singhathaicafe.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:fb:99:69:42:06:3f:34:11:33:65:07:a3:31:65:71:88:ff was issued on by Let's Encrypt.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=singhathaicafe.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:fb:99:69:42:06:3f:34:11:33:65:07:a3:31:65:71:88:ffSerial Number (int): 434063936237855742518343395487266899069183
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 00:65:eb:e8:7d:26:b6:a9:14:96:71:1e:f0:99:e5:2c:1b:e4:20:1f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6d:11:38:3c:57:97:b1:a6:07:11:29:f1:fc:92:d6:9d:9f:08:f4:f0
Fingerprint (sha256): ef:8d:ca:01:12:a8:bb:7a:ab:38:06:c5:ed:72:03:73:d7:3e:01:66:ac:8b:d2:a8:07:cd:53:99:a4:cc:52:56
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate singhathaicafe.com
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for singhathaicafe.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
acousticswiftness.com
acousticswiftness.marathonitis.com
autodiscover.acousticswiftness.com
autodiscover.singhathaicafe.com
cpanel.acousticswiftness.com
cpanel.singhathaicafe.com
mail.acousticswiftness.com
mail.singhathaicafe.com
singhathaicafe.com
singhathaicafe.marathonitis.com
webdisk.acousticswiftness.com
webdisk.singhathaicafe.com
webmail.acousticswiftness.com
webmail.singhathaicafe.com
whm.acousticswiftness.com
whm.singhathaicafe.com
www.acousticswiftness.com
www.acousticswiftness.marathonitis.com
www.singhathaicafe.com
www.singhathaicafe.marathonitis.com
acousticswiftness.marathonitis.com
autodiscover.acousticswiftness.com
autodiscover.singhathaicafe.com
cpanel.acousticswiftness.com
cpanel.singhathaicafe.com
mail.acousticswiftness.com
mail.singhathaicafe.com
singhathaicafe.com
singhathaicafe.marathonitis.com
webdisk.acousticswiftness.com
webdisk.singhathaicafe.com
webmail.acousticswiftness.com
webmail.singhathaicafe.com
whm.acousticswiftness.com
whm.singhathaicafe.com
www.acousticswiftness.com
www.acousticswiftness.marathonitis.com
www.singhathaicafe.com
www.singhathaicafe.marathonitis.com
Other certificates including the domain name singhathaicafe.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for singhathaicafe.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHmjCCBoKgAwIBAgISBPuZaUIGPzQRM2UHozFlcYj/MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MTMyMTIxMTRaFw0x OTA4MTEyMTIxMTRaMB0xGzAZBgNVBAMTEnNpbmdoYXRoYWljYWZlLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ+7XYyitWxb8XvQjteAq7GEjSQF NHhSzW+FOaL8Qg3oSaV+Qis5Zd1Dk2tPFpGVOIrL/Ml5PxjZeejyL5N093sO723i jMd2LHWL2NN8CQc34tufBzETU1SQ6shsD1Vl0jUaoB6RSnVgvNgjNoUoLOfPwOxk 9UJjT/chVEsim8PB3eazaTixK7ubowFwSg0YOxy8AfxezxHBG9uqqr8oW3mpm6+F 9uGuwXgcsFgVMWNT578PgNs4ppuGW0i6ufebwWvGwXd0FAyVEjdBJhTg7qB2UYrL Yr2F7LdQ+JyVmvYPKgcNbdc2j9I/HoKdoTeaA4Vt7pVLPMJckZUr9vDDR1sCAwEA AaOCBKUwggShMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUAGXr6H0mtqkUlnEe8Jnl LBvkIB8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzCCAlkGA1UdEQSCAlAwggJMghVhY291c3RpY3N3aWZ0bmVzcy5jb22C ImFjb3VzdGljc3dpZnRuZXNzLm1hcmF0aG9uaXRpcy5jb22CImF1dG9kaXNjb3Zl ci5hY291c3RpY3N3aWZ0bmVzcy5jb22CH2F1dG9kaXNjb3Zlci5zaW5naGF0aGFp Y2FmZS5jb22CHGNwYW5lbC5hY291c3RpY3N3aWZ0bmVzcy5jb22CGWNwYW5lbC5z aW5naGF0aGFpY2FmZS5jb22CGm1haWwuYWNvdXN0aWNzd2lmdG5lc3MuY29tghdt YWlsLnNpbmdoYXRoYWljYWZlLmNvbYISc2luZ2hhdGhhaWNhZmUuY29tgh9zaW5n aGF0aGFpY2FmZS5tYXJhdGhvbml0aXMuY29tgh13ZWJkaXNrLmFjb3VzdGljc3dp ZnRuZXNzLmNvbYIad2ViZGlzay5zaW5naGF0aGFpY2FmZS5jb22CHXdlYm1haWwu YWNvdXN0aWNzd2lmdG5lc3MuY29tghp3ZWJtYWlsLnNpbmdoYXRoYWljYWZlLmNv bYIZd2htLmFjb3VzdGljc3dpZnRuZXNzLmNvbYIWd2htLnNpbmdoYXRoYWljYWZl LmNvbYIZd3d3LmFjb3VzdGljc3dpZnRuZXNzLmNvbYImd3d3LmFjb3VzdGljc3dp ZnRuZXNzLm1hcmF0aG9uaXRpcy5jb22CFnd3dy5zaW5naGF0aGFpY2FmZS5jb22C I3d3dy5zaW5naGF0aGFpY2FmZS5tYXJhdGhvbml0aXMuY29tMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAb1N2 rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFqs0kevQAABAMARzBFAiBh Rq6oZYTl/j9NaAKl3e6XFpMmAIoNqvW9KmF1rW2AEwIhAL8bAngve0M/3kTs3n1w CeqbKbW0NG+LjXrHRKqOdPhzAHYAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHH aFRL2I0AAAFqs0kegAAABAMARzBFAiEA3PGwOOqXgWhr/ukbdTtcuXnqHLrF1RD7 mPoaOO89UugCIBo7HNoaVEEdbDOb3i5f2u0h7m2L7bzPUUQUmKVJzpThMA0GCSqG SIb3DQEBCwUAA4IBAQA3/YPPdkRyGaqiCX1HptjUk7uploX8bMZ32jJPXAdO8of4 byKRnL16xxuwCx0bf90sG0ffPpky74QdqT0DDpLkBi7JtdwyWB4vYKo0MRLOUDtD xiPuETjYcyBqYCuM9i/xo52ftd+v8Wsstszh0qn7zipEIbj+5xw3T20q28W/d9nv h1VAN/jnouJOI7Hf/UTPjTvqCIDS5b33LvT+ty/auBlKUKhxEisb0ToadB0PGsVZ TzFaecoqNX5hHw8fk9yZBuQ8sNepmE+tbzi0GcNCP0/4WAMcAxn5Z1bLr2Dn9nlP L+t/uGUt1At7TxLKfiIOpnp6QFygy29St9iE2ioW -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7tdjKK1bFvxe9CO14Cr sYSNJAU0eFLNb4U5ovxCDehJpX5CKzll3UOTa08WkZU4isv8yXk/GNl56PIvk3T3 ew7vbeKMx3YsdYvY03wJBzfi258HMRNTVJDqyGwPVWXSNRqgHpFKdWC82CM2hSgs 58/A7GT1QmNP9yFUSyKbw8Hd5rNpOLEru5ujAXBKDRg7HLwB/F7PEcEb26qqvyhb eambr4X24a7BeBywWBUxY1Pnvw+A2zimm4ZbSLq595vBa8bBd3QUDJUSN0EmFODu oHZRistivYXst1D4nJWa9g8qBw1t1zaP0j8egp2hN5oDhW3ulUs8wlyRlSv28MNH WwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 434063936237855742518343395487266899069183 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-13 21:21:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-11 21:21:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'singhathaicafe.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20164283825291898265719674284632968407770466860539007779631771184750805145331424313662081202128455631155341634428608193511063489356764173576122533543766243215494189763108017557984581531617036161361793684281938005800906032059635280377910835541689825888852486685976585537510018198297319156816550161582166085207083974261594384497752521201747247444183868735172498954041184450355601268412527449248886311982109410418012041852952429927785883336531068431117123872602680137577499701600402026018895082174786031644184670334546306080395541872423192320263733687319446335427587648772252553404792175535317699569167698154515821971291 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0065ebe87d26b6a91496711ef099e52c1be4201f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (592 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acousticswiftness.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acousticswiftness.marathonitis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.acousticswiftness.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.singhathaicafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.acousticswiftness.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.singhathaicafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.acousticswiftness.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.singhathaicafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singhathaicafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singhathaicafe.marathonitis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.acousticswiftness.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.singhathaicafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.acousticswiftness.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.singhathaicafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.acousticswiftness.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.singhathaicafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acousticswiftness.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acousticswiftness.marathonitis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singhathaicafe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singhathaicafe.marathonitis.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ab3491ebd000004030047304502206146aea86584e5fe3f4d6802a5ddee97169326008a0daaf5bd2a6175ad6d8013022100bf1b02782f7b433fde44ecde7d7009ea9b29b5b4346f8b8d7ac744aa8e74f87300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ab3491e800000040300473045022100dcf1b038ea9781686bfee91b753b5cb979ea1cbac5d510fb98fa1a38ef3d52e802201a3b1cda1a54411d6c339bde2e5fdaed21ee6d8bedbccf51441498a549ce94e1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0037fd83cf76447219aaa2097d47a6d8d493bba99685fc6cc677da324f5c074ef287f86f22919cbd7ac71bb00b1d1b7fdd2c1b47df3e9932ef841da93d030e92e4062ec9b5dc32581e2f60aa343112ce503b43c623ee1138d873206a602b8cf62ff1a39d9fb5dfaff16b2cb6cce1d2a9fbce2a4421b8fee71c374f6d2adbc5bf77d9ef87554037f8e7a2e24e23b1dffd44cf8d3bea0880d2e5bdf72ef4feb72fdab8194a50a871122b1bd13a1a741d0f1ac5594f315a79ca2a357e611f0f1f93dc9906e43cb0d7a9984fad6f38b419c3423f4ff858031c0319f96756cbaf60e7f6794f2feb7fb8652dd40b7b4f12ca7e220ea67a7a405ca0cb6f52b7d884da2a16