u12.slavia.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:45:ff:2a:c7:fc:a0:6a:78:8f:c9:97:d2:68:51:ef:68:1a was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=u12.slavia.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:45:ff:2a:c7:fc:a0:6a:78:8f:c9:97:d2:68:51:ef:68:1aSerial Number (int): 285155516384433360326517125959738364749850
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 33:ea:f2:70:a2:d1:eb:f4:b8:9f:aa:06:d1:34:ab:54:de:ca:86:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b7:30:be:29:9a:bd:94:e7:a3:7c:fa:48:4f:f5:b8:51:7a:7a:d7:40
Fingerprint (sha256): 04:04:df:ab:3f:5f:65:80:54:88:3b:b4:39:c8:9c:5e:40:8e:06:0d:c1:4c:de:9b:27:77:14:68:3e:53:3c:06
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate u12.slavia.cz
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for u12.slavia.cz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
u12-slavia.esports.cz
u12.slavia.cz
www.u12-slavia.esports.cz
u12.slavia.cz
www.u12-slavia.esports.cz
Other certificates including the domain name slavia.cz
(limited to 100 certificates)
u6.slavia.cz
old.slavia.cz
*.slavia.cz
u16.slavia.cz
u13.slavia.cz
u12.slavia.cz
en.slavia.cz
newsletter.slavia.cz
u9.slavia.cz
u8.slavia.cz
old.slavia.cz
u15.slavia.cz
cn.slavia.cz
u6.slavia.cz
u6.slavia.cz
cn.slavia.cz
u11.slavia.cz
u12.slavia.cz
u14.slavia.cz
en.slavia.cz
cn.slavia.cz
u15.slavia.cz
en.slavia.cz
en.slavia.cz
old.slavia.cz
en.slavia.cz
u14.slavia.cz
old.slavia.cz
old.slavia.cz
cn.slavia.cz
u16.slavia.cz
en.slavia.cz
u9.slavia.cz
u10.slavia.cz
u11.slavia.cz
u15.slavia.cz
old.slavia.cz
u10.slavia.cz
u14.slavia.cz
cn.slavia.cz
u12.slavia.cz
old.slavia.cz
old.slavia.cz
cn.slavia.cz
u15.slavia.cz
u7.slavia.cz
cn.slavia.cz
u6.slavia.cz
u9.slavia.cz
old.slavia.cz
u12.slavia.cz
en.slavia.cz
u13.slavia.cz
en.slavia.cz
u17.slavia.cz
u11.slavia.cz
cn.slavia.cz
cn.slavia.cz
cn.slavia.cz
u6.slavia.cz
en.slavia.cz
u7.slavia.cz
u7.slavia.cz
u11.slavia.cz
u17.slavia.cz
old.slavia.cz
u10.slavia.cz
u17.slavia.cz
old.slavia.cz
cn.slavia.cz
u11.slavia.cz
old.slavia.cz
en.slavia.cz
cn.slavia.cz
u6.slavia.cz
old.slavia.cz
cn.slavia.cz
en.slavia.cz
u9.slavia.cz
slavia.cz
u15.slavia.cz
slavia.cz
u8.slavia.cz
old.slavia.cz
u12.slavia.cz
u6.slavia.cz
cn.slavia.cz
en.slavia.cz
cn.slavia.cz
en.slavia.cz
en.slavia.cz
cn.slavia.cz
cn.slavia.cz
u15.slavia.cz
u8.slavia.cz
u11.slavia.cz
u19.slavia.cz
u11.slavia.cz
old.slavia.cz
cn.slavia.cz
old.slavia.cz
*.slavia.cz
u16.slavia.cz
u13.slavia.cz
u12.slavia.cz
en.slavia.cz
newsletter.slavia.cz
u9.slavia.cz
u8.slavia.cz
old.slavia.cz
u15.slavia.cz
cn.slavia.cz
u6.slavia.cz
u6.slavia.cz
cn.slavia.cz
u11.slavia.cz
u12.slavia.cz
u14.slavia.cz
en.slavia.cz
cn.slavia.cz
u15.slavia.cz
en.slavia.cz
en.slavia.cz
old.slavia.cz
en.slavia.cz
u14.slavia.cz
old.slavia.cz
old.slavia.cz
cn.slavia.cz
u16.slavia.cz
en.slavia.cz
u9.slavia.cz
u10.slavia.cz
u11.slavia.cz
u15.slavia.cz
old.slavia.cz
u10.slavia.cz
u14.slavia.cz
cn.slavia.cz
u12.slavia.cz
old.slavia.cz
old.slavia.cz
cn.slavia.cz
u15.slavia.cz
u7.slavia.cz
cn.slavia.cz
u6.slavia.cz
u9.slavia.cz
old.slavia.cz
u12.slavia.cz
en.slavia.cz
u13.slavia.cz
en.slavia.cz
u17.slavia.cz
u11.slavia.cz
cn.slavia.cz
cn.slavia.cz
cn.slavia.cz
u6.slavia.cz
en.slavia.cz
u7.slavia.cz
u7.slavia.cz
u11.slavia.cz
u17.slavia.cz
old.slavia.cz
u10.slavia.cz
u17.slavia.cz
old.slavia.cz
cn.slavia.cz
u11.slavia.cz
old.slavia.cz
en.slavia.cz
cn.slavia.cz
u6.slavia.cz
old.slavia.cz
cn.slavia.cz
en.slavia.cz
u9.slavia.cz
slavia.cz
u15.slavia.cz
slavia.cz
u8.slavia.cz
old.slavia.cz
u12.slavia.cz
u6.slavia.cz
cn.slavia.cz
en.slavia.cz
cn.slavia.cz
en.slavia.cz
en.slavia.cz
cn.slavia.cz
cn.slavia.cz
u15.slavia.cz
u8.slavia.cz
u11.slavia.cz
u19.slavia.cz
u11.slavia.cz
old.slavia.cz
cn.slavia.cz
Certificate
The complete raw certificate details for u12.slavia.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISA0X/Ksf8oGp4j8mX0mhR72gaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MDEwMDE3NDFaFw0x OTA2MzAwMDE3NDFaMBgxFjAUBgNVBAMTDXUxMi5zbGF2aWEuY3owggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJm12m0YEDHGEuw2YI2xqHaJVq0K2kVDz8 PisLjMV/tJdgVYUsM9ABS1ulkYYLy5UmK3DQJtv2tOECS3C9xJ3od894Zc2xLThu F2c1/UrpuiK/I2zNZyrynIELp/fLSTwFia/uR12E9IHBmtXJGsk61WgHYARs25S+ ShmVnGeWSUnYW+qHgQueXYWl+Gl5zFUIUd1IBef8Q5HJkNCSRgHzz7t5Pn8tgCSB AY5U7Fn6C72stLDQ56cVTGzciqp4USQf+fBuGEH5mWyOHoW0F4dPKY++hkdurVso /8NvvKaTozMQOLO6mIAlK0HQKQPClZL66SiQmC6GncnMh4oPh9R7AgMBAAGjggKU MIICkDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDPq8nCi0ev0uJ+qBtE0q1TeyoYc MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wSgYDVR0RBEMwQYIVdTEyLXNsYXZpYS5lc3BvcnRzLmN6gg11MTIuc2xhdmlh LmN6ghl3d3cudTEyLXNsYXZpYS5lc3BvcnRzLmN6MEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA4mlLribo6UAJ 6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFp1nkzfgAABAMARzBFAiEAvEwSZBJO E3+Xs7UZscGbmIkifUdHy+rOFm+iR46KqCoCIAWvielzlfZP3PIH+89k+Ht9mzGJ jJoIEsaWchtl/qLHAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgA AAFp1nkzhQAABAMARzBFAiEAt06sqNhsk+9eSu1g1Cs6hmgTTIZrbBi0YnwRC9kt x7ECIHMna9NpPKKEAkHbxVLoAcn9+1vonBuT0oGvwjTE6sZaMA0GCSqGSIb3DQEB CwUAA4IBAQAmpf1zLWURbvZYs90s6x/kh3t00wzSk+to8kyVSFsrYLgB/0glqMZW jwmGNT39Cq8Gyq/Yp1YDBm6vQOS2fcghZYCp0WGGbm+67JN2yKVlG1vEnPTBe0eb qJXZ8NwQ4/QwgPBr0eHCxT4Nm4Kr1pAMbaDvv448RiydpJXoq1yZyEUc+2R6wfow 6EhaGHFixjBpxFIKHNuZtRZeQfNntklFyv6K1xvKcSc5s4ORhuiEKMm9PmIdfxXU zkeS5z2n2hv2tIrmpSmRVsfOHU6o2j72/8NqaCe6nxmrNWpSHSZ1GC1w6qD4Fjkz Add3/9Fe1YRsMCD0JVHs8z0lp22Knox4 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZtdptGBAxxhLsNmCNsa h2iVatCtpFQ8/D4rC4zFf7SXYFWFLDPQAUtbpZGGC8uVJitw0Cbb9rThAktwvcSd 6HfPeGXNsS04bhdnNf1K6boivyNszWcq8pyBC6f3y0k8BYmv7kddhPSBwZrVyRrJ OtVoB2AEbNuUvkoZlZxnlklJ2Fvqh4ELnl2FpfhpecxVCFHdSAXn/EORyZDQkkYB 88+7eT5/LYAkgQGOVOxZ+gu9rLSw0OenFUxs3IqqeFEkH/nwbhhB+Zlsjh6FtBeH TymPvoZHbq1bKP/Db7ymk6MzEDizupiAJStB0CkDwpWS+ukokJguhp3JzIeKD4fU ewIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 285155516384433360326517125959738364749850 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-01 00:17:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-30 00:17:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'u12.slavia.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25450513042755138881775642798338519588461586166884181757292113401214158274224136548111585316891110049608951755412087400376163209599599058463782385540110311054999361494005310260100837535316246920469938595738878440936640943606659499086961387802316702452908849873156924356484963640934879220258658524331391105969988653384614243477684976825079386175263578406008538791672544938021734120987954966992153142998493534402464710824562528358074656735774740493235954328719364556363387541457900478272169592843563910915612905962308197614706455733951558365848426584158917411296981959280377663522280590006201230016769376949041753478267 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 33eaf270a2d1ebf4b89faa06d134ab54deca861c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u12-slavia.esports.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u12.slavia.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.u12-slavia.esports.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169d679337e0000040300473045022100bc4c1264124e137f97b3b519b1c19b9889227d4747cbeace166fa2478e8aa82a022005af89e97395f64fdcf207fbcf64f87b7d9b31898c9a0812c696721b65fea2c7007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169d67933850000040300473045022100b74eaca8d86c93ef5e4aed60d42b3a8668134c866b6c18b4627c110bd92dc7b1022073276bd3693ca2840241dbc552e801c9fdfb5be89c1b93d281afc234c4eac65a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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