freeview.ngtv.io
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:8e:9a:d0:43:e7:4d:c4:99:50:d6:81:95:86:45:42:82:d3 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=freeview.ngtv.io
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:8e:9a:d0:43:e7:4d:c4:99:50:d6:81:95:86:45:42:82:d3Serial Number (int): 396975022316158917691555849526898438865619
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 81:00:e8:bd:e2:5b:2d:cd:7f:6f:37:a7:d2:09:ee:3c:6b:39:2d:7a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 02:05:0b:49:30:ec:1c:3a:9b:6e:b9:7a:e3:45:9a:17:d7:b8:b2:b9
Fingerprint (sha256): 12:23:0a:7f:66:88:77:5e:ec:9a:1b:a0:cc:43:95:80:76:2a:b2:de:26:81:2f:88:bb:15:8d:78:f7:8c:51:8f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate freeview.ngtv.io
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for freeview.ngtv.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
freeview.ngtv.io
Other certificates including the domain name ngtv.io
(limited to 100 certificates)
turner.com
sdc.turner.com
sdc.turner.com
www.turner.com
dev.turner.com
www.turner.com
sdc.turner.com
cnn.ngtv.io
turner.com
www.turner.com
turner.com
www.turner.com
turner.com
www.turner.com
dev.turner.com
geo.ngtv.io
sdc.turner.com
accio.ngtv.io
token.ngtv.io
turner.com
turner.com
dev.turner.com
iteblackout.ngtv.io
api.tvemanager.ngtv.io
freeview.ngtv.io
sdc.turner.com
ref.freeview.ngtv.io
freeview.ngtv.io
dev.turner.com
www.turner.com
httpstream.ngtv.io
cnn.ngtv.io
time.cnn.ngtv.io
www.turner.com
dev.turner.com
www.turner.com
token-admin.ngtv.io
refmedium.ngtv.io
turner.com
corsifier.ngtv.io
devnull.ngtv.io
geo.ngtv.io
turner.com
sdc.turner.com
medium.ngtv.io
blackout.ngtv.io
time.ten.ngtv.io
sdc.turner.com
logz.ngtv.io
turner.com
dev.turner.com
iris.filmstruck.ngtv.io
www.turner.com
httpstream.ngtv.io
utv.ngtv.io
www.turner.com
manifestparser.ngtv.io
sdc.turner.com
aspen.ngtv.io
www.turner.com
dev.turner.com
turner.com
ite.library.ngtv.io
www.turner.com
sdc.turner.com
synapse.ngtv.io
www.turner.com
ite.token.ngtv.io
medium.ngtv.io
www.turner.com
time.cnn.ngtv.io
sdc.turner.com
timber.ngtv.io
ref.medium.ngtv.io
www.turner.com
turner.com
www.turner.com
sdc.turner.com
www.turner.com
turner.com
token.ngtv.io
geo.ngtv.io
sdc.turner.com
time.ngtv.io
dev.turner.com
sdc.turner.com
aspen.ngtv.io
blackout.ngtv.io
turner.com
time.ngtv.io
www.turner.com
*.synapse.ngtv.io
itetime.ten.ngtv.io
www.turner.com
token.ngtv.io
blackout.ngtv.io
onprem.admin.token.ngtv.io
ara.ngtv.io
*.tvemanager.ngtv.io
turner.com
sdc.turner.com
sdc.turner.com
www.turner.com
dev.turner.com
www.turner.com
sdc.turner.com
cnn.ngtv.io
turner.com
www.turner.com
turner.com
www.turner.com
turner.com
www.turner.com
dev.turner.com
geo.ngtv.io
sdc.turner.com
accio.ngtv.io
token.ngtv.io
turner.com
turner.com
dev.turner.com
iteblackout.ngtv.io
api.tvemanager.ngtv.io
freeview.ngtv.io
sdc.turner.com
ref.freeview.ngtv.io
freeview.ngtv.io
dev.turner.com
www.turner.com
httpstream.ngtv.io
cnn.ngtv.io
time.cnn.ngtv.io
www.turner.com
dev.turner.com
www.turner.com
token-admin.ngtv.io
refmedium.ngtv.io
turner.com
corsifier.ngtv.io
devnull.ngtv.io
geo.ngtv.io
turner.com
sdc.turner.com
medium.ngtv.io
blackout.ngtv.io
time.ten.ngtv.io
sdc.turner.com
logz.ngtv.io
turner.com
dev.turner.com
iris.filmstruck.ngtv.io
www.turner.com
httpstream.ngtv.io
utv.ngtv.io
www.turner.com
manifestparser.ngtv.io
sdc.turner.com
aspen.ngtv.io
www.turner.com
dev.turner.com
turner.com
ite.library.ngtv.io
www.turner.com
sdc.turner.com
synapse.ngtv.io
www.turner.com
ite.token.ngtv.io
medium.ngtv.io
www.turner.com
time.cnn.ngtv.io
sdc.turner.com
timber.ngtv.io
ref.medium.ngtv.io
www.turner.com
turner.com
www.turner.com
sdc.turner.com
www.turner.com
turner.com
token.ngtv.io
geo.ngtv.io
sdc.turner.com
time.ngtv.io
dev.turner.com
sdc.turner.com
aspen.ngtv.io
blackout.ngtv.io
turner.com
time.ngtv.io
www.turner.com
*.synapse.ngtv.io
itetime.ten.ngtv.io
www.turner.com
token.ngtv.io
blackout.ngtv.io
onprem.admin.token.ngtv.io
ara.ngtv.io
*.tvemanager.ngtv.io
turner.com
Certificate
The complete raw certificate details for freeview.ngtv.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgISBI6a0EPnTcSZUNaBlYZFQoLTMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA0MDYyMDA3MzNaFw0x ODA3MDUyMDA3MzNaMBsxGTAXBgNVBAMTEGZyZWV2aWV3Lm5ndHYuaW8wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVKXKdSYDlE+NvImYZcyDFOeIEs9W pZIay1FC+aoWG3jcHN7Sr8Khfpc7w2YqpKXcNDyypVNqlpokE9PU5yX2sDdXFOsH JKPtt1rWiapPPcR36Ajjl2VOCBJZqMKT/11AZh7SdJkxHctQp0ek04CPHq75aK1q p3Nx74SVVvXAavJ0mz5wIYLhIDhDNOGy9Znuy4d28bTjj09rq3ble1YOa05SRAb5 s1Iu5ciVPlCWRL2qn/BWRzorNP5H0st43XiBCiYFgCWcRqAHucy/cSugzBaClBLA HXgn53VrzHoR4ybihVVJZD+SArw78eqXSbB810FE9kG18u/NZ/wNm2unAgMBAAGj ggMaMIIDFjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIEA6L3iWy3Nf283p9IJ7jxr OS16MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wGwYDVR0RBBQwEoIQZnJlZXZpZXcubmd0di5pbzCB/gYDVR0gBIH2MIHz MAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6 Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2Vy dGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0 aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUg UG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRv cnkvMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAVYHUwhaQNgFK6gubVzxT8MDk OHhwJQgXL6OqHQcT0wwAAAFinMkxRQAABAMASDBGAiEA2EC+1eE49mXAGSQD5Exn tJoDLeMi5wjZgsgiNhqcyewCIQCeo+tH51VgARZGTSvvv/nusY99lBx626sVj82G CGMKUQB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABYpzJMS8A AAQDAEgwRgIhANTVsFEevcFXte9Qek3wVv/PAh/Vmhy3ALi79OXJ9aWFAiEAhBbh HcmiquQvcVg/g6odNM4QqPmmwULH5kYy0EviMVswDQYJKoZIhvcNAQELBQADggEB AJgrrv3ZAIgX0v0U8qfa0qduRnxMmjZLZ/2hhxpwTs2yL3z/O0t05CpnSKBrL2Rs puYS2qSDHVzDWtPJjDBnF3l1N9vx4WjxLsJrr9yxTnqxH4xIJ2taZe27brOGE8LI Xn1AXwzmCUx39Z7814ePpb9AMIBl0vh2RRPW3h666dbqyxPBJsYwb9nLiYkN4wX6 t29DUsUMPMOH9uQYRkpwUsgj4giIX6UlxpvAfERp43Hcuxkk3dOagCdPOG8Le9Q1 hTe0NrIV/4YrB6I38oaQ3ZGIEfsu580hUaH73y14iiR90pF0Oa6QNbZUHwFjCzDk lhj9y8s3QzE2Yl90Srhunfo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1SlynUmA5RPjbyJmGXM gxTniBLPVqWSGstRQvmqFht43Bze0q/CoX6XO8NmKqSl3DQ8sqVTapaaJBPT1Ocl 9rA3VxTrBySj7bda1omqTz3Ed+gI45dlTggSWajCk/9dQGYe0nSZMR3LUKdHpNOA jx6u+Witaqdzce+ElVb1wGrydJs+cCGC4SA4QzThsvWZ7suHdvG0449Pa6t25XtW DmtOUkQG+bNSLuXIlT5QlkS9qp/wVkc6KzT+R9LLeN14gQomBYAlnEagB7nMv3Er oMwWgpQSwB14J+d1a8x6EeMm4oVVSWQ/kgK8O/Hql0mwfNdBRPZBtfLvzWf8DZtr pwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 396975022316158917691555849526898438865619 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-06 20:07:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-05 20:07:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'freeview.ngtv.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26173070425366080879115821071779302606271820140005594930940796625910059980009975594467411910661381420051640205180302841289588895645585730006513573907321325914961333921302748478807477319786560054059420178831111539146521547717998297090322827052555306707206566236190475841921746420601359868390902507573158908851929467291832767739346803666501653167703185696210607048049875175048138111999148321274778620118327198092524181083727594984352226025696924547396468846946267297345948227302719763899338226693600577615762093311501592422181826107802734304658771980503767975415127436647432522327284762207114731409276624399541368220583 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8100e8bde25b2dcd7f6f37a7d209ee3c6b392d7a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeview.ngtv.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001629cc931450000040300483046022100d840bed5e138f665c0192403e44c67b49a032de322e708d982c822361a9cc9ec0221009ea3eb47e755600116464d2befbff9eeb18f7d941c7adbab158fcd8608630a51007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001629cc9312f0000040300483046022100d4d5b0511ebdc157b5ef507a4df056ffcf021fd59a1cb700b8bbf4e5c9f5a5850221008416e11dc9a2aae42f71583f83aa1d34ce10a8f9a6c142c7e64632d04be2315b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00982baefdd9008817d2fd14f2a7dad2a76e467c4c9a364b67fda1871a704ecdb22f7cff3b4b74e42a6748a06b2f646ca6e612daa4831d5cc35ad3c98c306717797537dbf1e168f12ec26bafdcb14e7ab11f8c48276b5a65edbb6eb38613c2c85e7d405f0ce6094c77f59efcd7878fa5bf40308065d2f8764513d6de1ebae9d6eacb13c126c6306fd9cb89890de305fab76f4352c50c3cc387f6e418464a7052c823e208885fa525c69bc07c4469e371dcbb1924ddd39a80274f386f0b7bd4358537b436b215ff862b07a237f28690dd918811fb2ee7cd2151a1fbdf2d788a247dd2917439ae9035b6541f01630b30e49618fdcbcb37433136625f744ab86e9dfa