gutschein.royal-canin.at
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:fb:58:4f:90:68:74:13:d9:34:ab:14:12:1d:24:5f:a1:cb was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gutschein.royal-canin.at
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:fb:58:4f:90:68:74:13:d9:34:ab:14:12:1d:24:5f:a1:cbSerial Number (int): 433977403008220073847779779242620599902667
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 73:0c:82:ed:a2:d5:62:a6:c5:96:27:7d:e2:20:3b:00:fe:89:1c:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 57:13:b1:10:01:0a:20:43:72:5a:7f:56:84:af:7b:5a:b7:e3:42:f5
Fingerprint (sha256): c6:71:62:12:eb:d8:6e:61:69:fa:7e:aa:4f:93:2b:37:aa:ed:b9:e0:11:6a:77:c6:a6:dc:4e:7d:2f:8f:b1:fe
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate gutschein.royal-canin.at
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gutschein.royal-canin.at
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gutschein.royal-canin.at
Other certificates including the domain name royal-canin.at
(limited to 100 certificates)
aws-cf-rd25.mars-inc.com
incapsula.com
*.royalcanin.dk
*.royalcanin.dk
*.mars.com
lambda-redirect20.mars-inc.com
vetfollowup.royalcanin.com.au
*.royal-canin.at
incapsula.com
*.royal-canin.at
incapsula.com
incapsula.com
gutschein.royal-canin.at
*.mars.com
*.mars.com
vetservices.royal-canin.at
vetservices.royalcanin.be
aws-cf-rd25.mars-inc.com
*.royalcanin.dk
*.mars.com
*.mars.com
vetservices.royal-canin.at
*.mars.com
*.royalcanin.dk
*.mars.com
*.mars.com
incapsula.com
*.mars.com
www.royal-canin.de
aws-cf-rd25.mars-inc.com
*.mars.com
www.royal-canin.de
*.mars.com
adminvfu.royalcanin.com
aws-cf-www-royalcanin-com-rd01.mars-inc.com
www.royal-canin.de
*.mars.com
adminvfu.royalcanin.com
www.royal-canin.de
vetservices.royal-canin.at
www.royal-canin.de
incapsula.com
gutschein.royal-canin.at
*.royal-canin.at
vetservices.royal-canin.at
aws-cf-rd25.mars-inc.com
adminvfu.royalcanin.com
www.royal-canin.de
*.mars.com
*.royal-canin.at
adminvfu.royalcanin.com
aws-cf-rd25.mars-inc.com
gutschein.royal-canin.at
*.mars.com
vetservices.royal-canin.at
*.mars.com
aws-cf-rd25.mars-inc.com
incapsula.com
vetservices.royal-canin.at
royal-canin.de
*.mars.com
aws-cf-rd25.mars-inc.com
*.mars.com
*.royalcanin.dk
aws-cf-www-royalcanin-com-rd01.mars-inc.com
*.mars.com
adminvfu.royalcanin.com
*.royalcanin.dk
incapsula.com
*.mars.com
aws-cf-rd25.mars-inc.com
vetservices.royal-canin.at
*.mars.com
*.mars.com
aws-cf-rd25.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd25.mars-inc.com
gutschein.royal-canin.at
aws-cf-rd25.mars-inc.com
aws-cf-rd25.mars-inc.com
*.mars.com
*.royalcanin.dk
aws-cf-rd25.mars-inc.com
*.royalcanin.dk
aws-cf-www-royalcanin-com-rd01.mars-inc.com
*.mars.com
*.mars.com
*.mars.com
*.mars.com
vetservices.royal-canin.at
*.royal-canin.at
adminvfu.royalcanin.com
*.royal-canin.at
*.mars.com
*.mars.com
www.royal-canin.de
*.mars.com
*.royalcanin.dk
gutschein.royal-canin.at
*.mars.com
incapsula.com
*.royalcanin.dk
*.royalcanin.dk
*.mars.com
lambda-redirect20.mars-inc.com
vetfollowup.royalcanin.com.au
*.royal-canin.at
incapsula.com
*.royal-canin.at
incapsula.com
incapsula.com
gutschein.royal-canin.at
*.mars.com
*.mars.com
vetservices.royal-canin.at
vetservices.royalcanin.be
aws-cf-rd25.mars-inc.com
*.royalcanin.dk
*.mars.com
*.mars.com
vetservices.royal-canin.at
*.mars.com
*.royalcanin.dk
*.mars.com
*.mars.com
incapsula.com
*.mars.com
www.royal-canin.de
aws-cf-rd25.mars-inc.com
*.mars.com
www.royal-canin.de
*.mars.com
adminvfu.royalcanin.com
aws-cf-www-royalcanin-com-rd01.mars-inc.com
www.royal-canin.de
*.mars.com
adminvfu.royalcanin.com
www.royal-canin.de
vetservices.royal-canin.at
www.royal-canin.de
incapsula.com
gutschein.royal-canin.at
*.royal-canin.at
vetservices.royal-canin.at
aws-cf-rd25.mars-inc.com
adminvfu.royalcanin.com
www.royal-canin.de
*.mars.com
*.royal-canin.at
adminvfu.royalcanin.com
aws-cf-rd25.mars-inc.com
gutschein.royal-canin.at
*.mars.com
vetservices.royal-canin.at
*.mars.com
aws-cf-rd25.mars-inc.com
incapsula.com
vetservices.royal-canin.at
royal-canin.de
*.mars.com
aws-cf-rd25.mars-inc.com
*.mars.com
*.royalcanin.dk
aws-cf-www-royalcanin-com-rd01.mars-inc.com
*.mars.com
adminvfu.royalcanin.com
*.royalcanin.dk
incapsula.com
*.mars.com
aws-cf-rd25.mars-inc.com
vetservices.royal-canin.at
*.mars.com
*.mars.com
aws-cf-rd25.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd25.mars-inc.com
gutschein.royal-canin.at
aws-cf-rd25.mars-inc.com
aws-cf-rd25.mars-inc.com
*.mars.com
*.royalcanin.dk
aws-cf-rd25.mars-inc.com
*.royalcanin.dk
aws-cf-www-royalcanin-com-rd01.mars-inc.com
*.mars.com
*.mars.com
*.mars.com
*.mars.com
vetservices.royal-canin.at
*.royal-canin.at
adminvfu.royalcanin.com
*.royal-canin.at
*.mars.com
*.mars.com
www.royal-canin.de
*.mars.com
*.royalcanin.dk
gutschein.royal-canin.at
*.mars.com
Certificate
The complete raw certificate details for gutschein.royal-canin.at in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgISBPtYT5BodBPZNKsUEh0kX6HLMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTMwMTA3NDhaFw0y MDAzMTIwMTA3NDhaMCMxITAfBgNVBAMTGGd1dHNjaGVpbi5yb3lhbC1jYW5pbi5h dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALCK9gZhS4xe+Sch2G9/ jgHbdP7qX9Neb1SAdIDPFzR/Ak9I0iCkhhXPLaB58EaDYkTjx2C/aijrFES0SpPJ XR3O+UywiYaytoEUc0YZPCxXps9dTcM0cfrccELVqKr7NXKN/e2DZKc2jUMqcX41 g9sVibKEMX9bHtkapkHZnCweQ1z82S6UVd0lzGy+UPr2X+cVpK/bt5l8xqXAGejy yg7Z0QI2pZhH7eLy2MmEalNELoAv9+BKTvKofzZRPEE4kOdgkIiJm86xJxVhrzzb HTCuFFT5RmABq/CXur7vXy9Ygomj82jX1HZRQV71js6BLuxAy+CSZ9WrowmxspeF NLsCAwEAAaOCAmwwggJoMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUcwyC7aLVYqbF lid94iA7AP6JHIAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzAjBgNVHREEHDAaghhndXRzY2hlaW4ucm95YWwtY2FuaW4u YXQwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQC BIH0BIHxAO8AdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW79 AxZnAAAEAwBHMEUCIQCOP0XCr+qWBAeillPUnbQZrePXQmFPACRNZ6Cv1DO4GwIg XNh16y8VubJBFkXwwRyPeoAGtxVKDLu9OHKm1uOKTigAdQCyHgXMi6LNiiBOh2b5 K7mKJSBna9r6cOeySVMt74uQXgAAAW79AxZaAAAEAwBGMEQCIEsGmzuK1ky58nXi MtGKaovdRSKFMeXp6A2lUeSua7ycAiBwcjJO/YWSw2Z3WkKSKiuEEYBgdrFWUBqF sMj7gtFvDDANBgkqhkiG9w0BAQsFAAOCAQEAFYmqH5bso+G2GyG1nlmll3X4s9Az t7Uj491/ZpBME3T+MXMySoTJT5jFNsJ8PUGwDcvF8eVauJQmxK9CQ8MaYCwgaRa2 O92BLXBDP/beWdeJw2HHsYNoaGWaU5cLiW9slCGEXRQ3N7xZDMgwrzdLzsxPWN3s LXmcL0hcubCcemrnB9xTOGfnidvqLei86xMj/QMywxe8LoUSapspWFBpgE1MuBa/ GlB641UbLqVY+Z1JCq/9HlUlwT8rFc1SnCm5q+XELPomqEZO0+ARmQmTwVOt7EMi Cc/LN8g8f8iylnLhA4LdKW1VBZcYBaqnywmabu3njr6IWUx47zkLCqBrNQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIr2BmFLjF75JyHYb3+O Adt0/upf015vVIB0gM8XNH8CT0jSIKSGFc8toHnwRoNiROPHYL9qKOsURLRKk8ld Hc75TLCJhrK2gRRzRhk8LFemz11NwzRx+txwQtWoqvs1co397YNkpzaNQypxfjWD 2xWJsoQxf1se2RqmQdmcLB5DXPzZLpRV3SXMbL5Q+vZf5xWkr9u3mXzGpcAZ6PLK DtnRAjalmEft4vLYyYRqU0QugC/34EpO8qh/NlE8QTiQ52CQiImbzrEnFWGvPNsd MK4UVPlGYAGr8Je6vu9fL1iCiaPzaNfUdlFBXvWOzoEu7EDL4JJn1aujCbGyl4U0 uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 433977403008220073847779779242620599902667 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-13 01:07:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 01:07:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gutschein.royal-canin.at' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22286465914245234340251441996482416265914931239925797898086633344719728320459344891304518000832017860461782303425469945715994336930021030006302538933731917258268178399350438308872804045251768877841097092963456394670601553995111160775851132357540207091909188334449437196331401906111432865340023812475102850786801049777270652248059123622647979995631294818219759051364965737119592019506502657392938111128822325916684414075724039464271489784887596052687942246174803031997967430695036203108861840112255863692269898128331587540986832442423690408748201506571064330160937907465355905890905745514429809583271594895049721459899 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 730c82eda2d562a6c596277de2203b00fe891c80 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gutschein.royal-canin.at' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016efd03166700000403004730450221008e3f45c2afea960407a29653d49db419ade3d742614f00244d67a0afd433b81b02205cd875eb2f15b9b2411645f0c11c8f7a8006b7154a0cbbbd3872a6d6e38a4e28007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016efd03165a000004030046304402204b069b3b8ad64cb9f275e232d18a6a8bdd45228531e5e9e80da551e4ae6bbc9c02207072324efd8592c366775a42922a2b8411806076b156501a85b0c8fb82d16f0c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001589aa1f96eca3e1b61b21b59e59a59775f8b3d033b7b523e3dd7f66904c1374fe3173324a84c94f98c536c27c3d41b00dcbc5f1e55ab89426c4af4243c31a602c206916b63bdd812d70433ff6de59d789c361c7b1836868659a53970b896f6c9421845d143737bc590cc830af374bcecc4f58ddec2d799c2f485cb9b09c7a6ae707dc533867e789dbea2de8bceb1323fd0332c317bc2e85126a9b29585069804d4cb816bf1a507ae3551b2ea558f99d490aaffd1e5525c13f2b15cd529c29b9abe5c42cfa26a8464ed3e011990993c153adec432209cfcb37c83c7fc8b29672e10382dd296d5505971805aaa7cb099a6eede78ebe88594c78ef390b0aa06b35