liber-lag2012.techlib.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:84:98:71:a5:84:11:40:6b:e7:80:74:ac:97:49:8f:39:09 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=liber-lag2012.techlib.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:84:98:71:a5:84:11:40:6b:e7:80:74:ac:97:49:8f:39:09Serial Number (int): 393569048902570226592256047287430504462601
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 7e:f0:41:82:fc:c9:68:da:73:ef:dc:d3:6a:53:59:f5:72:8b:9c:27
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 45:b4:01:67:f0:bf:3b:6f:60:16:d2:62:e5:99:dd:22:b5:e2:f2:24
Fingerprint (sha256): 1d:d6:e3:9a:b2:48:0c:c3:5f:c5:6e:b1:cb:46:4e:b1:94:88:37:78:69:b7:b2:72:4e:8a:d2:d2:e1:4b:39:f0
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate liber-lag2012.techlib.cz
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for liber-lag2012.techlib.cz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
liber-lag2012.techlib.cz
Other certificates including the domain name techlib.cz
(limited to 100 certificates)
elag2011.techlib.cz
vykukator.techlib.cz
icolc.techlib.cz
sfx.techlib.cz
matrix.techlib.cz
old.techlib.cz
elag2011.techlib.cz
caslin2013.techlib.cz
techlib.cz
space.techlib.cz
bigclean.techlib.cz
liber-lag2012.techlib.cz
caslin2013.techlib.cz
blog.techlib.cz
bigclean.techlib.cz
*.ezproxy.techlib.cz
blog.techlib.cz
eod2013.techlib.cz
bigclean.techlib.cz
old.techlib.cz
eod2013.techlib.cz
*.ezproxy.techlib.cz
caslin2013.techlib.cz
repozitar.techlib.cz
eod2013.techlib.cz
aleph.techlib.cz
ezproxy1.ntkcz.cz
summon-custom.techlib.cz
eod2013.techlib.cz
vykukator.techlib.cz
summon-custom.techlib.cz
indico.techlib.cz
blog.techlib.cz
liber-lag2012.techlib.cz
stanik.techlib.cz
bigclean.techlib.cz
caslin2013.techlib.cz
eod2013.techlib.cz
icolc.techlib.cz
bigclean.techlib.cz
ps.techlib.cz
summon-custom.techlib.cz
caslin2013.techlib.cz
caslin2013.techlib.cz
eod2013.techlib.cz
old.techlib.cz
space.techlib.cz
bigclean.techlib.cz
stanik.techlib.cz
liber-lag2012.techlib.cz
caslin2013.techlib.cz
icolc.techlib.cz
bigclean.techlib.cz
bigclean.techlib.cz
ps.techlib.cz
elag2011.techlib.cz
doc.techlib.cz
matrix.techlib.cz
mail.ntkcz.cz
techlib.cz
bigclean.techlib.cz
vykukator.techlib.cz
liber-lag2012.techlib.cz
liber-lag2012.techlib.cz
psh.techlib.cz
eod2013.techlib.cz
stanik.techlib.cz
psh.techlib.cz
elag2011.techlib.cz
kramerius.techlib.cz
ifis.techlib.cz
matrix.techlib.cz
safeq.ntkcz.cz
techlib.cz
liber-lag2012.techlib.cz
vykukator.techlib.cz
*.ezproxy.techlib.cz
old.techlib.cz
rs.techlib.cz
elag2011.techlib.cz
eod2013.techlib.cz
blog.techlib.cz
blog.techlib.cz
blog.techlib.cz
eod2013.techlib.cz
aleph.techlib.cz
nrgl.techlib.cz
psh.techlib.cz
old.techlib.cz
nejtek.techlib.cz
www.techlib.cz
summon-custom.techlib.cz
caslin2013.techlib.cz
vufind.techlib.cz
www.techlib.cz
eod2013.techlib.cz
bigclean.techlib.cz
techlib.cz
aleph.techlib.cz
techlib.cz
vykukator.techlib.cz
icolc.techlib.cz
sfx.techlib.cz
matrix.techlib.cz
old.techlib.cz
elag2011.techlib.cz
caslin2013.techlib.cz
techlib.cz
space.techlib.cz
bigclean.techlib.cz
liber-lag2012.techlib.cz
caslin2013.techlib.cz
blog.techlib.cz
bigclean.techlib.cz
*.ezproxy.techlib.cz
blog.techlib.cz
eod2013.techlib.cz
bigclean.techlib.cz
old.techlib.cz
eod2013.techlib.cz
*.ezproxy.techlib.cz
caslin2013.techlib.cz
repozitar.techlib.cz
eod2013.techlib.cz
aleph.techlib.cz
ezproxy1.ntkcz.cz
summon-custom.techlib.cz
eod2013.techlib.cz
vykukator.techlib.cz
summon-custom.techlib.cz
indico.techlib.cz
blog.techlib.cz
liber-lag2012.techlib.cz
stanik.techlib.cz
bigclean.techlib.cz
caslin2013.techlib.cz
eod2013.techlib.cz
icolc.techlib.cz
bigclean.techlib.cz
ps.techlib.cz
summon-custom.techlib.cz
caslin2013.techlib.cz
caslin2013.techlib.cz
eod2013.techlib.cz
old.techlib.cz
space.techlib.cz
bigclean.techlib.cz
stanik.techlib.cz
liber-lag2012.techlib.cz
caslin2013.techlib.cz
icolc.techlib.cz
bigclean.techlib.cz
bigclean.techlib.cz
ps.techlib.cz
elag2011.techlib.cz
doc.techlib.cz
matrix.techlib.cz
mail.ntkcz.cz
techlib.cz
bigclean.techlib.cz
vykukator.techlib.cz
liber-lag2012.techlib.cz
liber-lag2012.techlib.cz
psh.techlib.cz
eod2013.techlib.cz
stanik.techlib.cz
psh.techlib.cz
elag2011.techlib.cz
kramerius.techlib.cz
ifis.techlib.cz
matrix.techlib.cz
safeq.ntkcz.cz
techlib.cz
liber-lag2012.techlib.cz
vykukator.techlib.cz
*.ezproxy.techlib.cz
old.techlib.cz
rs.techlib.cz
elag2011.techlib.cz
eod2013.techlib.cz
blog.techlib.cz
blog.techlib.cz
blog.techlib.cz
eod2013.techlib.cz
aleph.techlib.cz
nrgl.techlib.cz
psh.techlib.cz
old.techlib.cz
nejtek.techlib.cz
www.techlib.cz
summon-custom.techlib.cz
caslin2013.techlib.cz
vufind.techlib.cz
www.techlib.cz
eod2013.techlib.cz
bigclean.techlib.cz
techlib.cz
aleph.techlib.cz
techlib.cz
Certificate
The complete raw certificate details for liber-lag2012.techlib.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgISBISYcaWEEUBr54B0rJdJjzkJMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDcyMTA0MzdaFw0x OTExMDUyMTA0MzdaMCMxITAfBgNVBAMTGGxpYmVyLWxhZzIwMTIudGVjaGxpYi5j ejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANzxrRfDpYI6pxoGaqvq V+sXgoAcZH2j2f1KlQ5kCNlK6CThZ4SG5McWs7qKaNRoZMLuJis0huSdzKXCJbH0 re9yPnEfwprayTaS5D09atSlBwmxjmtTicikIghPkO2EzQeRwYApi8FjeDR9LAWX WUg8TMjv4zHena1i6Pmcd9Fn47zkNSrkq80JMUeVuGHssIVwUerEniYo8Deb0Vd2 8WsEgWj7r5BdGAjZkIPcLYENd7odNQ8MOmt3e7ySceEM5ksgNmu29yM5Yf5JHtAJ wx8RWEmHOo97vfCuPFYqkgrkemwj+zn2Qdnm5bI1LRGlNSeRJCZlUCXqkHHJuICH 8xcCAwEAAaOCAmwwggJoMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUfvBBgvzJaNpz 79zTalNZ9XKLnCcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzAjBgNVHREEHDAaghhsaWJlci1sYWcyMDEyLnRlY2hsaWIu Y3owTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQC BIH0BIHxAO8AdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWxu HNCFAAAEAwBHMEUCIQCR5Y5YhdbGA1vz7SWKyYFuqfvb+Bds9023AikMhM7wlAIg N3CO3gA1ZiFm2KzFde6sfFT/4LrzJrQ+vsuTroUDEBcAdQBj8tvN6DvMLM8LcoQn V2szpI1hd4+9daY4scdoVEvYjQAAAWxuHNCAAAAEAwBGMEQCIF1qD9RzpVmikqAB mN4ghtjQObojr4pTYYgvARkf3mDhAiAA6bW/tVg1PhurhO5mx3HDrnfOlwfy8Yrc BbzTNO1vmTANBgkqhkiG9w0BAQsFAAOCAQEAmwDnvxos+3m84fyIWUoVQOLrL1YY CSsUB+F9sXWLH+jZ2U/4cMcsKc8TLHA4pDaMj3yZy2icIcuIOlKzUnomkutbV3Sp dx4UU1huMIcIxMBN2FiNIVUim109cvcMN6zvB2apetsi9pK+DkvcJSVrvUJQgVhS f1cd7m/ERSUZAVhE0ZXsrbbcsaEBtMIJPIRW2zM1WAD7DtAwz/9VbqPP1KVwHJ6q aoKRbjFu4eL6evmUnA2USuK4khbitKRf1Osch1DAvd6sAS/QmW5uXE4Mm3rrXdsh 3us33ZCdlgAkDuM+Gp9kanodw6ssT7nvhh8xawHbGl6vuPivM65GwRoKNA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PGtF8OlgjqnGgZqq+pX 6xeCgBxkfaPZ/UqVDmQI2UroJOFnhIbkxxazuopo1Ghkwu4mKzSG5J3MpcIlsfSt 73I+cR/CmtrJNpLkPT1q1KUHCbGOa1OJyKQiCE+Q7YTNB5HBgCmLwWN4NH0sBZdZ SDxMyO/jMd6drWLo+Zx30WfjvOQ1KuSrzQkxR5W4YeywhXBR6sSeJijwN5vRV3bx awSBaPuvkF0YCNmQg9wtgQ13uh01Dww6a3d7vJJx4QzmSyA2a7b3Izlh/kke0AnD HxFYSYc6j3u98K48ViqSCuR6bCP7OfZB2eblsjUtEaU1J5EkJmVQJeqQccm4gIfz FwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 393569048902570226592256047287430504462601 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-07 21:04:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 21:04:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'liber-lag2012.techlib.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27891602040783181623913962186201970236248823439809791024243998486744793627074470989385174958820838945466704669638087281955993777058586836086242851049786654015374028619613682337331062710942805853627124111037718981975661791363449253609951201807930295943836732516320106304878329997071530494896041575316850166231639362942482608349477244096572298685914333433062114580146485817741631960222569399762475158363169097340906913854303264618211916431666419274313396145641006686565294387218012755538585378656721445046861803421216467164569600770868301591054214072580183361498188887303770701927463608963219818218803310901125666304791 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7ef04182fcc968da73efdcd36a5359f5728b9c27 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liber-lag2012.techlib.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c6e1cd085000004030047304502210091e58e5885d6c6035bf3ed258ac9816ea9fbdbf8176cf74db702290c84cef094022037708ede0035662166d8acc575eeac7c54ffe0baf326b43ebecb93ae8503101700750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c6e1cd080000004030046304402205d6a0fd473a559a292a00198de2086d8d039ba23af8a5361882f01191fde60e1022000e9b5bfb558353e1bab84ee66c771c3ae77ce9707f2f18adc05bcd334ed6f99 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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