHM8zATl2CGUry2w3OwNRWHTfB9H J202WCMvc1ZmB0FD6ApH8bfDfOh9DbhpyqNhs06pRU2qnu9HKA+yXwIDAQABo4IC eTCCAnUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSuwJeg3WxbpgwgxiJKkS8fO+Qi pzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMC0GA1UdEQQmMCSCDnNhcmV0ZWMub3JnLnphghJ3d3cuc2FyZXRlYy5vcmcu emEwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQC BIH3BIH0APIAdwDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWws k5mIAAAEAwBIMEYCIQCo3/MhvuU98NclXRF4aHb6b1j5c/ofOAQbr67M3+RC6QIh ANGUJnLJp/FTTicKJK656TmGV/130JaBhiJxSi13jybXAHcAKTxRllTIOWW6qlD8 WAfUt2+/WHopctykwwz05UVH9HgAAAFsLJOZqQAABAMASDBGAiEA2upiVliPgtmE SWFPu9qvjnmbA8e2TCGCkjShFkltj8QCIQCd5PaeC+9OZUffKo2y8YPEqGAFV7rU OBZtjJ6Vs8uQbjANBgkqhkiG9w0BAQsFAAOCAQEAmrB7I4gb38xUiXN6RG25leHt NDaNCN7TEf4c8ut/NviBTEUWny9TboZKANrerZB45VJgbs6CNQIHrav/XqpGoLgh +u5hbGl4ylnIM+STrLfioPKipyhUvwWATbIxN3BvrMWDc9Joftn8w451JnYeN6A6 w9exp5Lf3brkfgr2qf+Fwo5cpAN0aeIhbt5LYu8snHDW17lBJ0NWs5o2GBqbNgzU wufBT9gKQOq0ErRDEfvTkuKqynIGf62cebQDcyKQydSHD2O7KFy6taV0ogWtTaip Ur1E26ZRSPYfpWVPt167rpY4WjPu0XFUV5DUyddRNQ3b9elYHfqs7d/nmG9Xsw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SoC24HfwqBoSpWDvE8k B6VhI9tEJetqaQY16l/KB22hKoCDtTsd6s2wHuVXjFwdoS70UmfimYo9SdVYlHk4 POkDfrnQQIFnplHPE28xlEKzPkV8PMkJYYda9fD/0tcrV71vaj+dW0fBmPJTArFX EwChDyBprfP28WkbijWluKYmpLk4EowCWDxgXZi35lChoIZzj5HsFyjltChJjjwM 3s+0yTpG4QnXUSUED62Yw/0mtni6HiwRxz7fXP8zrfaK5yKXSHM8zATl2CGUry2w 3OwNRWHTfB9HJ202WCMvc1ZmB0FD6ApH8bfDfOh9DbhpyqNhs06pRU2qnu9HKA+y XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 330768737343378395882897840413961684634619 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 03:39:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 03:39:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saretec.org.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27414428653689088680917227262882742991164028781649437478584840590570747643171882923473835182653311060585443129059930994986565974054289487203225000729241905631061110768473436870706921850941977558640207501128469139657570883061361695116361463090160050506357907715257389083979262406611349524584774309498374341847595080175182371655339363769837182183197980468414733538197910981362539091208964458053689705895638182905073646702696852041719072013075174503286875942508594377203347802280980520341192210640789592862456213975788550343114154591173904819486009237395422777877332328733011921080247030959161564612088319758352574820959 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) aec097a0dd6c5ba60c20c6224a912f1f3be422a7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saretec.org.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saretec.org.za' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c2c9399880000040300483046022100a8dff321bee53df0d7255d11786876fa6f58f973fa1f38041bafaeccdfe442e9022100d1942672c9a7f1534e270a24aeb9e9398657fd77d096818622714a2d778f26d7007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c2c9399a90000040300483046022100daea6256588f82d98449614fbbdaaf8e799b03c7b64c21829234a116496d8fc40221009de4f69e0bef4e6547df2a8db2f183c4a8600557bad438166d8c9e95b3cb906e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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