icann.com
Issued by R3
About this certificate
This digital certificate with serial number 03:c9:b7:3f:8b:8e:a7:aa:7d:d8:ff:a4:42:52:a2:9e:bc:4a was issued on by Let's Encrypt.
With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=icann.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c9:b7:3f:8b:8e:a7:aa:7d:d8:ff:a4:42:52:a2:9e:bc:4aSerial Number (int): 329977192214877322487827940694996799110218
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 8f:2e:88:34:79:2b:75:9f:30:56:cf:b3:2f:bc:20:52:80:a1:3d:3b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 54:5d:c3:16:07:d0:81:14:67:81:0e:c8:17:a8:5c:8a:dc:45:2f:85
Fingerprint (sha256): 09:78:c4:4d:57:31:f5:67:a2:80:5c:97:4e:63:47:3c:6d:c2:d8:ef:52:e9:69:98:cc:02:43:a3:55:2e:b2:47
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate icann.com
23
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for icann.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
icann.asia
icann.com
icann.net
icannpassport.com
icannpassport.org
icannupdate.com
internetcorporationforassignednamesandnumbers.com
internetcorporationforassignednamesandnumbers.net
internetcorporationforassignednamesandnumbers.org
my.icann.org
new.icann.org
www.icann.asia
www.icann.com
www.icann.net
www.icannalac.com
www.icannalac.net
www.icannalac.org
www.icannpassport.com
www.icannpassport.org
www.icannupdate.com
www.internetcorporationforassignednamesandnumbers.com
www.internetcorporationforassignednamesandnumbers.net
www.internetcorporationforassignednamesandnumbers.org
icann.com
icann.net
icannpassport.com
icannpassport.org
icannupdate.com
internetcorporationforassignednamesandnumbers.com
internetcorporationforassignednamesandnumbers.net
internetcorporationforassignednamesandnumbers.org
my.icann.org
new.icann.org
www.icann.asia
www.icann.com
www.icann.net
www.icannalac.com
www.icannalac.net
www.icannalac.org
www.icannpassport.com
www.icannpassport.org
www.icannupdate.com
www.internetcorporationforassignednamesandnumbers.com
www.internetcorporationforassignednamesandnumbers.net
www.internetcorporationforassignednamesandnumbers.org
Other certificates including the domain name icann.com
(limited to 100 certificates)
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
icann.com
Certificate
The complete raw certificate details for icann.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHfjCCBmagAwIBAgISA8m3P4uOp6p92P+kQlKinrxKMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA2MDUwODM1MTNaFw0yMjA5MDMwODM1MTJaMBQxEjAQBgNVBAMT CWljYW5uLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMb3UMSg RfjaZOojDci/f671NzYIZ991+PXgJ8JCB+Z7ZYWbES0hyx6V3uXzkEZhwoZL39Ed q88QEzXgGQh37u8HnhwDcq/7/WfX89D5w6p5de4oOQX+/hXTrlI/igNw9pdNs9dJ BQxEWFYIdS5My4QPOLUCKyFLRiJl4W7Qt5Xgdq/ImBJVzxlqIbnJKYm5WTlXF/PO Grc0XSJ2tPcCQriYNh2HZIY6K2rAKPNYvse9AnBG/gOaZqTmeD4M90QenWApWpKY 9Xp/wxRMUXOi0bj1d0LeAsUEavDPZGLZk5idzABulI/yE4y6cdYCeGGislVKtdkF kE/zdE6XaDTnjcRY5NBgNLwVjAwkGM8MNtqkphnceGVHeHKt22ZL/k+/3OcThXVl tpo1VGZcPytaxNLiq5wp5mTFo2KNBizN77u0MxoZZF4EOl7TrE2ILoT6NBA/vzYY EfC2KlP/zoAAvID+akkt/qdrCz3ApSRJU9uKKyUnZSed7Izu7Axtt04UKJPaKq6B Zif/yctfnMf7NjRhbKJXwTNt+vx5rvoHW+v3VDTDY+Lv2W2H0i2Y474tF41HxMCa aL8MR6lTHcaCcKrW9PhjMMXq0G3kNeFtjS9fD89fuogNYejqGmKkvQzHR+3nP5Co 8cndAef/1tCuc2AgIMcV347+L4GTLFzXn39NAgMBAAGjggOqMIIDpjAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFI8uiDR5K3WfMFbPsy+8IFKAoT07MB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMIICawYDVR0RBIICYjCCAl6CCmljYW5uLmFzaWGCCWljYW5u LmNvbYIJaWNhbm4ubmV0ghFpY2FubnBhc3Nwb3J0LmNvbYIRaWNhbm5wYXNzcG9y dC5vcmeCD2ljYW5udXBkYXRlLmNvbYIxaW50ZXJuZXRjb3Jwb3JhdGlvbmZvcmFz c2lnbmVkbmFtZXNhbmRudW1iZXJzLmNvbYIxaW50ZXJuZXRjb3Jwb3JhdGlvbmZv cmFzc2lnbmVkbmFtZXNhbmRudW1iZXJzLm5ldIIxaW50ZXJuZXRjb3Jwb3JhdGlv bmZvcmFzc2lnbmVkbmFtZXNhbmRudW1iZXJzLm9yZ4IMbXkuaWNhbm4ub3Jngg1u ZXcuaWNhbm4ub3Jngg53d3cuaWNhbm4uYXNpYYINd3d3LmljYW5uLmNvbYINd3d3 LmljYW5uLm5ldIIRd3d3LmljYW5uYWxhYy5jb22CEXd3dy5pY2FubmFsYWMubmV0 ghF3d3cuaWNhbm5hbGFjLm9yZ4IVd3d3LmljYW5ucGFzc3BvcnQuY29tghV3d3cu aWNhbm5wYXNzcG9ydC5vcmeCE3d3dy5pY2FubnVwZGF0ZS5jb22CNXd3dy5pbnRl cm5ldGNvcnBvcmF0aW9uZm9yYXNzaWduZWRuYW1lc2FuZG51bWJlcnMuY29tgjV3 d3cuaW50ZXJuZXRjb3Jwb3JhdGlvbmZvcmFzc2lnbmVkbmFtZXNhbmRudW1iZXJz Lm5ldII1d3d3LmludGVybmV0Y29ycG9yYXRpb25mb3Jhc3NpZ25lZG5hbWVzYW5k bnVtYmVycy5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEw KDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYKKwYB BAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAKN9VOuClFEx2eCRSBA+ xkIW6+0IV7OPj1dpDxhKXMMelWSziDZ4Sbqu/nCG1yTnoH3MgTpFDC2p2ITewu/Q Vfsf/hxfXi1A1Eu05V1D+vo5Ew14rMIAgFteJRokFq2ZDIhK1FA0Dq/UA9bT476z kOBwMFuEIc+yEWP8/Wd4U7yi6+GmoSTLO+FoggcRHMSa29vezLlNrS9/3qTfUi38 27HWXXqo50rGkNx0BIPgzcdZSpte6yHNNJkBa7/VQCOjrHlDchGJmkTFuF6sGWfc W4hURamAOZiofYxATOLTQBNPEdpyl5hao2FTewDRdXHuKQE/KI9TiSoOTIXzQ/Fi Is8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxvdQxKBF+Npk6iMNyL9/ rvU3Nghn33X49eAnwkIH5ntlhZsRLSHLHpXe5fOQRmHChkvf0R2rzxATNeAZCHfu 7weeHANyr/v9Z9fz0PnDqnl17ig5Bf7+FdOuUj+KA3D2l02z10kFDERYVgh1LkzL hA84tQIrIUtGImXhbtC3leB2r8iYElXPGWohuckpiblZOVcX884atzRdIna09wJC uJg2HYdkhjorasAo81i+x70CcEb+A5pmpOZ4Pgz3RB6dYClakpj1en/DFExRc6LR uPV3Qt4CxQRq8M9kYtmTmJ3MAG6Uj/ITjLpx1gJ4YaKyVUq12QWQT/N0TpdoNOeN xFjk0GA0vBWMDCQYzww22qSmGdx4ZUd4cq3bZkv+T7/c5xOFdWW2mjVUZlw/K1rE 0uKrnCnmZMWjYo0GLM3vu7QzGhlkXgQ6XtOsTYguhPo0ED+/NhgR8LYqU//OgAC8 gP5qSS3+p2sLPcClJElT24orJSdlJ53sjO7sDG23ThQok9oqroFmJ//Jy1+cx/s2 NGFsolfBM236/Hmu+gdb6/dUNMNj4u/ZbYfSLZjjvi0XjUfEwJpovwxHqVMdxoJw qtb0+GMwxerQbeQ14W2NL18Pz1+6iA1h6OoaYqS9DMdH7ec/kKjxyd0B5//W0K5z YCAgxxXfjv4vgZMsXNeff00CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 329977192214877322487827940694996799110218 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-05 08:35:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-03 08:35:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'icann.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811710772396224021221007580220236328280844519397180991674578703809063234463574374403042737600056125934260012719354241282541430606014397121226736179493041035027614729444738342675146514883992297080719398548418344454745169184845780295817551999057704006040467633771499773380800497735483959355316908156298220413917400463425394743988089370388034539571361386648955352241065544450291596435100472799991322896576927779925106083850143734135621343652483436816898761254111040962964607995114977837538134206685090322406534945885969197241933750057525358393312896710526523463650196839313872179289555259507939949031692902464864819936923335860554250933870566507219861357934565081651067160116053545660547939154339154800995254584746099565354961117684461007800376159944712510993488400638348037635831529767782445481438745905164277737482842776242666679780135167669362151041637120879186254273004248932241733383591075955236809250410452910350989828470422948973206050379969826747213324611825712738357244904582193291213188546411339494415543500995396051259410856993728784216825907984919227339052024295557917016676546310474037446138532055084559526814519394312551272954119311893518208503144284688705505395460773846344632254709981657035210592825756155386473748594509 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8f2e8834792b759f3056cfb32fbc205280a13d3b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (610 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icann.asia' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icann.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icann.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icannpassport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icannpassport.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icannupdate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetcorporationforassignednamesandnumbers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetcorporationforassignednamesandnumbers.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetcorporationforassignednamesandnumbers.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.icann.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.icann.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icann.asia' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icann.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icann.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icannalac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icannalac.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icannalac.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icannpassport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icannpassport.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icannupdate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internetcorporationforassignednamesandnumbers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internetcorporationforassignednamesandnumbers.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internetcorporationforassignednamesandnumbers.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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