mail.ikologik.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:29:3b:03:01:6a:e5:c0:57:a2:8f:c8:23:3e:f1:e6:e7:de was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mail.ikologik.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:29:3b:03:01:6a:e5:c0:57:a2:8f:c8:23:3e:f1:e6:e7:deSerial Number (int): 275366874896432802007869028978044539693022
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 17:31:22:a5:2e:52:c9:4d:e8:a4:ca:c6:f0:24:ed:30:8b:74:22:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b3:0c:9e:13:9a:63:86:da:01:5d:e1:3c:a9:dc:7e:98:48:3e:86:88
Fingerprint (sha256): 14:c4:9b:c8:6e:c8:8c:a9:b8:15:f4:9b:84:80:85:63:82:ac:7e:23:cd:00:ae:27:e6:69:c0:d8:cc:27:b0:ff
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate mail.ikologik.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.ikologik.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.ikologik.com
Other certificates including the domain name ikologik.com
(limited to 100 certificates)
smartbox.pallwater.com
api.ikologik.eu
ikologik.be
link.homewizard.net
*.ikologik.com
fdus-62.freshdesk.com
mail.ikologik.com
smartplant.callensvyncke.com
mail.ikologik.com
*.ikologik.com
link.homewizard.net
hydris.ikologik.com
smartplant.callensvyncke.com
ikologik.com
ikologik.be
test.api.ikologik.be
*.ikologik.com
ikologik.be
eurowater.ikologik.com
*.ikologik.com
fdus-62.freshdesk.com
hydris.ikologik.com
*.ikologik.com
waterleau.ikologik.com
fdus-62.freshdesk.com
ikologik.be
fdus-62.freshdesk.com
mail.ikologik.com
ikologik.com
vyncke.ikologik.com
mail.ikologik.com
novotec.ikologik.com
mail.ikologik.com
ikologik.com
mail.ikologik.com
vyncke.ikologik.com
*.ikologik.com
test.api.ikologik.eu
fdus-62.freshdesk.com
*.ikologik.com
ikologik.be
pall.ikologik.com
highcharts.ikologik.com
link.homewizard.net
test.api.ikologik.be
waterleau.ikologik.be
api.ikologik.be
*.ikologik.com
api.ikologik.be
test.api.ikologik.be
api.ikologik.be
test.api.ikologik.be
fdus-62.freshdesk.com
link.homewizard.net
*.ikologik.com
link.homewizard.net
api.ikologik.be
link.homewizard.net
test.api.ikologik.be
app.ikologik.com
obtimize.boonsfis.com
mail.ikologik.com
app.ikologik.be
link.homewizard.net
ikologik.com
api.ikologik.be
ikologik.be
ikologik.com
fdus-62.freshdesk.com
iot.innomatic.be
link.homewizard.net
horizon.pwg.be
api.ikologik.be
smartbox.pallwater.com
ikologik.be
iot.innomatic.be
fdus-62.freshdesk.com
alphagooch.com
link.homewizard.net
link.homewizard.net
pall.ikologik.be
test.api.ikologik.be
fdus-62.freshdesk.com
smartplant.callensvyncke.com
ikologik.com
link.homewizard.net
smartplant.vyncke.com
link.homewizard.net
smartbox.pallwater.com
api.ikologik.be
link.homewizard.net
eklavyainfotech.com
iot.innomatic.be
link.homewizard.net
api.ikologik.be
iot.innomatic.be
waterleau.ikologik.com
hydris.ikologik.be
link.homewizard.net
api.ikologik.be
api.ikologik.eu
ikologik.be
link.homewizard.net
*.ikologik.com
fdus-62.freshdesk.com
mail.ikologik.com
smartplant.callensvyncke.com
mail.ikologik.com
*.ikologik.com
link.homewizard.net
hydris.ikologik.com
smartplant.callensvyncke.com
ikologik.com
ikologik.be
test.api.ikologik.be
*.ikologik.com
ikologik.be
eurowater.ikologik.com
*.ikologik.com
fdus-62.freshdesk.com
hydris.ikologik.com
*.ikologik.com
waterleau.ikologik.com
fdus-62.freshdesk.com
ikologik.be
fdus-62.freshdesk.com
mail.ikologik.com
ikologik.com
vyncke.ikologik.com
mail.ikologik.com
novotec.ikologik.com
mail.ikologik.com
ikologik.com
mail.ikologik.com
vyncke.ikologik.com
*.ikologik.com
test.api.ikologik.eu
fdus-62.freshdesk.com
*.ikologik.com
ikologik.be
pall.ikologik.com
highcharts.ikologik.com
link.homewizard.net
test.api.ikologik.be
waterleau.ikologik.be
api.ikologik.be
*.ikologik.com
api.ikologik.be
test.api.ikologik.be
api.ikologik.be
test.api.ikologik.be
fdus-62.freshdesk.com
link.homewizard.net
*.ikologik.com
link.homewizard.net
api.ikologik.be
link.homewizard.net
test.api.ikologik.be
app.ikologik.com
obtimize.boonsfis.com
mail.ikologik.com
app.ikologik.be
link.homewizard.net
ikologik.com
api.ikologik.be
ikologik.be
ikologik.com
fdus-62.freshdesk.com
iot.innomatic.be
link.homewizard.net
horizon.pwg.be
api.ikologik.be
smartbox.pallwater.com
ikologik.be
iot.innomatic.be
fdus-62.freshdesk.com
alphagooch.com
link.homewizard.net
link.homewizard.net
pall.ikologik.be
test.api.ikologik.be
fdus-62.freshdesk.com
smartplant.callensvyncke.com
ikologik.com
link.homewizard.net
smartplant.vyncke.com
link.homewizard.net
smartbox.pallwater.com
api.ikologik.be
link.homewizard.net
eklavyainfotech.com
iot.innomatic.be
link.homewizard.net
api.ikologik.be
iot.innomatic.be
waterleau.ikologik.com
hydris.ikologik.be
link.homewizard.net
api.ikologik.be
Certificate
The complete raw certificate details for mail.ikologik.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgISAyk7AwFq5cBXoo/IIz7x5ufeMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MTcyMzMzMTZaFw0x OTA3MTYyMzMzMTZaMBwxGjAYBgNVBAMTEW1haWwuaWtvbG9naWsuY29tMIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw6ftrYm0toR6jy16FtwnCAToZ0lk FzyIFhZx/04XcCjxtOfadjdfDQ2f9BQCnxWtME1aVueIwc0LdIObspcJmuCZcSmC CLg1ka93jq+QHHBgwKNSWR0Z3ok9ojdFcMx3FBCKXPFzezz7WtQOI2o7PdIO4xPI /5n10OCzY1MwZ9rxi3p0E8KLf0f6xqeOU/UKao32u8vZ5yZLOLi8XHNIBNbZ94/b ubFPfm+CBFc53GiGl+7m6uAilo+/xOtYtGX23xxkJUULnneRRPl1aIt6n2qi7geB Xc6F7Mt8ekcAUOONSZ0x5GRAaTYaFZavh6p5D6CRP+I0i+gW4YmFk7FfURuFf2Lx z5PsGWOuZzvDkDgUfLm2AjOLyLlisaXaA21VfXoMDyyRzsh9IzkDve8JQtlcBJeP y0SXudYlD6jUVENEIoFI4aGfCGg/Jqa8zkhjvcD6m24uV2S9A6aIymO93kUlopAY kFUHP9SYR1Pe+TIRHeeYpu7sfPseiklG2YQDQWHEy39oDdc9M9NMN4LuUxlzT97Y 8JgYsl0bTt+j0tl+1wWZIbJiNphEbOxP9SJUkaUDSl1viqbmgJSwJTtzPIEFcZDw y2cEnxpia8zQfHvzUQdQEHtHHLstoY+T7unSPS9+4wLYZ27OrCILZZLNFl6AD+tA qSL3Jo14UxZgO9kCAwEAAaOCAmUwggJhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU FzEipS5SyU3opMrG8CTtMIt0Ig4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl 7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghFtYWlsLmlrb2xvZ2lr LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkC BAIEgfQEgfEA7wB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAAB ai3cqe4AAAQDAEYwRAIgcDD1wQ0vZIiOtfJJI0SvxR07V1maoSneHjxj65evM1gC IHnifnLjNfIfkrQy2Z5Zzkkr+hGY9GpS60OBuEeA6iM3AHYAKTxRllTIOWW6qlD8 WAfUt2+/WHopctykwwz05UVH9HgAAAFqLdyqZwAABAMARzBFAiEAnfobNov1F3ua 0tmnW23NCotci/Jajq3wn6XrKBud5SwCIAf9Z2LcpFL9So6imOL/zXBe6spwJYLc vRVS+pS9qb87MA0GCSqGSIb3DQEBCwUAA4IBAQBGH0BNEHZa5uub2H6f7dXeISIH Npop4RfmPg0/bQMu8P/kQL3+5NRfe0GYBjFV9n+k/c6LBrSXTo1iMbljousBM9H+ xXlL2eWYA4VGk9nBvneQybJUYDUvUYc1KZy3FcdrybRVPUTTV5HSdltRZiGooL9T 7GAGUlqnNXh5f2vut1oQfgpeUQzJW56BXzdz/Eyq9xc8FxZ9Atww8mqwC83+Imop g6OEHW9BuvkmwyeYFiwVe3A5LfAStAzx2bREJhQmy8U4v1uxyF3dN6JrMJTbC16+ hRGG8y5/MiCmMFr2Q35iKl401ImgevOIL1C/ptIqCL7zWERSdl/UlOY5lxrm -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw6ftrYm0toR6jy16Ftwn CAToZ0lkFzyIFhZx/04XcCjxtOfadjdfDQ2f9BQCnxWtME1aVueIwc0LdIObspcJ muCZcSmCCLg1ka93jq+QHHBgwKNSWR0Z3ok9ojdFcMx3FBCKXPFzezz7WtQOI2o7 PdIO4xPI/5n10OCzY1MwZ9rxi3p0E8KLf0f6xqeOU/UKao32u8vZ5yZLOLi8XHNI BNbZ94/bubFPfm+CBFc53GiGl+7m6uAilo+/xOtYtGX23xxkJUULnneRRPl1aIt6 n2qi7geBXc6F7Mt8ekcAUOONSZ0x5GRAaTYaFZavh6p5D6CRP+I0i+gW4YmFk7Ff URuFf2Lxz5PsGWOuZzvDkDgUfLm2AjOLyLlisaXaA21VfXoMDyyRzsh9IzkDve8J QtlcBJePy0SXudYlD6jUVENEIoFI4aGfCGg/Jqa8zkhjvcD6m24uV2S9A6aIymO9 3kUlopAYkFUHP9SYR1Pe+TIRHeeYpu7sfPseiklG2YQDQWHEy39oDdc9M9NMN4Lu UxlzT97Y8JgYsl0bTt+j0tl+1wWZIbJiNphEbOxP9SJUkaUDSl1viqbmgJSwJTtz PIEFcZDwy2cEnxpia8zQfHvzUQdQEHtHHLstoY+T7unSPS9+4wLYZ27OrCILZZLN Fl6AD+tAqSL3Jo14UxZgO9kCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 275366874896432802007869028978044539693022 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 23:33:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-16 23:33:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.ikologik.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798206719123899995254157714642987595247803383062669662755495914436759094256793904801643868769467630867963673522898652566180568547968211969961213840920306641077612814153942471021511100083880770916383394233271010179504198285327672067255425174514296231927788648852866384694947512660192680668836350710186541679022434165159004358243917410555187223193686224135098285879136825992499008156121894245476304242734091094619706897277599993754216552954446647293733478925758825649328812596859949330663448801817849340452165746122707249549016958518537935611229048818098644750026337197213346130757802761246612162670842500037648430988664462276180616669630835115296369703298006196373001163778458746404209589320331940959963068818013003180472208781419016569813745164651840123513450542369864082241987492783962792170187059490933770124219101218624286098129299620527833001043236267847813257736001034848959274433594218330457369425317970137310372286692722824837668195907522903816841320698007939921113782276195611065994717675955351384691813219812207539403049896595955833911570423430194868957530420971992495665561989143272999191023313732673255839186306904249555640663251867352214604574400182504322895932693012866269344124537117585654686609415530059660615248526297 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 173122a52e52c94de8a4cac6f024ed308b74220e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ikologik.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a2ddca9ee000004030046304402207030f5c10d2f64888eb5f2492344afc51d3b57599aa129de1e3c63eb97af3358022079e27e72e335f21f92b432d99e59ce492bfa1198f46a52eb4381b84780ea2337007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a2ddcaa6700000403004730450221009dfa1b368bf5177b9ad2d9a75b6dcd0a8b5c8bf25a8eadf09fa5eb281b9de52c022007fd6762dca452fd4a8ea298e2ffcd705eeaca702582dcbd1552fa94bda9bf3b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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