kamikos.it
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d8:c5:b5:00:92:0d:53:61:d7:91:8d:b3:17:10:4a:d9:18 was issued on by Let's Encrypt.
With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kamikos.it
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d8:c5:b5:00:92:0d:53:61:d7:91:8d:b3:17:10:4a:d9:18Serial Number (int): 335100646782675907113822813562565070346520
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 13:1c:d1:63:7c:b1:ec:2e:c8:58:15:2f:f4:6a:ee:6b:52:62:96:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 52:4f:c8:aa:fc:c8:36:35:e6:f0:f2:be:74:36:b0:fc:9c:65:02:74
Fingerprint (sha256): dd:31:ab:ba:01:b3:6c:40:92:5e:d5:94:7e:08:5d:5c:81:3a:db:17:95:df:9f:dc:66:17:e4:88:b9:f9:dc:8d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate kamikos.it
22
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kamikos.it
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
agricolamontalbano.com
agricolamontalbano.it
agricolamontalbanobio.mblabs.a2hosted.com
agricolamontalbanocom.mblabs.a2hosted.com
agricolamontalbanoit.mblabs.a2hosted.com
effe.mblabs.a2hosted.com
giusycarletto.mblabs.a2hosted.com
ipacem.it
ipacem.mblabs.a2hosted.com
kamikos.it
kamikos.mblabs.a2hosted.com
www.agricolamontalbano.com
www.agricolamontalbano.it
www.agricolamontalbanobio.mblabs.a2hosted.com
www.agricolamontalbanocom.mblabs.a2hosted.com
www.agricolamontalbanoit.mblabs.a2hosted.com
www.effe.mblabs.a2hosted.com
www.giusycarletto.mblabs.a2hosted.com
www.ipacem.it
www.ipacem.mblabs.a2hosted.com
www.kamikos.it
www.kamikos.mblabs.a2hosted.com
agricolamontalbano.it
agricolamontalbanobio.mblabs.a2hosted.com
agricolamontalbanocom.mblabs.a2hosted.com
agricolamontalbanoit.mblabs.a2hosted.com
effe.mblabs.a2hosted.com
giusycarletto.mblabs.a2hosted.com
ipacem.it
ipacem.mblabs.a2hosted.com
kamikos.it
kamikos.mblabs.a2hosted.com
www.agricolamontalbano.com
www.agricolamontalbano.it
www.agricolamontalbanobio.mblabs.a2hosted.com
www.agricolamontalbanocom.mblabs.a2hosted.com
www.agricolamontalbanoit.mblabs.a2hosted.com
www.effe.mblabs.a2hosted.com
www.giusycarletto.mblabs.a2hosted.com
www.ipacem.it
www.ipacem.mblabs.a2hosted.com
www.kamikos.it
www.kamikos.mblabs.a2hosted.com
Other certificates including the domain name kamikos.it
(limited to 100 certificates)
Certificate
The complete raw certificate details for kamikos.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH7DCCBtSgAwIBAgISA9jFtQCSDVNh15GNsxcQStkYMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjAxNjAyMzZaFw0y MDAxMTgxNjAyMzZaMBUxEzARBgNVBAMTCmthbWlrb3MuaXQwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQC7p9UegzwyteSoVU8EpEYAAxIZ4Nj0p6Joey8F oAF9lxKLZMB7nW8TMLcTdB4Rkkg5Ns3OJugrWA7mFWFS4QcxBCQsEYifgsAo6hXX RuK7mllyM7QExdAhLslchLBEQB17Zc/ByL6TKhCyEd+2K5GRf/C7+4G1e97rC4WO qvrtfww/Eh2kkrgU+ieWqOq5lFjjuIw4VgCOxXhLn6TwFS7lnRHF9hmYtDto2juP P2hTLkTmdpxD9yF2kQMaBJNh9q1XiYVgZHp0yNUDLUawy+tau/E0qK2cuwPhJXJI Unqot5BWovF04jNG8jc3YCzTb+tyytPZJC+F9+ffdiFE/V9RAgMBAAGjggT/MIIE +zAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBMc0WN8sewuyFgVL/Rq7mtSYpacMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w ggKxBgNVHREEggKoMIICpIIWYWdyaWNvbGFtb250YWxiYW5vLmNvbYIVYWdyaWNv bGFtb250YWxiYW5vLml0gilhZ3JpY29sYW1vbnRhbGJhbm9iaW8ubWJsYWJzLmEy aG9zdGVkLmNvbYIpYWdyaWNvbGFtb250YWxiYW5vY29tLm1ibGFicy5hMmhvc3Rl ZC5jb22CKGFncmljb2xhbW9udGFsYmFub2l0Lm1ibGFicy5hMmhvc3RlZC5jb22C GGVmZmUubWJsYWJzLmEyaG9zdGVkLmNvbYIhZ2l1c3ljYXJsZXR0by5tYmxhYnMu YTJob3N0ZWQuY29tgglpcGFjZW0uaXSCGmlwYWNlbS5tYmxhYnMuYTJob3N0ZWQu Y29tggprYW1pa29zLml0ghtrYW1pa29zLm1ibGFicy5hMmhvc3RlZC5jb22CGnd3 dy5hZ3JpY29sYW1vbnRhbGJhbm8uY29tghl3d3cuYWdyaWNvbGFtb250YWxiYW5v Lml0gi13d3cuYWdyaWNvbGFtb250YWxiYW5vYmlvLm1ibGFicy5hMmhvc3RlZC5j b22CLXd3dy5hZ3JpY29sYW1vbnRhbGJhbm9jb20ubWJsYWJzLmEyaG9zdGVkLmNv bYIsd3d3LmFncmljb2xhbW9udGFsYmFub2l0Lm1ibGFicy5hMmhvc3RlZC5jb22C HHd3dy5lZmZlLm1ibGFicy5hMmhvc3RlZC5jb22CJXd3dy5naXVzeWNhcmxldHRv Lm1ibGFicy5hMmhvc3RlZC5jb22CDXd3dy5pcGFjZW0uaXSCHnd3dy5pcGFjZW0u bWJsYWJzLmEyaG9zdGVkLmNvbYIOd3d3LmthbWlrb3MuaXSCH3d3dy5rYW1pa29z Lm1ibGFicy5hMmhvc3RlZC5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwDwlaRZ8gDRgkAQLS+TiI6tS/4d R+OZ4dA0prCoqo6ycwAAAW3qHuW7AAAEAwBIMEYCIQDMLtmqTfo5EwcG5OxCemCk qAgdMFV8L1werO/bvseWIwIhAP1/KuFIAhDFYlzDY349fmIsoKlbAr+aojiKzhPf goocAHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFt6h7lrwAA BAMASDBGAiEA2XaPjNnDLcxxj8jPhJ1GAAzQ6lDleBrGMtVS4R5sFLwCIQCecDop nqhdbMCcFJ5cOsmIesfktAbeDB9ocn4CGtJSZzANBgkqhkiG9w0BAQsFAAOCAQEA C+c0/Y9qYjT92lIfGpR/GSgpNG96TenN2Im40AOAwfIL7aIT9ZYgc3EzOpCFWEIx WwI7+cgQkK1+cAdHUi0s7EHwLjaUEhLXVE+rNs9acPKHzYceG7Z96+Cv1iW1VX9D +oGhwD3fgAdcJD2JYO+TTJEu6SCvzPSHBvAeiIjsq8oi2qgDh3BpdkkYCWA0HJ2R ReQAyMNqNnf3ErivwYKVPGxUYgJYdrN5+lE4V14wzvLby9ZfUwLbgKUJnnwPTdRy OhlsVMeBKGjNRo+uLuqSxuzX5DT2IY/M3Hg6kbDdF2RImNDCCSco6jKWS0KrIEkf 3FpYr8H3cEMTbzsmShFZiQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6fVHoM8MrXkqFVPBKRG AAMSGeDY9KeiaHsvBaABfZcSi2TAe51vEzC3E3QeEZJIOTbNziboK1gO5hVhUuEH MQQkLBGIn4LAKOoV10biu5pZcjO0BMXQIS7JXISwREAde2XPwci+kyoQshHftiuR kX/wu/uBtXve6wuFjqr67X8MPxIdpJK4FPonlqjquZRY47iMOFYAjsV4S5+k8BUu 5Z0RxfYZmLQ7aNo7jz9oUy5E5nacQ/chdpEDGgSTYfatV4mFYGR6dMjVAy1GsMvr WrvxNKitnLsD4SVySFJ6qLeQVqLxdOIzRvI3N2As02/rcsrT2SQvhffn33YhRP1f UQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 335100646782675907113822813562565070346520 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-20 16:02:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-18 16:02:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kamikos.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23689324317398216059175809834681142409209645999423597402413309370489020107633180030589126909458063045122198409985265167788980181979280495778659571595109958520825423287430208291136145516199652760975357661791144507171681117457299065540300260980432327803695413245569301429354685473479107993574148465456751420558351214461584376967063016079412268717234728349459630753146423911296233401632137382045106541575812420594568970368790038544790060728959533801987022191597456961578828510532752373667606829559435582173782641637411573710378354037045524006023579921438467421144850583776505596367827499354133188873385819161919947104081 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 131cd1637cb1ec2ec858152ff46aee6b5262969c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (680 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agricolamontalbano.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agricolamontalbano.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agricolamontalbanobio.mblabs.a2hosted.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agricolamontalbanocom.mblabs.a2hosted.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agricolamontalbanoit.mblabs.a2hosted.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'effe.mblabs.a2hosted.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giusycarletto.mblabs.a2hosted.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipacem.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipacem.mblabs.a2hosted.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamikos.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamikos.mblabs.a2hosted.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agricolamontalbano.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agricolamontalbano.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agricolamontalbanobio.mblabs.a2hosted.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agricolamontalbanocom.mblabs.a2hosted.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agricolamontalbanoit.mblabs.a2hosted.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.effe.mblabs.a2hosted.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giusycarletto.mblabs.a2hosted.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipacem.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipacem.mblabs.a2hosted.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamikos.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamikos.mblabs.a2hosted.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dea1ee5bb0000040300483046022100cc2ed9aa4dfa39130706e4ec427a60a4a8081d30557c2f5c1eacefdbbec79623022100fd7f2ae1480210c5625cc3637e3d7e622ca0a95b02bf9aa2388ace13df828a1c007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dea1ee5af0000040300483046022100d9768f8cd9c32dcc718fc8cf849d46000cd0ea50e5781ac632d552e11e6c14bc0221009e703a299ea85d6cc09c149e5c3ac9887ac7e4b406de0c1f68727e021ad25267 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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