lacmarois.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ba:96:b2:51:27:9f:9a:09:96:82:90:68:aa:84:4f:ff:cd was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lacmarois.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ba:96:b2:51:27:9f:9a:09:96:82:90:68:aa:84:4f:ff:cdSerial Number (int): 324829688116798321294569971093577629958093
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d8:a7:25:38:d7:24:bf:d2:71:ca:a6:24:d5:1f:b2:68:15:c6:1a:00
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c2:88:f1:d2:c8:68:51:c1:c7:f7:5e:f3:29:8a:46:3f:56:e7:af:b3
Fingerprint (sha256): 2b:16:9c:75:58:ef:75:d5:15:4e:4a:15:73:3d:12:f1:6a:2f:12:8c:f7:00:94:f4:0a:74:f3:54:55:57:a1:7f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate lacmarois.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lacmarois.ca
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lacmarois.ca
www.lacmarois.ca
www.lacmarois.ca
Other certificates including the domain name lacmarois.ca
(limited to 100 certificates)
lacmarois.ca
sw.app.ignates.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
awakensolutions.com
lacmarois.ca
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
agronome.red
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
lazylb.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
www.krayceegraphy.com
lacmarois.ca
sni218880.cloudflaressl.com
lacmarois.ca
lazylb.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
lacmarois.ca
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
awakensolutions.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
lazylb.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
projects.kanaeokana.net
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
novlence.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
crowdsale.eatonomy.ca
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
stage.timeto.work
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
awakensolutions.com
sni218880.cloudflaressl.com
lazylb.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sw.app.ignates.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
awakensolutions.com
lacmarois.ca
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
agronome.red
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
lazylb.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
www.krayceegraphy.com
lacmarois.ca
sni218880.cloudflaressl.com
lacmarois.ca
lazylb.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
lacmarois.ca
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
awakensolutions.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
lazylb.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
projects.kanaeokana.net
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
novlence.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
crowdsale.eatonomy.ca
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
stage.timeto.work
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
awakensolutions.com
sni218880.cloudflaressl.com
lazylb.com
sni218880.cloudflaressl.com
sni218880.cloudflaressl.com
Certificate
The complete raw certificate details for lacmarois.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGDjCCBPagAwIBAgISA7qWslEnn5oJloKQaKqET//NMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjEyMjIyMzIwMDBaFw0x NzAzMjIyMzIwMDBaMBcxFTATBgNVBAMTDGxhY21hcm9pcy5jYTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBALRQXLa2CSGGDyN7FWVle5sTy824TCzSs4As yFO2MTMSLypOZdflQ9zOtE/jRC9n53R+P/GVdE/DmqK6PD8kXOGgsNzmPrGeBXxH BUNHO9tRTQkNXxPOAoYivcL7vAPsC37WsgkU1QrHO8xBAktcNxV9YSC2eX7BpgZl Ll44RGp6zuJ3Iyov1Qtf9IW9EX67bz7r6fceYYvLoCmHklX/rS6rpmhCfDYkLV0A 1QpSDDHalimClDQwh9HeJ59tiAsjeNlXP2KTv7rsrlg2qnTMKSLVtxBC1kUV8E1r hOENfjibNaWYRameTe17dRZiOq20WFfmjol1ZGCuOQhMZQqbIUTs1BMOZvi8BRnA InhqU1/zJwf928TP5cvuY4olOJZ3hqdeVApxoYogNt3Rg9In6rseVY3YAyVB/JJT ukpqz8sHS9iQsIExt05bPr+EjsJFBr337Y4lrVFf9Cr/bNiLF8A9eunxXRPn8xYF JHkuj1upIL0jj5/XTWEBHBIyc7IuWEqwn1d2CGKQVNN7bx276S7hilz7c6Q9hBz7 sJIpXCOYXr6uDuAIY7BcyJO3xhwvXDaNooDNCoUzcvdABE+ymvPUzDi1LykjAULk rAlUG7Lc7+Tr4f+p9zqPZPn9eS1y12HSvKbwCxD32L3idm3WscwYONycJgoeMuxJ jEhiWNb1AgMBAAGjggIfMIICGzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNinJTjX JL/SccqmJNUfsmgVxhoAMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCkGA1UdEQQiMCCCDGxhY21hcm9pcy5jYYIQd3d3 LmxhY21hcm9pcy5jYTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC 3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUg cmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29y ZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBz Oi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IB AQAXVyHPWKbeuQRpNQ36ZV/30d8nCWptiNpbvcwkdYwvXO1EgopIDfipNu8lQWGs hHSNi+FLTHCnJt7EEZ4BWe270KiRhAFFRggEUqdA3ryoNfWJtGQoajKeCavcvzVi O3XEL93cRsKucVH22k0UwhHdPnAP526TqGUeZhHfiZQ/5Ey3B1KQuX8JW7d190XA E5K6I6meonosv/qeXF0XlHEITNAJEu6z4eB/eU0pFG7z7oZ1cxag38j29oPP9PQC XWkcQgy6uQMDVKdgGvJncaH+/+IFxXwcA1jghALFGvv+H07UpF4L3HDbnE57av1N JV04XMP0DUpMBTaz6Uq/taGy -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtFBctrYJIYYPI3sVZWV7 mxPLzbhMLNKzgCzIU7YxMxIvKk5l1+VD3M60T+NEL2fndH4/8ZV0T8Oaoro8PyRc 4aCw3OY+sZ4FfEcFQ0c721FNCQ1fE84ChiK9wvu8A+wLftayCRTVCsc7zEECS1w3 FX1hILZ5fsGmBmUuXjhEanrO4ncjKi/VC1/0hb0RfrtvPuvp9x5hi8ugKYeSVf+t LqumaEJ8NiQtXQDVClIMMdqWKYKUNDCH0d4nn22ICyN42Vc/YpO/uuyuWDaqdMwp ItW3EELWRRXwTWuE4Q1+OJs1pZhFqZ5N7Xt1FmI6rbRYV+aOiXVkYK45CExlCpsh ROzUEw5m+LwFGcAieGpTX/MnB/3bxM/ly+5jiiU4lneGp15UCnGhiiA23dGD0ifq ux5VjdgDJUH8klO6SmrPywdL2JCwgTG3Tls+v4SOwkUGvfftjiWtUV/0Kv9s2IsX wD166fFdE+fzFgUkeS6PW6kgvSOPn9dNYQEcEjJzsi5YSrCfV3YIYpBU03tvHbvp LuGKXPtzpD2EHPuwkilcI5hevq4O4AhjsFzIk7fGHC9cNo2igM0KhTNy90AET7Ka 89TMOLUvKSMBQuSsCVQbstzv5Ovh/6n3Oo9k+f15LXLXYdK8pvALEPfYveJ2bdax zBg43JwmCh4y7EmMSGJY1vUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 324829688116798321294569971093577629958093 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-22 23:20:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-22 23:20:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lacmarois.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735616592483354651656152076388075385338377153649162191441806730351985269092801352606848233367858626871154315580606713483511319644108895088750850223531792319822889182873324755163500302965398877043481537426577856523939566488238247484783818813755028805518751032458288090534839467482602130252328948660285706473069919434020993544085759628095688500535562388611711400293070759664599807678904388407502712305020532892798316719438477376385112431491698505651353413020163897762559546725653107758110867522098971464341511468345796868862976921819394177221312102142351137173507122007963909427444177730146249691053946095751032648555909727172030233866068793303042930365999864593312658505154607639805977487842150883263676928044538101941053440253780091406602155924010743380899219099925645058551194239417249530708444702380536132779936779239937142992737852168348706359844415512287600493103827143988801094799916018457282467327384160322493632467890471595512797863286900456812906266638567074394339106973028642869877805607809679908991335716681523083166205164444815246497852506852278735151507875400749533465636684049296183434900355145782701122319990057294150790241830269943371691959620565162405200728534306509556824603449145384330323726305906015722423300183797 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d8a72538d724bfd271caa624d51fb26815c61a00 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacmarois.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacmarois.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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