rnmb.legifrance.gouv.fr
Issued by R3
About this certificate
This digital certificate with serial number 03:fe:cc:94:d7:f2:55:6f:7c:05:ff:8f:11:07:a2:d9:21:cc was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=rnmb.legifrance.gouv.fr
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:fe:cc:94:d7:f2:55:6f:7c:05:ff:8f:11:07:a2:d9:21:ccSerial Number (int): 348040514344192016767976242902328078311884
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b8:12:e4:ba:18:0a:74:19:4a:67:54:8f:67:1c:ad:2a:46:21:37:a8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 34:4a:ea:9e:04:a3:e3:04:d4:04:08:61:5b:03:2a:cc:04:19:b7:d4
Fingerprint (sha256): e7:d5:bc:ff:58:e3:8a:8b:01:12:09:68:84:a7:65:1e:10:65:89:2c:93:4c:bd:dd:2a:6c:e6:40:25:72:b1:fa
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate rnmb.legifrance.gouv.fr
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rnmb.legifrance.gouv.fr
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rnmb.legifrance.gouv.fr
Other certificates including the domain name legifrance.gouv.fr
(limited to 100 certificates)
ezpublish.qualif.legifrance.gouv.fr
www.ecli.legifrance.gouv.fr
imperva.com
www.ecli.legifrance.gouv.fr
beta.legifrance.gouv.fr
incapsula.com
ezpublish.qualif.legifrance.gouv.fr
imperva.com
preprod.journal-officiel.legifrance.gouv.fr
journal-officiel.legifrance.gouv.fr
journal-officiel.legifrance.gouv.fr
www.ecli.preprod.legifrance.gouv.fr
ezpublish.prod.legifrance.gouv.fr
www.legifrance.gouv.fr
www.legifrance.gouv.fr
www.legifrance.gouv.fr
ezpublish.preprod.legifrance.gouv.fr
incapsula.com
rnmb.legifrance.gouv.fr
api.legifrance.gouv.fr
journal-officiel.legifrance.gouv.fr
incapsula.com
journal-officiel.preprod.legifrance.gouv.fr
incapsula.com
imperva.com
www.ecli.qualif.legifrance.gouv.fr
www.ecli.preprod.legifrance.gouv.fr
www.legifrance.gouv.fr
imperva.com
ezpublish.qualif.legifrance.gouv.fr
incapsula.com
imperva.com
imperva.com
ezpublish.prod.legifrance.gouv.fr
www.ezpublish.prod.legifrance.gouv.fr
api.legifrance.gouv.fr
api.legifrance.gouv.fr
www.ecli.preprod.legifrance.gouv.fr
www.journal-officiel.legifrance.gouv.fr
www.ecli.legifrance.gouv.fr
incapsula.com
ezpublish.preprod.legifrance.gouv.fr
incapsula.com
imperva.com
ezpublish.qualif.legifrance.gouv.fr
incapsula.com
incapsula.com
ezpublish.preprod.legifrance.gouv.fr
ezpublish.prod.legifrance.gouv.fr
journal-officiel.legifrance.gouv.fr
www.ecli.qualif.legifrance.gouv.fr
www.legifrance.gouv.fr
journal-officiel.qualif.legifrance.gouv.fr
ezpublish.prod.legifrance.gouv.fr
rnmb.legifrance.gouv.fr
ezpublish.qualif.legifrance.gouv.fr
incapsula.com
beta.legifrance.gouv.fr
journal-officiel.legifrance.gouv.fr
www.legifrance.gouv.fr
www.ecli.legifrance.gouv.fr
imperva.com
www.ecli.legifrance.gouv.fr
beta.legifrance.gouv.fr
incapsula.com
ezpublish.qualif.legifrance.gouv.fr
imperva.com
preprod.journal-officiel.legifrance.gouv.fr
journal-officiel.legifrance.gouv.fr
journal-officiel.legifrance.gouv.fr
www.ecli.preprod.legifrance.gouv.fr
ezpublish.prod.legifrance.gouv.fr
www.legifrance.gouv.fr
www.legifrance.gouv.fr
www.legifrance.gouv.fr
ezpublish.preprod.legifrance.gouv.fr
incapsula.com
rnmb.legifrance.gouv.fr
api.legifrance.gouv.fr
journal-officiel.legifrance.gouv.fr
incapsula.com
journal-officiel.preprod.legifrance.gouv.fr
incapsula.com
imperva.com
www.ecli.qualif.legifrance.gouv.fr
www.ecli.preprod.legifrance.gouv.fr
www.legifrance.gouv.fr
imperva.com
ezpublish.qualif.legifrance.gouv.fr
incapsula.com
imperva.com
imperva.com
ezpublish.prod.legifrance.gouv.fr
www.ezpublish.prod.legifrance.gouv.fr
api.legifrance.gouv.fr
api.legifrance.gouv.fr
www.ecli.preprod.legifrance.gouv.fr
www.journal-officiel.legifrance.gouv.fr
www.ecli.legifrance.gouv.fr
incapsula.com
ezpublish.preprod.legifrance.gouv.fr
incapsula.com
imperva.com
ezpublish.qualif.legifrance.gouv.fr
incapsula.com
incapsula.com
ezpublish.preprod.legifrance.gouv.fr
ezpublish.prod.legifrance.gouv.fr
journal-officiel.legifrance.gouv.fr
www.ecli.qualif.legifrance.gouv.fr
www.legifrance.gouv.fr
journal-officiel.qualif.legifrance.gouv.fr
ezpublish.prod.legifrance.gouv.fr
rnmb.legifrance.gouv.fr
ezpublish.qualif.legifrance.gouv.fr
incapsula.com
beta.legifrance.gouv.fr
journal-officiel.legifrance.gouv.fr
www.legifrance.gouv.fr
Certificate
The complete raw certificate details for rnmb.legifrance.gouv.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgISA/7MlNfyVW98Bf+PEQei2SHMMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAzMjcyMDMzMzBaFw0yMzA2MjUyMDMzMjlaMCIxIDAeBgNVBAMT F3JubWIubGVnaWZyYW5jZS5nb3V2LmZyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAufkRjdj+GPl4kIjrakQYuBaof7ogvPYyOhYvre5SEhpL4HNaZccH FcalvCI8WHCXNCkK4o0behHXklQ6qzayXZjRZDEDzhDV6BC6vDKMrGhy5hd15olD lT+aD81GEBIWPSrY5Lr1kwowf4V9MqssgjMOV5xygJ7F3qlX6yF1c91y8ZLGqSYa cbpJ5Bv8JwtpZAk0eT6J1EpMN3zEGy9vJVdqS51Odrrrqjy40hjKe9wbtUxb64Q+ dCr3HQROsGKzdmNoIv8QAnk6d61GBGBtptkj2SdkQrQeLhTYCcoNA5Rtlgvk4do9 U+CYpOdbJcFPlUN0ZoXQ+Fn2jeTEBgl3+iliIOW/l8gwC7wtlRT8d9VY4o1Yu8TC BZ/nNx7mmc0+raR0IEZzSvC3SYevMmpNTPHDGQJ/KjZyhUeIWcxfQy+uLw24oJXA fOO3sRL23GbeAUPqfxRNXcw5Yvb7nZFzKnEFU2NtNRCp3GtKS3pNx0J5wF9SOu6p mu2sYjWZavAu+ZIsIgBeokpkxRYs/UsnMfCVHpMUG+H1ElOiY/4reZ3n2eWuOpb4 MLUbQfBiH2ncnwRgXj+HvOw4cGJ/rdtAkvjWcKKsxX+bcFZV8jonqvhR7bG89PrF tmgznP/HRwXLv7L3kfV2SaqAJU068msTSPLwanXNd2bcGnZODXfu8hMCAwEAAaOC AlQwggJQMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUuBLkuhgKdBlKZ1SPZxytKkYh N6gwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEE STBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUH MAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wIgYDVR0RBBswGYIXcm5tYi5sZWdp ZnJhbmNlLmdvdXYuZnIwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEG BgorBgEEAdZ5AgQCBIH3BIH0APIAdwB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9Ir wTpXo1LrUgAAAYck/ZHIAAAEAwBIMEYCIQDsFD7i6MBiUGPWPcROn/zLb/5KBEXK rxkP5lTbhAhPtwIhAIqhsSgFOd021q83wpGgrwwJYAJH44BOSxhtqJ6p3c9AAHcA tz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGHJP2R0wAABAMASDBG AiEAhR23+4WrtAoPgeFCMpoq1gwdmFFOidKL6KqhuRcREY0CIQCKECsvkbDBKfO8 wrSNp2PYms2nTM/jGyTdXA4e48WCYzANBgkqhkiG9w0BAQsFAAOCAQEATVHbFsdL b6kcVOxjt1l/NWYJxsKKBN52w59rOAqyxAYG09E7pBYGyJnK5dZ7q3p1vcxs+1AJ HtGxKLdEGwDRzaQyDN7n2S1x6aKZTNyN/Y1bRKQuMQwRaK1egjFm4y2Z/cm730k2 BdhipNheiSDbg+n1fIqsqUQm/m1lVjCZ37DJRZCnIvK38W711CB9aVLsNRr6Edt3 NrYafCEpFYIKIE8fmaFBd4p8EW0NiHfNYEoU/jkb7227XMpJ5gEk8zoK8Hb/lyLH cb5EaKEnkaENCD9oEUnOjN2rs5ju6GUtjgYFxiCTk/zUr59ivt11IgnC18o91Uiy nFxy0uesf2Gv6A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAufkRjdj+GPl4kIjrakQY uBaof7ogvPYyOhYvre5SEhpL4HNaZccHFcalvCI8WHCXNCkK4o0behHXklQ6qzay XZjRZDEDzhDV6BC6vDKMrGhy5hd15olDlT+aD81GEBIWPSrY5Lr1kwowf4V9Mqss gjMOV5xygJ7F3qlX6yF1c91y8ZLGqSYacbpJ5Bv8JwtpZAk0eT6J1EpMN3zEGy9v JVdqS51Odrrrqjy40hjKe9wbtUxb64Q+dCr3HQROsGKzdmNoIv8QAnk6d61GBGBt ptkj2SdkQrQeLhTYCcoNA5Rtlgvk4do9U+CYpOdbJcFPlUN0ZoXQ+Fn2jeTEBgl3 +iliIOW/l8gwC7wtlRT8d9VY4o1Yu8TCBZ/nNx7mmc0+raR0IEZzSvC3SYevMmpN TPHDGQJ/KjZyhUeIWcxfQy+uLw24oJXAfOO3sRL23GbeAUPqfxRNXcw5Yvb7nZFz KnEFU2NtNRCp3GtKS3pNx0J5wF9SOu6pmu2sYjWZavAu+ZIsIgBeokpkxRYs/Usn MfCVHpMUG+H1ElOiY/4reZ3n2eWuOpb4MLUbQfBiH2ncnwRgXj+HvOw4cGJ/rdtA kvjWcKKsxX+bcFZV8jonqvhR7bG89PrFtmgznP/HRwXLv7L3kfV2SaqAJU068msT SPLwanXNd2bcGnZODXfu8hMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 348040514344192016767976242902328078311884 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-27 20:33:30 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-25 20:33:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rnmb.legifrance.gouv.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758703336634022120682403080363332109409244834144411579035273092720726701910996690660125082344321227334438216303614830989853848991949633531419955352815573745862689483917302542511113529166797407353661202417978076678780048040742861057444602288307028733334599744045124471306742299507934977894878383694854174177055453312769718509759747612086766696139246667917645837672731890959772930359565826873739421901310388310053908128667139528898880501658234153124501972132063989900578759681705121408404733982077853818398719272679547933777506318649579692313864453369068644818200944049316371686714966240226054435351197208562635471394372581478700938145825069103788286113515983268405974988343007132350264450950106657277382924622362045668639541557719986932598055380200803911536221830278943040908404811048546742883678324837556214615511960667482362069607265761193481642476619911695367355752276340562443903840776781980780451009422625687603800834019271336622678221150250795691475977261712742641547457158889965047613358909957955879362698150739439628798660428406900549875340999235920268382322107346382498971700977966279505234839115860026206155563061837952465823014023511036791823226723571733275493456784205627422540564117275350096822757436429069394082012262931 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b812e4ba180a74194a67548f671cad2a462137a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnmb.legifrance.gouv.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018724fd91c80000040300483046022100ec143ee2e8c0625063d63dc44e9ffccb6ffe4a0445caaf190fe654db84084fb70221008aa1b1280539dd36d6af37c291a0af0c09600247e3804e4b186da89ea9ddcf40007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018724fd91d30000040300483046022100851db7fb85abb40a0f81e142329a2ad60c1d98514e89d28be8aaa1b91711118d0221008a102b2f91b0c129f3bcc2b48da763d89acda74ccfe31b24dd5c0e1ee3c58263 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004d51db16c74b6fa91c54ec63b7597f356609c6c28a04de76c39f6b380ab2c40606d3d13ba41606c899cae5d67bab7a75bdcc6cfb50091ed1b128b7441b00d1cda4320cdee7d92d71e9a2994cdc8dfd8d5b44a42e310c1168ad5e823166e32d99fdc9bbdf493605d862a4d85e8920db83e9f57c8aaca94426fe6d65563099dfb0c94590a722f2b7f16ef5d4207d6952ec351afa11db7736b61a7c212915820a204f1f99a141778a7c116d0d8877cd604a14fe391bef6dbb5cca49e60124f33a0af076ff9722c771be4468a12791a10d083f681149ce8cddabb398eee8652d8e0605c6209393fcd4af9f62bedd752209c2d7ca3dd548b29c5c72d2e7ac7f61afe8