s3-website.dev.cnp.ikeadt.com
Issued by R3
About this certificate
This digital certificate with serial number 04:04:35:77:33:24:14:7f:ef:13:59:b9:a8:9d:4b:8f:99:40 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=s3-website.dev.cnp.ikeadt.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:04:35:77:33:24:14:7f:ef:13:59:b9:a8:9d:4b:8f:99:40Serial Number (int): 349881341199088954625627562004452123580736
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 85:17:18:ac:67:d5:b4:3a:ca:2a:85:a9:4c:d9:f8:de:f0:69:25:34
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 58:7c:e9:46:8b:93:71:53:18:79:c7:49:a7:f9:d6:ff:af:37:43:d5
Fingerprint (sha256): 02:e7:08:7d:b1:d6:db:7c:8a:a5:4f:41:18:57:af:9f:14:42:8d:52:53:08:97:91:4e:e0:c3:ea:48:01:e1:01
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate s3-website.dev.cnp.ikeadt.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for s3-website.dev.cnp.ikeadt.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
s3-website.dev.cnp.ikeadt.com
Other certificates including the domain name ikeadt.com
(limited to 100 certificates)
mail402.ikeadt.com
ikea.com
ikea.com
webhook.ghec-actions-runners.dh2-1.cnp.ikeadt.com
*.nonprd-retops.api.inter.ikeadt.com
ikea.com
csp.ikeadt.com
ikea.com
ikea.com
ikea.com
ikea.com
api.support.planner.qa.ikeadt.com
pte-insideworkspaces.ikeadt.com
ifb.ikeadt.com
dex.dev.cnp.ikeadt.com
ikea.com
s3-website.dev.cnp.ikeadt.com
ikea.com
*.s3.dev.cnp.ikeadt.com
testapp.dc-9.cnp.ikeadt.com
ikea.com
ikea.com
ikea.com
ikea.com
*.demo.dh2-1.cnp.ikeadt.com
*.ccoe-cn-prod.dc9-1.cnp.ikeadt.com
officeplanner.ppe.ikeadt.com
ikea.com
ikea.com
*.te-perf-lab.dh2-1.cnp.ikeadt.com
ikea.com
ikeadt.com
ss.cmp.analytics.ikeadt.com
*.testapp.dev.cnp.ikeadt.com
ikea.com
*.spapps.inside-pte.ikeadt.com
docave-admin.ikeadt.com
*.glinux.dh2-1.cnp.ikeadt.com
mta-sts.ikeadt.com
ikea.com
ikea.com
gateway.mimir.observability.dh2-1.cnp.ikeadt.com
ikeadt.com
argocd.dev.cnp.ikeadt.com
ikea.com
api.support.planner.dev.ikeadt.com
*.s3.dev.cnp.ikeadt.com
*.htapps.intranet-inter-cte-m.ikeadt.com
ikeadt.com
ikeadt.com
auth.cnp.ikeadt.com
*.hub01.api.ikeadt.com
sts.ikeadt.com
support.planner.dev.ikeadt.com
webhook.gh-actions-runners.dh2-1.cnp.ikeadt.com
dashboard.tekton-pipelines.cnp.ikeadt.com
news-pte.ikeadt.com
ikea.com
lg.te-perf-lab.dh2-1.cnp.ikeadt.com
s3.dc9-1.cnp.ikeadt.com
ikeadt.com
ikea.com
ikeadt.com
ikea.com
webhook.gh-actions-runners.dc9-1.cnp.ikeadt.com
*.ikeaautomationframework.dh2-1.cnp.ikeadt.com
ikeadt.com
*.s3.dc9-1.cnp.ikeadt.com
mihogar.ikeadt.com
ikea.com
cgi-cds-websvc-test.ikeadt.com
ikea.com
s3.dev.cnp.ikeadt.com
ikea.com
*.testapp.dc9-1.cnp.ikeadt.com
api.support.planner.dev.ikeadt.com
gateway.loki.dev.cnp.ikeadt.com
ikeadt.com
ikeadt.com
ikea.com
spitzer.dev.cnp.ikeadt.com
dashboard.ceph.lab.cnp.ikeadt.com
dex.dev.cnp.ikeadt.com
*.rmps.ikeadt.com
ikeadt.com
otlp-grpc-gateway.traces.dev.cnp.ikeadt.com
mihogar.ikeadt.com
*.example.dh3-1.cnp.ikeadt.com
test-jira.ikeadt.com
ikea.com
ikeadt.com
*.s3.lab.cnp.ikeadt.com
api.support.planner.qa.ikeadt.com
ikeadt.com
*.ikeaautomationframeworkstage.dh2-1.cnp.ikeadt.com
ikea.com
ikea.com
ikeadt.com
ikea.com
*.htapps.intranet-inter-ppe.ikeadt.com
ikea.com
ikea.com
webhook.ghec-actions-runners.dh2-1.cnp.ikeadt.com
*.nonprd-retops.api.inter.ikeadt.com
ikea.com
csp.ikeadt.com
ikea.com
ikea.com
ikea.com
ikea.com
api.support.planner.qa.ikeadt.com
pte-insideworkspaces.ikeadt.com
ifb.ikeadt.com
dex.dev.cnp.ikeadt.com
ikea.com
s3-website.dev.cnp.ikeadt.com
ikea.com
*.s3.dev.cnp.ikeadt.com
testapp.dc-9.cnp.ikeadt.com
ikea.com
ikea.com
ikea.com
ikea.com
*.demo.dh2-1.cnp.ikeadt.com
*.ccoe-cn-prod.dc9-1.cnp.ikeadt.com
officeplanner.ppe.ikeadt.com
ikea.com
ikea.com
*.te-perf-lab.dh2-1.cnp.ikeadt.com
ikea.com
ikeadt.com
ss.cmp.analytics.ikeadt.com
*.testapp.dev.cnp.ikeadt.com
ikea.com
*.spapps.inside-pte.ikeadt.com
docave-admin.ikeadt.com
*.glinux.dh2-1.cnp.ikeadt.com
mta-sts.ikeadt.com
ikea.com
ikea.com
gateway.mimir.observability.dh2-1.cnp.ikeadt.com
ikeadt.com
argocd.dev.cnp.ikeadt.com
ikea.com
api.support.planner.dev.ikeadt.com
*.s3.dev.cnp.ikeadt.com
*.htapps.intranet-inter-cte-m.ikeadt.com
ikeadt.com
ikeadt.com
auth.cnp.ikeadt.com
*.hub01.api.ikeadt.com
sts.ikeadt.com
support.planner.dev.ikeadt.com
webhook.gh-actions-runners.dh2-1.cnp.ikeadt.com
dashboard.tekton-pipelines.cnp.ikeadt.com
news-pte.ikeadt.com
ikea.com
lg.te-perf-lab.dh2-1.cnp.ikeadt.com
s3.dc9-1.cnp.ikeadt.com
ikeadt.com
ikea.com
ikeadt.com
ikea.com
webhook.gh-actions-runners.dc9-1.cnp.ikeadt.com
*.ikeaautomationframework.dh2-1.cnp.ikeadt.com
ikeadt.com
*.s3.dc9-1.cnp.ikeadt.com
mihogar.ikeadt.com
ikea.com
cgi-cds-websvc-test.ikeadt.com
ikea.com
s3.dev.cnp.ikeadt.com
ikea.com
*.testapp.dc9-1.cnp.ikeadt.com
api.support.planner.dev.ikeadt.com
gateway.loki.dev.cnp.ikeadt.com
ikeadt.com
ikeadt.com
ikea.com
spitzer.dev.cnp.ikeadt.com
dashboard.ceph.lab.cnp.ikeadt.com
dex.dev.cnp.ikeadt.com
*.rmps.ikeadt.com
ikeadt.com
otlp-grpc-gateway.traces.dev.cnp.ikeadt.com
mihogar.ikeadt.com
*.example.dh3-1.cnp.ikeadt.com
test-jira.ikeadt.com
ikea.com
ikeadt.com
*.s3.lab.cnp.ikeadt.com
api.support.planner.qa.ikeadt.com
ikeadt.com
*.ikeaautomationframeworkstage.dh2-1.cnp.ikeadt.com
ikea.com
ikea.com
ikeadt.com
ikea.com
*.htapps.intranet-inter-ppe.ikeadt.com
Certificate
The complete raw certificate details for s3-website.dev.cnp.ikeadt.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIETTCCAzWgAwIBAgISBAQ1dzMkFH/vE1m5qJ1Lj5lAMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjAzMTgxMDE2NTVaFw0yMjA2MTYxMDE2NTRaMCgxJjAkBgNVBAMT HXMzLXdlYnNpdGUuZGV2LmNucC5pa2VhZHQuY29tMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtKkGpxM28ysnbY6CH6G3Dd3DxfhKYSNGwnRqqMqMQi4F YwMQdBIHXrKCJPEG3JDOVuBgTsvQVPTkSSPrbnfloTv85hn3iO4D+dLy02bDUasx 39xzEiYaTioD/G2Daq7AVNik6Riy6J6ur2fjg4z0jGaiEWDx23gyheKqp2vLZdAH utrsnXtXprNHGZKYgTtF4UNJnEg1cQirN7iixt8vDS2qpuYV1R9KWyuuhMYgTY1Z DIkpI65SdcRWG/6DKDPt453L7Xz5itEUaLnGaCFKemtDGq9eRgeqBQxM1SQjPClV HrUkeG9BmqtTNuWWTse4OeirfFDSGFUnmfCpbTb6qwIDAQABo4IBZTCCAWEwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBSFFxisZ9W0OsoqhalM2fje8GklNDAfBgNVHSME GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov L3IzLmkubGVuY3Iub3JnLzAoBgNVHREEITAfgh1zMy13ZWJzaXRlLmRldi5jbnAu aWtlYWR0LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzATBgorBgEE AdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFoWdD0bW/dAMhAmK2yIp Q6wxiZiTEb+Hr2vugJQnDdKSIbZ/WdufDB+uTuwZEnapVlmk5bsM3LUY1tSBREpC ySa81odjctZxF4XTQ1nAKLNZZoKJVJJ4rFAC9Zmou677q1Z/tCOOSmKYybPz2ssR G2WvN+2EmcLbl9VBlNCz9pLyC5rKSMbV02HILHno8JK4CIc2bhhfAK5/VG2F2GxJ DQNERBzV5MB/qdFlmBOjoACoS0TFv6+TuWEmTgNFAougYET4vQCZoLs4U29gA33P Yk1pqLJZ1avXvw0AWrQKLGRn0o0jwvSCZTjd1X2La724qC5XlagsdLmSAo2QFNMS Iw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKkGpxM28ysnbY6CH6G3 Dd3DxfhKYSNGwnRqqMqMQi4FYwMQdBIHXrKCJPEG3JDOVuBgTsvQVPTkSSPrbnfl oTv85hn3iO4D+dLy02bDUasx39xzEiYaTioD/G2Daq7AVNik6Riy6J6ur2fjg4z0 jGaiEWDx23gyheKqp2vLZdAHutrsnXtXprNHGZKYgTtF4UNJnEg1cQirN7iixt8v DS2qpuYV1R9KWyuuhMYgTY1ZDIkpI65SdcRWG/6DKDPt453L7Xz5itEUaLnGaCFK emtDGq9eRgeqBQxM1SQjPClVHrUkeG9BmqtTNuWWTse4OeirfFDSGFUnmfCpbTb6 qwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 349881341199088954625627562004452123580736 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-18 10:16:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-16 10:16:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's3-website.dev.cnp.ikeadt.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22806244714503081087478762461193934445125762247247034481698391931056198138252954962267630447634343663021330874351323891746804849687647966316094598934670113271193873264059292817576819651371911012752464566128587995511579048078320434370674455895540737109296368747766941856586026938871631239631967091668743678501114653891167030392617329016716698899479868405847995404013029670514410711214743187353085381534773237745270441102356072214202746170409482751336288007085221014589026432667847391814652666397226664783782612048352675099900791371492240173028309828643072979242018510324460493351464877365882122381644025235332534827691 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 851718ac67d5b43aca2a85a94cd9f8def0692534 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3-website.dev.cnp.ikeadt.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0016859d0f46d6fdd00c84098adb222943ac3189989311bf87af6bee8094270dd29221b67f59db9f0c1fae4eec191276a95659a4e5bb0cdcb518d6d481444a42c926bcd6876372d6711785d34359c028b359668289549278ac5002f599a8bbaefbab567fb4238e4a6298c9b3f3dacb111b65af37ed8499c2db97d54194d0b3f692f20b9aca48c6d5d361c82c79e8f092b80887366e185f00ae7f546d85d86c490d0344441cd5e4c07fa9d1659813a3a000a84b44c5bfaf93b961264e0345028ba06044f8bd0099a0bb38536f60037dcf624d69a8b259d5abd7bf0d005ab40a2c6467d28d23c2f4826538ddd57d8b6bbdb8a82e5795a82c74b992028d9014d31223