zst-tarnow.pl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:1e:0f:d0:8d:78:b0:bc:4b:7c:22:04:ac:3c:b6:9b:47:8f was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=zst-tarnow.pl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1e:0f:d0:8d:78:b0:bc:4b:7c:22:04:ac:3c:b6:9b:47:8fSerial Number (int): 271566350089974073438860456503697160750991
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: aa:c6:43:d9:5f:03:40:a2:c6:96:24:b3:6c:fc:fd:36:aa:33:00:dd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 13:d5:df:80:d9:23:75:16:56:51:ca:3b:64:bc:b5:d8:dc:22:39:57
Fingerprint (sha256): ca:3a:01:1c:a4:6c:7b:d7:f2:cf:ec:1a:66:fd:05:10:c0:9f:95:f1:d4:44:6a:86:46:47:a5:5c:f0:60:5c:71
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate zst-tarnow.pl
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for zst-tarnow.pl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.zst-tarnow.pl
pop.zst-tarnow.pl
smtp.zst-tarnow.pl
www.zst-tarnow.pl
zst-tarnow.pl
pop.zst-tarnow.pl
smtp.zst-tarnow.pl
www.zst-tarnow.pl
zst-tarnow.pl
Other certificates including the domain name zst-tarnow.pl
(limited to 100 certificates)
zst-tarnow.pl
fundacja.zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
moto.zst-tarnow.pl
fundacja.zst-tarnow.pl
zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
zst-tarnow.pl
zst-tarnow.pl
sni187966.cloudflaressl.com
zst-tarnow.pl
katalog.zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
moto.zst-tarnow.pl
zst-tarnow.pl
katalog.zst-tarnow.pl
sni187966.cloudflaressl.com
ligaszachowa.zst-tarnow.pl
sni187966.cloudflaressl.com
ligaszachowa.zst-tarnow.pl
skt.zst-tarnow.pl
zst-tarnow.pl
programowanie.zst-tarnow.pl
programowanie.zst-tarnow.pl
katalog.zst-tarnow.pl
fundacja.zst-tarnow.pl
www.zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
programowanie.zst-tarnow.pl
sni187966.cloudflaressl.com
fundacja.zst-tarnow.pl
katalog.zst-tarnow.pl
zst-tarnow.pl
zst-tarnow.pl
zst-tarnow.pl
moodle.zst-tarnow.pl
fundacja.zst-tarnow.pl
programowanie.zst-tarnow.pl
sni187966.cloudflaressl.com
fundacja.zst-tarnow.pl
katalog.zst-tarnow.pl
sni187966.cloudflaressl.com
sni187966.cloudflaressl.com
katalog.zst-tarnow.pl
zst-tarnow.pl
zst-tarnow.pl
programowanie.zst-tarnow.pl
sni187966.cloudflaressl.com
ligaszachowa.zst-tarnow.pl
fundacja.zst-tarnow.pl
sni187966.cloudflaressl.com
katalog.zst-tarnow.pl
sni187966.cloudflaressl.com
programowanie.zst-tarnow.pl
katalog.zst-tarnow.pl
sni187966.cloudflaressl.com
zst-tarnow.pl
zst-tarnow.pl
sni187966.cloudflaressl.com
sni187966.cloudflaressl.com
zst-tarnow.pl
zst-tarnow.pl
programowanie.zst-tarnow.pl
fundacja.zst-tarnow.pl
katalog.zst-tarnow.pl
www.multimedia.zst-tarnow.pl
zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
sni187966.cloudflaressl.com
zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
zst-tarnow.pl
fundacja.zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
moto.zst-tarnow.pl
fundacja.zst-tarnow.pl
zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
zst-tarnow.pl
zst-tarnow.pl
sni187966.cloudflaressl.com
zst-tarnow.pl
katalog.zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
moto.zst-tarnow.pl
zst-tarnow.pl
katalog.zst-tarnow.pl
sni187966.cloudflaressl.com
ligaszachowa.zst-tarnow.pl
sni187966.cloudflaressl.com
ligaszachowa.zst-tarnow.pl
skt.zst-tarnow.pl
zst-tarnow.pl
programowanie.zst-tarnow.pl
programowanie.zst-tarnow.pl
katalog.zst-tarnow.pl
fundacja.zst-tarnow.pl
www.zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
programowanie.zst-tarnow.pl
sni187966.cloudflaressl.com
fundacja.zst-tarnow.pl
katalog.zst-tarnow.pl
zst-tarnow.pl
zst-tarnow.pl
zst-tarnow.pl
moodle.zst-tarnow.pl
fundacja.zst-tarnow.pl
programowanie.zst-tarnow.pl
sni187966.cloudflaressl.com
fundacja.zst-tarnow.pl
katalog.zst-tarnow.pl
sni187966.cloudflaressl.com
sni187966.cloudflaressl.com
katalog.zst-tarnow.pl
zst-tarnow.pl
zst-tarnow.pl
programowanie.zst-tarnow.pl
sni187966.cloudflaressl.com
ligaszachowa.zst-tarnow.pl
fundacja.zst-tarnow.pl
sni187966.cloudflaressl.com
katalog.zst-tarnow.pl
sni187966.cloudflaressl.com
programowanie.zst-tarnow.pl
katalog.zst-tarnow.pl
sni187966.cloudflaressl.com
zst-tarnow.pl
zst-tarnow.pl
sni187966.cloudflaressl.com
sni187966.cloudflaressl.com
zst-tarnow.pl
zst-tarnow.pl
programowanie.zst-tarnow.pl
fundacja.zst-tarnow.pl
katalog.zst-tarnow.pl
www.multimedia.zst-tarnow.pl
zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
sni187966.cloudflaressl.com
zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
zst-tarnow.pl
Certificate
The complete raw certificate details for zst-tarnow.pl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgISAx4P0I14sLxLfCIErDy2m0ePMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMDcwMjAyMjFaFw0y MDA0MDYwMjAyMjFaMBgxFjAUBgNVBAMTDXpzdC10YXJub3cucGwwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUoHq5PGPLwCDU2KKLqTJnN8z2VTflfhV x+yIdmHiHuYymd0uYsk4yWtgrWkC0fIomjp7XXpPjjheWdNCAXHYLaAsbToUkiP/ GqwS5zQHeo1D2H0HF7pJD/clCnpMiU2bs99lXtJdM5tCafWbpB2dco0aWvu5sg0f lbwKtPuuKeh3ZMxnetlXKAKYP6mBn8R/LbulgSsvFJ13y6uSoCANoXXG3+hIhGyA 47DIdIDl2JZonKnJy8ljvbBdzHh8cl3QXOsN9DgnokC6LPYeJ4sTGLOkcva8rvAM B7iTaqhlcwLNz1JGcNs6C9s6FLHwz/eiWz/1tqfd1bm0KadmPURNAgMBAAGjggKx MIICrTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKrGQ9lfA0CixpYks2z8/TaqMwDd MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wZgYDVR0RBF8wXYISbWFpbC56c3QtdGFybm93LnBsghFwb3AuenN0LXRhcm5v dy5wbIISc210cC56c3QtdGFybm93LnBsghF3d3cuenN0LXRhcm5vdy5wbIINenN0 LXRhcm5vdy5wbDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisG AQQB1nkCBAIEgfYEgfMA8QB3APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSmsKiq jrJzAAABb330Az0AAAQDAEgwRgIhAKKfLV/1NI8aKVRwjQW7oRHf6MG0olhTOcdS p/CT0WFZAiEAmBYu9KL1h1cjx5HvrGkZDqK/BMyLJ95EhlnnHQHG6agAdgCyHgXM i6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW999ANgAAAEAwBHMEUCIQCd 8njDFtZVS4NO+uReqrFx30py1Wod/GOZPVGFa/NjmAIgQ2qrpucrbERXB6t3gQUc CAWTolBYlHXN9kcdpcXA8pgwDQYJKoZIhvcNAQELBQADggEBAJFZ0apyUjgwOZCJ RqA94WX6R13b3oJs6/ho9CJ0t9zUkhYyVzLyz+wIkUAmc1fnTEdf1BEE5j4jdxd1 eXErrzC56gPUWA9HAVYk8uFIGWWVgyPgNJDPSTDIFksDplnEZc2fNwMQ5UtcUiLV hwUhn4zy3KQT64/8lrBLF1pSjR1U5eA27z+MW2OXeoE6vKoHOQEA3KBMPlQ1lcVG 3SrORbJxe4YvPLRpG5m86tm0ipZ+4LSlh/R3vXwAkCWrkOd5B2M7jCx7RCFCgIzQ PEZ6S01t4aOPNnI1sgy77oq39qjg/cHyk6MajkWnzZOZEG36cAZORVw7YEhJoOk1 0+8WJUo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVKB6uTxjy8Ag1Niii6k yZzfM9lU35X4VcfsiHZh4h7mMpndLmLJOMlrYK1pAtHyKJo6e116T444XlnTQgFx 2C2gLG06FJIj/xqsEuc0B3qNQ9h9Bxe6SQ/3JQp6TIlNm7PfZV7SXTObQmn1m6Qd nXKNGlr7ubINH5W8CrT7rinod2TMZ3rZVygCmD+pgZ/Efy27pYErLxSdd8urkqAg DaF1xt/oSIRsgOOwyHSA5diWaJypycvJY72wXcx4fHJd0FzrDfQ4J6JAuiz2HieL ExizpHL2vK7wDAe4k2qoZXMCzc9SRnDbOgvbOhSx8M/3ols/9ban3dW5tCmnZj1E TQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 271566350089974073438860456503697160750991 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 02:02:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 02:02:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zst-tarnow.pl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24404678818378054020819366512780230030306825662161116999959698755030192951810667290690161392770222603567149536999646396614191987258152258034348662728401599080531980197139413518230086103559747546439683443981871576494438228256119819869100307983985906140128909721110966260826159860551159795686770105559372143146315803127488018048922338124928582420810707423664665006719293849712339804314565389931635472916518757803870360368533239158711073371921885728566781013123654138726235696790178091580123692783553791275810645656949891069871735499416794637143657642231056694996785475857576833617988393667935921570572450219643497169997 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) aac643d95f0340a2c69624b36cfcfd36aa3300dd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zst-tarnow.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.zst-tarnow.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.zst-tarnow.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zst-tarnow.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zst-tarnow.pl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f7df4033d0000040300483046022100a29f2d5ff5348f1a2954708d05bba111dfe8c1b4a2585339c752a7f093d1615902210098162ef4a2f5875723c791efac69190ea2bf04cc8b27de448659e71d01c6e9a8007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f7df4036000000403004730450221009df278c316d6554b834efae45eaab171df4a72d56a1dfc63993d51856bf363980220436aaba6e72b6c445707ab7781051c080593a250589475cdf6471da5c5c0f298 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009159d1aa7252383039908946a03de165fa475ddbde826cebf868f42274b7dcd49216325732f2cfec089140267357e74c475fd41104e63e2377177579712baf30b9ea03d4580f47015624f2e1481965958323e03490cf4930c8164b03a659c465cd9f370310e54b5c5222d58705219f8cf2dca413eb8ffc96b04b175a528d1d54e5e036ef3f8c5b63977a813abcaa07390100dca04c3e543595c546dd2ace45b2717b862f3cb4691b99bcead9b48a967ee0b4a587f477bd7c009025ab90e77907633b8c2c7b442142808cd03c467a4b4d6de1a38f367235b20cbbee8ab7f6a8e0fdc1f293a31a8e45a7cd9399106dfa70064e455c3b604849a0e935d3ef16254a