gaccwest.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f2:c1:f7:18:d2:97:17:c8:25:4d:4b:a9:03:b0:61:f9:d5 was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gaccwest.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f2:c1:f7:18:d2:97:17:c8:25:4d:4b:a9:03:b0:61:f9:d5Serial Number (int): 343943014594120900566476906448393817160149
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f5:1c:79:0e:08:17:a5:e0:29:14:52:36:cc:21:29:f1:4b:f1:35:d1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 8c:62:df:0e:59:bf:67:96:29:7e:5d:1c:a3:d4:5e:0b:a3:7a:58:14
Fingerprint (sha256): cd:05:c8:01:ac:63:2c:19:57:80:b8:7c:54:08:c7:e4:f4:b7:62:3b:b2:ce:61:98:a9:44:92:8a:36:1d:96:2f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate gaccwest.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gaccwest.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gaccsanfrancisco.com
gaccwest.com
usa.sanfrancisco.ahk.de
www.gaccsanfrancisco.com
www.gaccwest.com
www.usa.sanfrancisco.ahk.de
gaccwest.com
usa.sanfrancisco.ahk.de
www.gaccsanfrancisco.com
www.gaccwest.com
www.usa.sanfrancisco.ahk.de
Other certificates including the domain name gaccwest.com
(limited to 100 certificates)
www.gaccny.us
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
www.gaccny.us
www.gaccwest.com
gaccwest.com
gaccwest.com
www.gaccny.us
gaccwest.com
gaccwest.com
www.gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
www.gaccny.us
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
www.gaccny.us
gaccwest.com
ahksanfrancisco.v11.live.typo3.ahk.web-hauptstadt.de
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
vpn.gaccny.us
gaccwest.com
gaccwest.com
www.gaccny.us
gaccwest.com
www.gaccny.us
gaccwest.com
www.gaccny.us
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
www.gaccny.us
www.gaccwest.com
gaccwest.com
gaccwest.com
www.gaccny.us
gaccwest.com
gaccwest.com
www.gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
www.gaccny.us
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
www.gaccny.us
gaccwest.com
ahksanfrancisco.v11.live.typo3.ahk.web-hauptstadt.de
gaccwest.com
gaccwest.com
gaccwest.com
gaccwest.com
vpn.gaccny.us
gaccwest.com
gaccwest.com
www.gaccny.us
gaccwest.com
www.gaccny.us
gaccwest.com
www.gaccny.us
gaccwest.com
Certificate
The complete raw certificate details for gaccwest.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGzDCCBbSgAwIBAgISA/LB9xjSlxfIJU1LqQOwYfnVMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjQyMDQxMzhaFw0x OTEyMjMyMDQxMzhaMBcxFTATBgNVBAMTDGdhY2N3ZXN0LmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBANEYgDTpIknhcfAWbTn2DRNN5gos7a0EO50q CaQhAmSLzoeYA8GOS2XqN5w14c0lJ0lQUZ1NozjRrxRqt1w62kldYQKBxXs3Db2T m62ONv7tnR5rxARslWcGt4MmdK57VAWbfE423EA2MwGQcllsK6f8YCZxpMIukToT 1bJijDkMHBDzJsYGshFMBl51wz7RkSwi6Mkdg5T68AWd2rhUl8UW2Z40eCNZVJw5 dhFAnZ9zIdqoPYweCEHJ7wFFtdk+yB0Yl26HJq0saWzKrDQ89sJ5GdNtfw7MH9si l7KIOMCziY1NaTa0kZIifBlj/dCllXEo0C6jPVFzzSvNIZPAkFjPOCHyDMir/KA3 w1YMK0m29t2pxAyzh0dLpieUzJDY3xAqtoiJ76QweCnUCFk9RITwaIUgTvepYZeO PggHUO9QVJziPFix6GoqeDSpxiclqt7AnXnwo4ZmK1mNIjLcKtuxuHz4vONjC3Qw X9Kv2qkZdEYWsY7TrAoeqnd3uyNMIL4O4kHs537sOkFvtXufRdw5YyYWrTFi8qxo gwqd9eNegxKp0DH6BDBCvu2VoVED7gm8DpyRrVYh7ZfBhqauQG9n1S4oWtU1MUN4 jvitKn1XwVdWvTmRA6RkKfXoPXWuPnjh29/wko9kTzZykYjo2xvdGJrhE9JctT2n knfYtU+DAgMBAAGjggLdMIIC2TAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPUceQ4I F6XgKRRSNswhKfFL8TXRMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wgZEGA1UdEQSBiTCBhoIUZ2FjY3NhbmZyYW5jaXNj by5jb22CDGdhY2N3ZXN0LmNvbYIXdXNhLnNhbmZyYW5jaXNjby5haGsuZGWCGHd3 dy5nYWNjc2FuZnJhbmNpc2NvLmNvbYIQd3d3LmdhY2N3ZXN0LmNvbYIbd3d3LnVz YS5zYW5mcmFuY2lzY28uYWhrLmRlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysG AQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu b3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcA4mlLribo6UAJ6IYbtjuD1D7n /nSI+6SPKJMBnd3x2/4AAAFtZTkIAwAABAMASDBGAiEAyEWtimPLSNkfS3ScTMgX nmJpmy7tla9dltC7+3ZDikQCIQDibaLo2Elg2XuQnYnWImA3ax8Ec7/iEM7ocS1b FyRd5QB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbWU5BegA AAQDAEcwRQIgQ+r1fsjEBUVj5/29YLhBA/vFfDXb2kRyiBdTH45Z9c8CIQChDmbS rPToFfMJ8IgssxMkXK9SCezivk+x0wx8udCa+jANBgkqhkiG9w0BAQsFAAOCAQEA f3qyvuRFoB2+c+NGhRebtv4sSzsqp6mnZPXF7rnszDDw0psU/Dux+8PASqaRtzAm mgikkZkWS3NMrMEhASkhBCRUS+0VtUHSncIYQqXJ6lkkSZHXH8eePOzH3wI7CTTl BREcNPCsQaGJXUMJK5XiZx6MnnBcZ6S+eaDaJiioTenry9Rvd9BfFawJbAMww1/w BXKi3xC5P6+CFK8IVCITdLnqtcblMRcxzxrL3yRqEnVELWvscPTNODOwy8+xyg0O eLpZhQ3ldlAaKJC7xlXW41bF7q4al//h2yPZ+lTsMxEJTr31Mk1YwPtmmQIuIo3V jgU8Su143MjzIUWxiI0iMA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0RiANOkiSeFx8BZtOfYN E03mCiztrQQ7nSoJpCECZIvOh5gDwY5LZeo3nDXhzSUnSVBRnU2jONGvFGq3XDra SV1hAoHFezcNvZObrY42/u2dHmvEBGyVZwa3gyZ0rntUBZt8TjbcQDYzAZByWWwr p/xgJnGkwi6ROhPVsmKMOQwcEPMmxgayEUwGXnXDPtGRLCLoyR2DlPrwBZ3auFSX xRbZnjR4I1lUnDl2EUCdn3Mh2qg9jB4IQcnvAUW12T7IHRiXbocmrSxpbMqsNDz2 wnkZ021/Dswf2yKXsog4wLOJjU1pNrSRkiJ8GWP90KWVcSjQLqM9UXPNK80hk8CQ WM84IfIMyKv8oDfDVgwrSbb23anEDLOHR0umJ5TMkNjfECq2iInvpDB4KdQIWT1E hPBohSBO96lhl44+CAdQ71BUnOI8WLHoaip4NKnGJyWq3sCdefCjhmYrWY0iMtwq 27G4fPi842MLdDBf0q/aqRl0RhaxjtOsCh6qd3e7I0wgvg7iQeznfuw6QW+1e59F 3DljJhatMWLyrGiDCp31416DEqnQMfoEMEK+7ZWhUQPuCbwOnJGtViHtl8GGpq5A b2fVLiha1TUxQ3iO+K0qfVfBV1a9OZEDpGQp9eg9da4+eOHb3/CSj2RPNnKRiOjb G90YmuET0ly1PaeSd9i1T4MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 343943014594120900566476906448393817160149 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 20:41:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 20:41:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gaccwest.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853036057768468061415708209501076415391283245727146336704187425055686806841919745618667196686781831135686648630223138328350855282840220668761741330051706115648024893850656383100740904082405405411186722517374857590388776055162474951709990625873001762434171098071491967585925647428723309247686616537834832713602969817589793998540686145466167275329343227265728925129802362865737501537097685540989232938629842489248757433814265447356044018530677062495662961109875252642910926226798720035686930599770185837668514196413801428289402085830180338101560986137116882331270006409828134959229545792873818476062298742884821488610944240723479382008366927643027143122446764415588850328103504735603157099941100884545602830887295308015800049698183281276665779028456032995367780673571284405293572318239046693294593940672422437013766574226988951271250391895593582779693836959241018645914600728155831331545920935665254392093497813885297621553097865402813922560622253987978958384586726977628477726262599349408116805033424554503115889164860134038796897541427955048969799791740983901131364197153751867445577210488563602210570453585132838838724250639531704268126533127296848845846443771713997762871303223084518535222680750535691275363779046808766265087577987 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f51c790e0817a5e029145236cc2129f14bf135d1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaccsanfrancisco.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaccwest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa.sanfrancisco.ahk.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaccsanfrancisco.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaccwest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usa.sanfrancisco.ahk.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d653908030000040300483046022100c845ad8a63cb48d91f4b749c4cc8179e62699b2eed95af5d96d0bbfb76438a44022100e26da2e8d84960d97b909d89d62260376b1f0473bfe210cee8712d5b17245de500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d653905e80000040300473045022043eaf57ec8c4054563e7fdbd60b84103fbc57c35dbda44728817531f8e59f5cf022100a10e66d2acf4e815f309f0882cb313245caf5209ece2be4fb1d30c7cb9d09afa . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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