alhak.tk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:b2:11:5c:a3:bc:52:1d:b9:c5:61:f8:1b:d3:5f:2f:d2:c2 was issued on by Let's Encrypt.
With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=alhak.tk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b2:11:5c:a3:bc:52:1d:b9:c5:61:f8:1b:d3:5f:2f:d2:c2Serial Number (int): 409042482927160435511794428685957863559874
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: fe:ea:d8:81:0d:a9:9e:1b:55:63:5a:0a:2a:e9:da:ca:66:28:21:a9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 02:17:aa:f9:f1:94:15:74:eb:ac:e2:b0:67:d0:51:5c:d5:44:69:fa
Fingerprint (sha256): f4:d6:0e:6d:7f:60:8c:3f:19:d4:00:f9:21:47:74:83:d0:24:93:21:9e:38:20:f2:e5:e8:6d:ba:17:7d:01:94
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate alhak.tk
24
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for alhak.tk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
alhak.sos.u-host.in
alhak.tk
alkarma.sos.u-host.in
alkarma.tk
ipv6.alhak.tk
ipv6.alkarma.tk
ipv6.koperski.tk
ipv6.realdomdomsrealm.tk
koperski.sos.u-host.in
koperski.tk
mail.alhak.tk
mail.alkarma.tk
mail.koperski.tk
mail.realdomdomsrealm.tk
realdomdomsrealm.sos.u-host.in
realdomdomsrealm.tk
www.alhak.sos.u-host.in
www.alhak.tk
www.alkarma.sos.u-host.in
www.alkarma.tk
www.koperski.sos.u-host.in
www.koperski.tk
www.realdomdomsrealm.sos.u-host.in
www.realdomdomsrealm.tk
alhak.tk
alkarma.sos.u-host.in
alkarma.tk
ipv6.alhak.tk
ipv6.alkarma.tk
ipv6.koperski.tk
ipv6.realdomdomsrealm.tk
koperski.sos.u-host.in
koperski.tk
mail.alhak.tk
mail.alkarma.tk
mail.koperski.tk
mail.realdomdomsrealm.tk
realdomdomsrealm.sos.u-host.in
realdomdomsrealm.tk
www.alhak.sos.u-host.in
www.alhak.tk
www.alkarma.sos.u-host.in
www.alkarma.tk
www.koperski.sos.u-host.in
www.koperski.tk
www.realdomdomsrealm.sos.u-host.in
www.realdomdomsrealm.tk
Other certificates including the domain name alhak.tk
(limited to 100 certificates)
Certificate
The complete raw certificate details for alhak.tk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgISBLIRXKO8Uh25xWH4G9NfL9LCMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMTYyMTQ1MDdaFw0x OTA0MTYyMTQ1MDdaMBMxETAPBgNVBAMTCGFsaGFrLnRrMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAxHtzbNrohGiiveEi0Ry2vq6hoF7bGqYYE0G/f0TE Scgt8kDNNAT8oUrZq9/YCZ8hYTPJZBxjIUrv7qOxEdBz7otVCmuIvCPjb3IYXjv6 eRs9gMWuCnkN0I929CMt25X0K5YhRBLjQ84JoMD2d92OismgmP0vOhG5QLOMIbTF qpdUrTvIWjYVuZZbKf8hpPBLV0o4Cxd2y5UEN4Z9MX3BpoF7MdJot3nB65Y+FlPX YzBwwk0znEJw0EeViYV16TZjUavkdKv9aiyinQGOmrAFgKAPLuYnGL4c9JYlo7g6 LAGL7LNfwTmvIvVY/Ci2yidrz4LCz4eHv09yuwFU6oxTkwIDAQABo4IESzCCBEcw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBT+6tiBDameG1VjWgoq6drKZighqTAfBgNV HSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYI KwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYI KwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIIB /QYDVR0RBIIB9DCCAfCCE2FsaGFrLnNvcy51LWhvc3QuaW6CCGFsaGFrLnRrghVh bGthcm1hLnNvcy51LWhvc3QuaW6CCmFsa2FybWEudGuCDWlwdjYuYWxoYWsudGuC D2lwdjYuYWxrYXJtYS50a4IQaXB2Ni5rb3BlcnNraS50a4IYaXB2Ni5yZWFsZG9t ZG9tc3JlYWxtLnRrghZrb3BlcnNraS5zb3MudS1ob3N0Lmluggtrb3BlcnNraS50 a4INbWFpbC5hbGhhay50a4IPbWFpbC5hbGthcm1hLnRrghBtYWlsLmtvcGVyc2tp LnRrghhtYWlsLnJlYWxkb21kb21zcmVhbG0udGuCHnJlYWxkb21kb21zcmVhbG0u c29zLnUtaG9zdC5pboITcmVhbGRvbWRvbXNyZWFsbS50a4IXd3d3LmFsaGFrLnNv cy51LWhvc3QuaW6CDHd3dy5hbGhhay50a4IZd3d3LmFsa2FybWEuc29zLnUtaG9z dC5pboIOd3d3LmFsa2FybWEudGuCGnd3dy5rb3BlcnNraS5zb3MudS1ob3N0Lmlu gg93d3cua29wZXJza2kudGuCInd3dy5yZWFsZG9tZG9tc3JlYWxtLnNvcy51LWhv c3QuaW6CF3d3dy5yZWFsZG9tZG9tc3JlYWxtLnRrMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAdH7agzGtMxCR IZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFoWNbymAAABAMASDBGAiEA+2Q6L0LI Xe+3bp0Llswr9xq/x6Iaj5yeeFc6bdSB+RsCIQCIwprlcsOKL+TW/TIySGLuDIUy 0s6cem8PGEcAlCVVJAB3AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iN AAABaFjW8KMAAAQDAEgwRgIhAKNRnMhbaOkaKPJeg2XCxFcYpfSfllKD2Pp5095B 0u6jAiEA0Hr4CRaQOHEMxh5/EOq2Ftr/6tbLXF401LH/WPCdA84wDQYJKoZIhvcN AQELBQADggEBAFy0Z5baCnX/bnneMuc9LJ5KAYZBSC6TDkPWJP19SR4sb4u6O1MZ yPA3qLbwvcHCXn8eInNrCPeTxzr8CXWkOTo3awaIOL6lQrdQNwIV370jGbfnVLJV 1xOtRmOvB2a9Hu7I4Da8QdHl4G/JFNC0tfGFTjCd/z+xlz4HtCuUeN8sfMEbd6sg w22aLZPiVYQz+x1EohF59xnev2iDKnfpxI4Q+DHclV9ULNKR7wdZGdQEz0iSrBm/ 7dNteubzlhYyUuzJzfEX0HF5J7LwRtwyYFxL2mwIAWOqecm+Sv5m9/zayOy/vKiI KtdedeSUNxs+cq8ZM+2OfNrArv3sOu41388= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHtzbNrohGiiveEi0Ry2 vq6hoF7bGqYYE0G/f0TEScgt8kDNNAT8oUrZq9/YCZ8hYTPJZBxjIUrv7qOxEdBz 7otVCmuIvCPjb3IYXjv6eRs9gMWuCnkN0I929CMt25X0K5YhRBLjQ84JoMD2d92O ismgmP0vOhG5QLOMIbTFqpdUrTvIWjYVuZZbKf8hpPBLV0o4Cxd2y5UEN4Z9MX3B poF7MdJot3nB65Y+FlPXYzBwwk0znEJw0EeViYV16TZjUavkdKv9aiyinQGOmrAF gKAPLuYnGL4c9JYlo7g6LAGL7LNfwTmvIvVY/Ci2yidrz4LCz4eHv09yuwFU6oxT kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 409042482927160435511794428685957863559874 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-16 21:45:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 21:45:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alhak.tk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24803583671026596527721222564675522888051951904688140569559587704505228469116183231324923667398842305489515776840957170314611469148060140317730152707244769760540271513105282875471180958434855076898438017949163801647257426934246013711668471564768936696070318028791731501567364420372822033029589669020243437398098518041258998008675272937983113361175721784541857633443881960104635167006391937047599001875518173467206871662304649862086899645452337164656465996884365531269682910343019601098337070463285714384506636774929896543834663055094062800840258671891376732632491938067427231690277401248850091114696567824286646817683 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) feead8810da99e1b55635a0a2ae9daca662821a9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (500 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alhak.sos.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alhak.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alkarma.sos.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alkarma.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.alhak.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.alkarma.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.koperski.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.realdomdomsrealm.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koperski.sos.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koperski.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.alhak.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.alkarma.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.koperski.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.realdomdomsrealm.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realdomdomsrealm.sos.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realdomdomsrealm.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alhak.sos.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alhak.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alkarma.sos.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alkarma.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koperski.sos.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koperski.tk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realdomdomsrealm.sos.u-host.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realdomdomsrealm.tk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016858d6f2980000040300483046022100fb643a2f42c85defb76e9d0b96cc2bf71abfc7a21a8f9c9e78573a6dd481f91b02210088c29ae572c38a2fe4d6fd32324862ee0c8532d2ce9c7a6f0f1847009425552400770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016858d6f0a30000040300483046022100a3519cc85b68e91a28f25e8365c2c45718a5f49f965283d8fa79d3de41d2eea3022100d07af809169038710cc61e7f10eab616daffead6cb5c5e34d4b1ff58f09d03ce . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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