testhk.uncoverchina.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a8:8a:cd:a2:3a:9c:87:c0:07:90:b2:78:d7:42:0a:47:14 was issued on by Let's Encrypt.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=testhk.uncoverchina.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a8:8a:cd:a2:3a:9c:87:c0:07:90:b2:78:d7:42:0a:47:14Serial Number (int): 318688796612666752822592843196182217508628
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: fb:31:81:57:0e:71:a4:2e:21:71:54:ef:27:68:1b:63:c3:ba:f3:c3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c8:6f:1f:eb:de:9c:76:34:da:a5:96:b0:de:29:63:a4:cc:5a:b0:80
Fingerprint (sha256): fb:dc:60:b8:59:c0:60:4e:ce:f0:6e:26:55:d2:ff:d7:8d:59:56:82:f4:17:39:51:4e:b1:36:a8:26:33:f2:14
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate testhk.uncoverchina.com
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for testhk.uncoverchina.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
beijing.uncoverchina.com
chinese.uncoverchina.com
forums.uncoverchina.com
images.uncoverchina.com
other.uncoverchina.com
scripts.uncoverchina.com
shanghai.uncoverchina.com
test2.uncoverchina.com
testhk.uncoverchina.com
www.beijing.uncoverchina.com
www.chinese.uncoverchina.com
www.forums.uncoverchina.com
www.images.uncoverchina.com
www.other.uncoverchina.com
www.scripts.uncoverchina.com
www.shanghai.uncoverchina.com
www.test2.uncoverchina.com
www.testhk.uncoverchina.com
www.zh.uncoverchina.com
zh.uncoverchina.com
chinese.uncoverchina.com
forums.uncoverchina.com
images.uncoverchina.com
other.uncoverchina.com
scripts.uncoverchina.com
shanghai.uncoverchina.com
test2.uncoverchina.com
testhk.uncoverchina.com
www.beijing.uncoverchina.com
www.chinese.uncoverchina.com
www.forums.uncoverchina.com
www.images.uncoverchina.com
www.other.uncoverchina.com
www.scripts.uncoverchina.com
www.shanghai.uncoverchina.com
www.test2.uncoverchina.com
www.testhk.uncoverchina.com
www.zh.uncoverchina.com
zh.uncoverchina.com
Other certificates including the domain name uncoverchina.com
(limited to 100 certificates)
shanghai.uncoverchina.com
zh.uncoverchina.com
other.uncoverchina.com
beijing.uncoverchina.com
images.uncoverchina.com
shanghai.uncoverchina.com
zh.uncoverchina.com
uncoverchina.com
test2.uncoverchina.com
zh.uncoverchina.com
other.uncoverchina.com
chinese.uncoverchina.com
testhk.uncoverchina.com
shanghai.uncoverchina.com
beijing.uncoverchina.com
other.uncoverchina.com
shanghai.uncoverchina.com
uncoverchina.com
forums.uncoverchina.com
zh.uncoverchina.com
shanghai.uncoverchina.com
uncoverchina.com
uncoverchina.com
beijing.uncoverchina.com
scripts.uncoverchina.com
other.uncoverchina.com
beijing.uncoverchina.com
uncoverchina.com
uncoverchina.com
images.uncoverchina.com
uncoverchina.com
uncoverchina.com
uncoverchina.com
zh.uncoverchina.com
chinese.uncoverchina.com
shanghai.uncoverchina.com
beijing.uncoverchina.com
other.uncoverchina.com
uncoverchina.com
zh.uncoverchina.com
other.uncoverchina.com
forums.uncoverchina.com
test2.uncoverchina.com
scripts.uncoverchina.com
other.uncoverchina.com
zh.uncoverchina.com
testhk.uncoverchina.com
shanghai.uncoverchina.com
uncoverchina.com
uncoverchina.com
test2.uncoverchina.com
other.uncoverchina.com
testhk.uncoverchina.com
zh.uncoverchina.com
chinese.uncoverchina.com
beijing.uncoverchina.com
uncoverchina.com
shanghai.uncoverchina.com
shanghai.uncoverchina.com
uncoverchina.com
zh.uncoverchina.com
zh.uncoverchina.com
other.uncoverchina.com
uncoverchina.com
uncoverchina.com
scripts.uncoverchina.com
chinese.uncoverchina.com
scripts.uncoverchina.com
other.uncoverchina.com
test2.uncoverchina.com
uncoverchina.com
chinese.uncoverchina.com
cpanel.uncoverchina.com
uncoverchina.com
zh.uncoverchina.com
testhk.uncoverchina.com
beijing.uncoverchina.com
uncoverchina.com
uncoverchina.com
beijing.uncoverchina.com
forums.uncoverchina.com
zh.uncoverchina.com
shanghai.uncoverchina.com
forums.uncoverchina.com
images.uncoverchina.com
beijing.uncoverchina.com
chinese.uncoverchina.com
other.uncoverchina.com
testhk.uncoverchina.com
zh.uncoverchina.com
beijing.uncoverchina.com
uncoverchina.com
images.uncoverchina.com
zh.uncoverchina.com
other.uncoverchina.com
beijing.uncoverchina.com
images.uncoverchina.com
shanghai.uncoverchina.com
zh.uncoverchina.com
uncoverchina.com
test2.uncoverchina.com
zh.uncoverchina.com
other.uncoverchina.com
chinese.uncoverchina.com
testhk.uncoverchina.com
shanghai.uncoverchina.com
beijing.uncoverchina.com
other.uncoverchina.com
shanghai.uncoverchina.com
uncoverchina.com
forums.uncoverchina.com
zh.uncoverchina.com
shanghai.uncoverchina.com
uncoverchina.com
uncoverchina.com
beijing.uncoverchina.com
scripts.uncoverchina.com
other.uncoverchina.com
beijing.uncoverchina.com
uncoverchina.com
uncoverchina.com
images.uncoverchina.com
uncoverchina.com
uncoverchina.com
uncoverchina.com
zh.uncoverchina.com
chinese.uncoverchina.com
shanghai.uncoverchina.com
beijing.uncoverchina.com
other.uncoverchina.com
uncoverchina.com
zh.uncoverchina.com
other.uncoverchina.com
forums.uncoverchina.com
test2.uncoverchina.com
scripts.uncoverchina.com
other.uncoverchina.com
zh.uncoverchina.com
testhk.uncoverchina.com
shanghai.uncoverchina.com
uncoverchina.com
uncoverchina.com
test2.uncoverchina.com
other.uncoverchina.com
testhk.uncoverchina.com
zh.uncoverchina.com
chinese.uncoverchina.com
beijing.uncoverchina.com
uncoverchina.com
shanghai.uncoverchina.com
shanghai.uncoverchina.com
uncoverchina.com
zh.uncoverchina.com
zh.uncoverchina.com
other.uncoverchina.com
uncoverchina.com
uncoverchina.com
scripts.uncoverchina.com
chinese.uncoverchina.com
scripts.uncoverchina.com
other.uncoverchina.com
test2.uncoverchina.com
uncoverchina.com
chinese.uncoverchina.com
cpanel.uncoverchina.com
uncoverchina.com
zh.uncoverchina.com
testhk.uncoverchina.com
beijing.uncoverchina.com
uncoverchina.com
uncoverchina.com
beijing.uncoverchina.com
forums.uncoverchina.com
zh.uncoverchina.com
shanghai.uncoverchina.com
forums.uncoverchina.com
images.uncoverchina.com
beijing.uncoverchina.com
chinese.uncoverchina.com
other.uncoverchina.com
testhk.uncoverchina.com
zh.uncoverchina.com
beijing.uncoverchina.com
uncoverchina.com
images.uncoverchina.com
Certificate
The complete raw certificate details for testhk.uncoverchina.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIITCCBwmgAwIBAgISA6iKzaI6nIfAB5CyeNdCCkcUMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMTEwMTU2MDVaFw0x OTAxMDkwMTU2MDVaMCIxIDAeBgNVBAMTF3Rlc3Roay51bmNvdmVyY2hpbmEuY29t MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC4DNfkQxJGPdyt2ce/8 mnvSd1rWNm/xwI/HEpnYfUcJGsBxTX960r04jXce+0KWy/9viV5Mh0fU0yAx1n+s wKq3Cto+rAKuTTDVT+ZwF5bCtXNnuuNnpgi1YwAbLCflPzFq9W0abY9Ofu1biQx2 fTE6lD6MVaOofVholZkmianbQCAN9zlOck5r5I7psI62G1U5rkVAQWkzwAEH27AU f0bUpWEVc4T73ugdBUlMk/7P9RWNIehUeLXE8q4GmR9Ya8GI12Bw5gdol2f1y671 Jt80Pehaq1pHGpZy8A7lTFQ/0yyQhWIbm8YONssk8/5anxdGAjbqXjPXVobpKNVu swIDAQABo4IFJzCCBSMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBT7MYFXDnGkLiFx VO8naBtjw7rzwzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz ZW5jcnlwdC5vcmcvMIICJwYDVR0RBIICHjCCAhqCGGJlaWppbmcudW5jb3ZlcmNo aW5hLmNvbYIYY2hpbmVzZS51bmNvdmVyY2hpbmEuY29tghdmb3J1bXMudW5jb3Zl cmNoaW5hLmNvbYIXaW1hZ2VzLnVuY292ZXJjaGluYS5jb22CFm90aGVyLnVuY292 ZXJjaGluYS5jb22CGHNjcmlwdHMudW5jb3ZlcmNoaW5hLmNvbYIZc2hhbmdoYWku dW5jb3ZlcmNoaW5hLmNvbYIWdGVzdDIudW5jb3ZlcmNoaW5hLmNvbYIXdGVzdGhr LnVuY292ZXJjaGluYS5jb22CHHd3dy5iZWlqaW5nLnVuY292ZXJjaGluYS5jb22C HHd3dy5jaGluZXNlLnVuY292ZXJjaGluYS5jb22CG3d3dy5mb3J1bXMudW5jb3Zl cmNoaW5hLmNvbYIbd3d3LmltYWdlcy51bmNvdmVyY2hpbmEuY29tghp3d3cub3Ro ZXIudW5jb3ZlcmNoaW5hLmNvbYIcd3d3LnNjcmlwdHMudW5jb3ZlcmNoaW5hLmNv bYIdd3d3LnNoYW5naGFpLnVuY292ZXJjaGluYS5jb22CGnd3dy50ZXN0Mi51bmNv dmVyY2hpbmEuY29tght3d3cudGVzdGhrLnVuY292ZXJjaGluYS5jb22CF3d3dy56 aC51bmNvdmVyY2hpbmEuY29tghN6aC51bmNvdmVyY2hpbmEuY29tMIH+BgNVHSAE gfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhp cyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5n IFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZp Y2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVw b3NpdG9yeS8wggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwBj8tvN6DvMLM8LcoQn V2szpI1hd4+9daY4scdoVEvYjQAAAWZhDX0mAAAEAwBIMEYCIQCq47vXxEWCD8kp VQTecP4mMYjHwre/mvHXVOlCthE/ngIhANlntcrbBDTIol1jOiLV5uYbUsSLb0TA FpTALIqVv4AYAHYAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFm YQ1/bQAABAMARzBFAiA4WlF3G6AaOqgLAXbKqoIPItyaO8lhhU6P7GzL7As+bwIh AO1df1i1VrvrrwfMKlP0O7YS/wac4pmtIJ/X6IA27iTHMA0GCSqGSIb3DQEBCwUA A4IBAQBzg5XytxtkD6KZxl6HL/EB7jcsH7e+XPRpb3FUbGvgbzyG02dxpwFqua+x GtWTDOjxMIGioM3QZPnSaLhTZ1N6faY1XfosvzvPMRQLQb9ePefcCc4B1F4O9kmp mAwgHtsi31uPBFlHZXKm4qlmI47l2v7p2loqAGg1/5J/L6ezSQ5XXfraW4udd6TI 5rF/kNZhR2dH8svOqkm9ZOWgvwcaIZ7enO7MClr7EHcAoAOUj0GlnfR0ulVXODmy R8+PZANuuB0Jda7mtejGzKMKV9zvSvZRzqBjK6+1wDRKrSr+cvQb47YkjCWkf7Wf OZNEA5ufrLNaKOKCZpaivFOsVlhF -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC4DNfkQxJGPdyt2ce/8 mnvSd1rWNm/xwI/HEpnYfUcJGsBxTX960r04jXce+0KWy/9viV5Mh0fU0yAx1n+s wKq3Cto+rAKuTTDVT+ZwF5bCtXNnuuNnpgi1YwAbLCflPzFq9W0abY9Ofu1biQx2 fTE6lD6MVaOofVholZkmianbQCAN9zlOck5r5I7psI62G1U5rkVAQWkzwAEH27AU f0bUpWEVc4T73ugdBUlMk/7P9RWNIehUeLXE8q4GmR9Ya8GI12Bw5gdol2f1y671 Jt80Pehaq1pHGpZy8A7lTFQ/0yyQhWIbm8YONssk8/5anxdGAjbqXjPXVobpKNVu swIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 318688796612666752822592843196182217508628 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-11 01:56:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-09 01:56:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'testhk.uncoverchina.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23755490963886814572004861194747013156028029577475404874324275079968127808669935392419278892122425342702998999561157093367015013813462593149890142825554539708571829013582246739211485215557980403345833104882603511017740924346764859517399141383034397792519361900853237688600061876770873503324971964460305751031197883444148382767657742886876087665855088938790049065519122947029040264345318901924394436815861287812036114771405667749166840949956356791931981143099958041842823635863670392783634892690437023014174679036575174255546631970452296424124017445039514165213659119310199123275285884264988681626715902582152834150067 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fb3181570e71a42e217154ef27681b63c3baf3c3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (542 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beijing.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinese.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'other.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scripts.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shanghai.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testhk.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beijing.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinese.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forums.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.images.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.other.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scripts.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shanghai.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test2.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testhk.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zh.uncoverchina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zh.uncoverchina.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000166610d7d260000040300483046022100aae3bbd7c445820fc9295504de70fe263188c7c2b7bf9af1d754e942b6113f9e022100d967b5cadb0434c8a25d633a22d5e6e61b52c48b6f44c01694c02c8a95bf80180076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000166610d7f6d00000403004730450220385a51771ba01a3aa80b0176caaa820f22dc9a3bc961854e8fec6ccbec0b3e6f022100ed5d7f58b556bbebaf07cc2a53f43bb612ff069ce299ad209fd7e88036ee24c7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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