roueng.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:7b:ab:c5:85:b4:a8:f5:c2:05:8c:e4:c8:7e:9d:1d:69:c9 was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=roueng.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:7b:ab:c5:85:b4:a8:f5:c2:05:8c:e4:c8:7e:9d:1d:69:c9Serial Number (int): 303419912508190360044133169301292016560585
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 70:36:73:d2:10:7b:90:fa:26:92:ac:14:a3:88:12:eb:55:1f:a3:dd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 64:be:ab:d1:a8:5d:7d:69:ff:fb:e2:2a:0c:21:22:6f:2f:f8:b4:bc
Fingerprint (sha256): bd:0f:54:78:33:41:37:81:9d:9f:d0:35:c7:a7:ae:9d:b8:af:3b:27:ca:ce:94:ff:8c:2b:fa:3a:28:4f:86:30
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate roueng.com
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for roueng.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.roueng.com
autodiscover.ruinun.com
cpanel.roueng.com
cpanel.ruinun.com
mail.roueng.com
mail.ruinun.com
roueng.akrez.us
roueng.com
ruinun.akrez.us
ruinun.com
webdisk.roueng.com
webdisk.ruinun.com
webmail.roueng.com
webmail.ruinun.com
www.roueng.akrez.us
www.roueng.com
www.ruinun.akrez.us
www.ruinun.com
autodiscover.ruinun.com
cpanel.roueng.com
cpanel.ruinun.com
mail.roueng.com
mail.ruinun.com
roueng.akrez.us
roueng.com
ruinun.akrez.us
ruinun.com
webdisk.roueng.com
webdisk.ruinun.com
webmail.roueng.com
webmail.ruinun.com
www.roueng.akrez.us
www.roueng.com
www.ruinun.akrez.us
www.ruinun.com
Other certificates including the domain name roueng.com
(limited to 100 certificates)
mortgage.roueng.com
pets.roueng.com
pets.roueng.com
roueng.com
pets.roueng.com
roueng.com
mcm-tote-bag.us
roueng.com
roueng.com
roueng.com
pets.roueng.com
pets.roueng.com
wedding.roueng.com
pets.roueng.com
pets.roueng.com
roueng.com
pets.roueng.com
pets.roueng.com
roueng.com
pets.roueng.com
xiongp.com
roueng.com
pets.roueng.com
ruinun.com
roueng.com
pets.roueng.com
pets.roueng.com
roueng.com
shuangd.com
www.niangk.akrez.us
burberry--outlet.net
roueng.com
pets.roueng.com
pets.roueng.com
pets.roueng.com
pets.roueng.com
roueng.com
pets.roueng.com
roueng.com
mcm-tote-bag.us
roueng.com
roueng.com
roueng.com
pets.roueng.com
pets.roueng.com
wedding.roueng.com
pets.roueng.com
pets.roueng.com
roueng.com
pets.roueng.com
pets.roueng.com
roueng.com
pets.roueng.com
xiongp.com
roueng.com
pets.roueng.com
ruinun.com
roueng.com
pets.roueng.com
pets.roueng.com
roueng.com
shuangd.com
www.niangk.akrez.us
burberry--outlet.net
roueng.com
pets.roueng.com
pets.roueng.com
Certificate
The complete raw certificate details for roueng.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGlDCCBXygAwIBAgISA3urxYW0qPXCBYzkyH6dHWnJMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTEwODQ3MDBaFw0y MDAzMTAwODQ3MDBaMBUxEzARBgNVBAMTCnJvdWVuZy5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDnUq/cF8A7XRtJ0DUHO/vwHCq16Usi1dxvsBq/ b0g/3/WQZSdb3NfuynRJfAWPC5ztsg9gt5OhrfbOV0I+0V6u+N0qAXdtKlk9cc3H zAaEOD6QZL0Ar4nk55fGu40ZAizDRXgGQGc+55YbhjsnSumH17JE2ESWI+8Lq5h9 cULr/AAs7LXNRRlh36nAyPpfo10iX+IUCtU4+Z3bc8RiK1Fy8I4qFYEUHRCJie8o tRo50zssJRhbAtGSxDbfwAHhtgEVG8URrjYt9jwMfGQaw9SnkYKN5F5xbBINs+r9 tBc246DVHpejXeE0wOj1yINorPxixUKfdgNTGyb6zzaylKqbAgMBAAGjggOnMIID ozAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHA2c9IQe5D6JpKsFKOIEutVH6PdMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w ggFbBgNVHREEggFSMIIBToIXYXV0b2Rpc2NvdmVyLnJvdWVuZy5jb22CF2F1dG9k aXNjb3Zlci5ydWludW4uY29tghFjcGFuZWwucm91ZW5nLmNvbYIRY3BhbmVsLnJ1 aW51bi5jb22CD21haWwucm91ZW5nLmNvbYIPbWFpbC5ydWludW4uY29tgg9yb3Vl bmcuYWtyZXoudXOCCnJvdWVuZy5jb22CD3J1aW51bi5ha3Jlei51c4IKcnVpbnVu LmNvbYISd2ViZGlzay5yb3VlbmcuY29tghJ3ZWJkaXNrLnJ1aW51bi5jb22CEndl Ym1haWwucm91ZW5nLmNvbYISd2VibWFpbC5ydWludW4uY29tghN3d3cucm91ZW5n LmFrcmV6LnVzgg53d3cucm91ZW5nLmNvbYITd3d3LnJ1aW51bi5ha3Jlei51c4IO d3d3LnJ1aW51bi5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEE BgorBgEEAdZ5AgQCBIH1BIHyAPAAdwDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0 prCoqo6ycwAAAW70WsduAAAEAwBIMEYCIQCKlW7vdjwOCfVu41Fl/3/4VRZMUJQ1 4HXgDfz/zsoEpQIhAJghxYQ494hlIv2QljUnFmzJov2rkdoSTtejGbAt1/vRAHUA sh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFu9FrHbAAABAMARjBE AiBWNOj6SF2hIX3woSSp966+4QG2ppp2mrHTrEusRNgGRgIgIQU5qsXA8scl1M0C L8EuUcunatXu6/zPSCsg6e6tH7swDQYJKoZIhvcNAQELBQADggEBAHBkuX24cqJG dltxSp1MOSzKsMM8g9n15o2u6kMElRMDAR18sHrDw8H5Xm4fo/vnsp/U+c4Cvesc IaURXh57pEVcQtdFd+D+ewubR0P16z5tQCwzckCXriyOXpYFSi21Qj2r4KMNV4xZ T55StH1luyMdf+5MY+8VVncHGK6vevEioZHcFaaxg5BgevCWaS7aVr8lo83ygMHj 8mU83LyJ60nBgfM0h7onzMN7iomwhXEx8abXcrEGYm5TYktABiwUlte2pF+VZXB8 eiiTrcndjrVoyz2QGKa3nZv8TGeQpINjJDm0H0icbptbnts0kVOqg1qewbpZulfb ccc9kuc2gxo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51Kv3BfAO10bSdA1Bzv7 8BwqtelLItXcb7Aav29IP9/1kGUnW9zX7sp0SXwFjwuc7bIPYLeToa32zldCPtFe rvjdKgF3bSpZPXHNx8wGhDg+kGS9AK+J5OeXxruNGQIsw0V4BkBnPueWG4Y7J0rp h9eyRNhEliPvC6uYfXFC6/wALOy1zUUZYd+pwMj6X6NdIl/iFArVOPmd23PEYitR cvCOKhWBFB0QiYnvKLUaOdM7LCUYWwLRksQ238AB4bYBFRvFEa42LfY8DHxkGsPU p5GCjeRecWwSDbPq/bQXNuOg1R6Xo13hNMDo9ciDaKz8YsVCn3YDUxsm+s82spSq mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 303419912508190360044133169301292016560585 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 08:47:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 08:47:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roueng.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29201822902924463695052722795953336659841957408012491080645603624947909758895826075220889367668532369400059927404220240911589892654939282307793883184414934005880588128566907691139762078017671761904256813917603996619212448746073707276301595268280922207413739316097722459223367377833223054527244497952258132372760384607007714944058522669952122436415686985714917563267950715447088441224697394890744133458064748908584188314192486948520033980948149780449446896676052868167377276929080799335825347733031855928293220912984757678278273212027447295239034450318652822363870932868790801044184393339102519020472577214407775660699 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 703673d2107b90fa2692ac14a38812eb551fa3dd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (338 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.roueng.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ruinun.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.roueng.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ruinun.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.roueng.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ruinun.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roueng.akrez.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roueng.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruinun.akrez.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruinun.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.roueng.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ruinun.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.roueng.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ruinun.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roueng.akrez.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roueng.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruinun.akrez.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruinun.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ef45ac76e00000403004830460221008a956eef763c0e09f56ee35165ff7ff855164c509435e075e00dfcffceca04a50221009821c58438f7886522fd90963527166cc9a2fdab91da124ed7a319b02dd7fbd1007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef45ac76c000004030046304402205634e8fa485da1217df0a124a9f7aebee101b6a69a769ab1d3ac4bac44d806460220210539aac5c0f2c725d4cd022fc12e51cba76ad5eeebfccf482b20e9eead1fbb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007064b97db872a246765b714a9d4c392ccab0c33c83d9f5e68daeea4304951303011d7cb07ac3c3c1f95e6e1fa3fbe7b29fd4f9ce02bdeb1c21a5115e1e7ba4455c42d74577e0fe7b0b9b4743f5eb3e6d402c33724097ae2c8e5e96054a2db5423dabe0a30d578c594f9e52b47d65bb231d7fee4c63ef1556770718aeaf7af122a191dc15a6b18390607af096692eda56bf25a3cdf280c1e3f2653cdcbc89eb49c181f33487ba27ccc37b8a89b0857131f1a6d772b106626e53624b40062c1496d7b6a45f9565707c7a2893adc9dd8eb568cb3d9018a6b79d9bfc4c6790a483632439b41f489c6e9b5b9edb349153aa835a9ec1ba59ba57db71c73d92e736831a