docs.crim.ca
Issued by R3
About this certificate
This digital certificate with serial number 03:00:29:e1:03:02:74:80:ab:16:42:03:1a:8e:8d:25:0c:bc was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=docs.crim.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:00:29:e1:03:02:74:80:ab:16:42:03:1a:8e:8d:25:0c:bcSerial Number (int): 261392524470942832774440154221440764546236
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ff:01:78:cf:e4:55:f1:f5:96:da:0d:34:e9:bb:fb:92:e9:6b:03:a3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): d1:18:fc:b9:e9:83:06:19:91:61:7e:c1:e2:25:b1:b9:7e:1c:e0:e6
Fingerprint (sha256): 40:a2:22:f8:ef:5a:a8:f4:0e:13:9f:bf:25:7a:c6:92:36:a6:a9:2d:ab:61:96:5a:a5:82:d2:3e:ec:ad:6c:61
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate docs.crim.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for docs.crim.ca
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
docs.crim.ca
Other certificates including the domain name crim.ca
(limited to 100 certificates)
host-141-104.rdext.crim.ca
ueat1.docs.crim.ca
host-141-85.rdext.crim.ca
host-141-88.rdext.crim.ca
booking.virtualhometour.sg
*.crim.ca
finch.crim.ca
host-140-154.rdext.crim.ca
host-141-94.rdext.crim.ca
antispoofing.docs.crim.ca
host-140-216.rdext.crim.ca
host-141-88.rdext.crim.ca
host-141-104.rdext.crim.ca
crim.ca
antispoofing.docs.crim.ca
*.rdext.crim.ca
host-141-25.rdext.crim.ca
*.crim.ca
host-141-88.rdext.crim.ca
membres.crim.ca
meet.virtualnurserx.com
membres.crim.ca
membres.crim.ca
ueat1.docs.crim.ca
agendamentos.crmday.com.br
ueat1.docs.crim.ca
ueat1.docs.crim.ca
finch.crim.ca
antispoofing.docs.crim.ca
booknow.tnctrade.net
host-141-93.rdext.crim.ca
ueat1.docs.crim.ca
membres.crim.ca
vpn-ssl.crim.ca
host-140-216.rdext.crim.ca
booking.virtualhometour.sg
*.hub.crim.ca
host-140-88.rdext.crim.ca
ueat1.docs.crim.ca
host-141-104.rdext.crim.ca
membres.crim.ca
calendrier.q14.plus
*.crim.ca
bookings.olivierbinette.ca
booking.virtualhometour.sg
bookings.cleefcompany.com
*.hub.crim.ca
ueat1.docs.crim.ca
ueat1.docs.crim.ca
ueat1.docs.crim.ca
crim.ca
finch.crim.ca
host-141-82.rdext.crim.ca
booknow.pruta.co.il
bookings.cleefcompany.com
host-141-88.rdext.crim.ca
vdqualbook.docs.crim.ca
host-140-216.rdext.crim.ca
host-141-88.rdext.crim.ca
meet.virtualnurserx.com
membres.crim.ca
booking.virtualhometour.sg
*.hub.crim.ca
*.hub.crim.ca
docs.crim.ca
host-140-88.rdext.crim.ca
bookings.spirertech.com
*.crim.ca
crim.ca
host-140-155.rdext.crim.ca
bookings.olivierbinette.ca
ueat1.docs.crim.ca
host-141-104.rdext.crim.ca
host-141-85.rdext.crim.ca
*.hub.crim.ca
*.crim.ca
host-141-88.rdext.crim.ca
ueat1.docs.crim.ca
vesta.crim.ca
booknow.tnctrade.net
host-140-155.rdext.crim.ca
booknow.kmckenzieassoc.com
booknow.tnctrade.net
booking.virtualhometour.sg
*.rdext.crim.ca
vdqualbook.docs.crim.ca
host-140-216.rdext.crim.ca
ueat1.docs.crim.ca
*.hub.crim.ca
booking.virtualhometour.sg
meet.virtualnurserx.com
ueat1.docs.crim.ca
*.hub.crim.ca
host-140-155.rdext.crim.ca
*.hub.crim.ca
membres.crim.ca
host-141-98.rdext.crim.ca
host-141-94.rdext.crim.ca
host-140-154.rdext.crim.ca
bookings.spirertech.com
ueat1.docs.crim.ca
host-141-85.rdext.crim.ca
host-141-88.rdext.crim.ca
booking.virtualhometour.sg
*.crim.ca
finch.crim.ca
host-140-154.rdext.crim.ca
host-141-94.rdext.crim.ca
antispoofing.docs.crim.ca
host-140-216.rdext.crim.ca
host-141-88.rdext.crim.ca
host-141-104.rdext.crim.ca
crim.ca
antispoofing.docs.crim.ca
*.rdext.crim.ca
host-141-25.rdext.crim.ca
*.crim.ca
host-141-88.rdext.crim.ca
membres.crim.ca
meet.virtualnurserx.com
membres.crim.ca
membres.crim.ca
ueat1.docs.crim.ca
agendamentos.crmday.com.br
ueat1.docs.crim.ca
ueat1.docs.crim.ca
finch.crim.ca
antispoofing.docs.crim.ca
booknow.tnctrade.net
host-141-93.rdext.crim.ca
ueat1.docs.crim.ca
membres.crim.ca
vpn-ssl.crim.ca
host-140-216.rdext.crim.ca
booking.virtualhometour.sg
*.hub.crim.ca
host-140-88.rdext.crim.ca
ueat1.docs.crim.ca
host-141-104.rdext.crim.ca
membres.crim.ca
calendrier.q14.plus
*.crim.ca
bookings.olivierbinette.ca
booking.virtualhometour.sg
bookings.cleefcompany.com
*.hub.crim.ca
ueat1.docs.crim.ca
ueat1.docs.crim.ca
ueat1.docs.crim.ca
crim.ca
finch.crim.ca
host-141-82.rdext.crim.ca
booknow.pruta.co.il
bookings.cleefcompany.com
host-141-88.rdext.crim.ca
vdqualbook.docs.crim.ca
host-140-216.rdext.crim.ca
host-141-88.rdext.crim.ca
meet.virtualnurserx.com
membres.crim.ca
booking.virtualhometour.sg
*.hub.crim.ca
*.hub.crim.ca
docs.crim.ca
host-140-88.rdext.crim.ca
bookings.spirertech.com
*.crim.ca
crim.ca
host-140-155.rdext.crim.ca
bookings.olivierbinette.ca
ueat1.docs.crim.ca
host-141-104.rdext.crim.ca
host-141-85.rdext.crim.ca
*.hub.crim.ca
*.crim.ca
host-141-88.rdext.crim.ca
ueat1.docs.crim.ca
vesta.crim.ca
booknow.tnctrade.net
host-140-155.rdext.crim.ca
booknow.kmckenzieassoc.com
booknow.tnctrade.net
booking.virtualhometour.sg
*.rdext.crim.ca
vdqualbook.docs.crim.ca
host-140-216.rdext.crim.ca
ueat1.docs.crim.ca
*.hub.crim.ca
booking.virtualhometour.sg
meet.virtualnurserx.com
ueat1.docs.crim.ca
*.hub.crim.ca
host-140-155.rdext.crim.ca
*.hub.crim.ca
membres.crim.ca
host-141-98.rdext.crim.ca
host-141-94.rdext.crim.ca
host-140-154.rdext.crim.ca
bookings.spirertech.com
Certificate
The complete raw certificate details for docs.crim.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgISAwAp4QMCdICrFkIDGo6NJQy8MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA2MDMxNTAxMTVaFw0yMTA5MDExNTAxMTVaMBcxFTATBgNVBAMT DGRvY3MuY3JpbS5jYTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKdv NHnzAgyRSHLQwWIZDSHX/DQgeznM1IJB2n+Q1AMLvGINM6TvwX769WDJN5s7uuqK VqDIdo7x55hNDERj7RrtQDQ47OzezMeqIvPaDWkwGQYj8LS5fEpXcWIjWKnEBTRR sGT6so2XP9AvKu/0c+aVt9ESb8afzdQfv3dPrHdnWcwJrKXdZtRI6zQR/ZFUWkKd FKNJ5H2ULK9sekBPmg6YYbLYLbsS1Bp41XkPDxp5D+I7+5S0PFK5Ptn+N39nQoKK NzvSNDS5shDhgIhLHwuVoCDbqxBlhiRPgXgJYdLVh8UZHunnBv17CI/d7M4siayg uvm9WtlOO5Q1ChrRPW5iqmq98+WIXN+iNPpLtn6fjiRCu3xZhEakze+/DsJRq8Ct Mh/zaOZic3XJTXaxPwn9F5dVFNDNbVNc/J7GHhbt+jK6x4tpIzVJuyoaTxbpo0w5 BRFt4hZL6LDMGNIOxHS+bYVWKvX+cz0Nw41fxUT4Wtlpt7hPysirpc2XAWonznj6 pY1uiVikT4KnxT/y18KCxDaBpSp6Fu2cqjv31xkb8mve8J0kgomD9x7szCwylnWT Hc4kHCzjK6dx8Eqyp3gqlYZZkqNYiG8SdRv8eXptxIEWr78Y0RfVJs0zcCRaLBvk naZjTQsZwYSEpcQBejiccL/9UAaUniPuj6nYx1IXAgMBAAGjggJGMIICQjAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFP8BeM/kVfH1ltoNNOm7+5LpawOjMB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMBcGA1UdEQQQMA6CDGRvY3MuY3JpbS5jYTBMBgNVHSAE RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1 APZclC/RdzAiFFQYCDCUVo7jTRMZM7/fDC8gC8xO8WTjAAABedKbeWUAAAQDAEYw RAIgJ2lUJMMpIeP/puql3rGPp33ivifYh3Fxggk9U2/+CakCIDltp7JtGnF2hKmH rnLu9vSlVhZPjRtFSuUnNA0dTVS3AHYAlCC8Ho7VjWyIcx+CiyIsDdHaTV5sT5Q9 YdtOL1hNosIAAAF50pt7UAAABAMARzBFAiEAmN8JteaWSrvLRBLqKqmEeX9zpVjb XyjCmWpqwr+PS7UCIEcf+MFEsPDZMAy+rqNPK2O9HDDow3zC+Wytv7GAYbDMMA0G CSqGSIb3DQEBCwUAA4IBAQAYFveiqUcdzxvtbBrWjalc4Dto/mQJmgWiR5jSdszC eAtWRbydiolofN9j/xlvd2FwMUnjoILC9wckH36B4NH9PGiZ4DoMpmxLqYYnkTUY PSP18LfeUhfOHOGmd7evoaJmlaTVGWH1yiR/i5azvv/JajnaSsA4bLkvahElCfm/ kcq3kpMGV2zE9GNu98D6KOgbd1BNOvcOhIpsxJqJKKHHXBjALewjd9DqN+lRHS55 sloCFIZnxdie79OFDAu5l2wmVN4HlrWBv9jQUL2taqq4TnHvOL1cZWPqQ4S22ZNo vjgfwBKTg8vFICMYMN5zHQDPbA89Uy1Fi0CYiAI0lHIr -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAp280efMCDJFIctDBYhkN Idf8NCB7OczUgkHaf5DUAwu8Yg0zpO/Bfvr1YMk3mzu66opWoMh2jvHnmE0MRGPt Gu1ANDjs7N7Mx6oi89oNaTAZBiPwtLl8SldxYiNYqcQFNFGwZPqyjZc/0C8q7/Rz 5pW30RJvxp/N1B+/d0+sd2dZzAmspd1m1EjrNBH9kVRaQp0Uo0nkfZQsr2x6QE+a DphhstgtuxLUGnjVeQ8PGnkP4jv7lLQ8Urk+2f43f2dCgoo3O9I0NLmyEOGAiEsf C5WgINurEGWGJE+BeAlh0tWHxRke6ecG/XsIj93sziyJrKC6+b1a2U47lDUKGtE9 bmKqar3z5Yhc36I0+ku2fp+OJEK7fFmERqTN778OwlGrwK0yH/No5mJzdclNdrE/ Cf0Xl1UU0M1tU1z8nsYeFu36MrrHi2kjNUm7KhpPFumjTDkFEW3iFkvosMwY0g7E dL5thVYq9f5zPQ3DjV/FRPha2Wm3uE/KyKulzZcBaifOePqljW6JWKRPgqfFP/LX woLENoGlKnoW7ZyqO/fXGRvya97wnSSCiYP3HuzMLDKWdZMdziQcLOMrp3HwSrKn eCqVhlmSo1iIbxJ1G/x5em3EgRavvxjRF9UmzTNwJFosG+SdpmNNCxnBhISlxAF6 OJxwv/1QBpSeI+6PqdjHUhcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 261392524470942832774440154221440764546236 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-03 15:01:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-01 15:01:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'docs.crim.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 683072734205629147461033654172489997486110531778697368169349969984127054643998106548731704256441083917313558154782062964932455002537308234128697692125599403849869964808399787275884827725728350277867714045260534635558512239280798233491389694573946706018450485109016181298842865120575296973963296936107928180127278065394630572608919593026512476581913985546872167039743453467889602651520034797165735249810092133163740759573916158944195875247477063047049307003914219883173335596939960546426325249397811296665623989846790341233239789222952639681084011039909343829436720025370434435434716434477622705737794601262073831382945621061576918505546003101670490030197393168033229758437128916723373126995008505001841356325742974330938239485613853399753980556075683641549295959910402505910020829876874662123988964605909860058874658348284435402826265096476149910974382202266650136050131534758474916040504423661535515099296406441031234478066723578201283416799419330575286087079497869813405384514782409869074587882231940820299205188013377115136352128462838224902050520891809630347095566190001456256090554341071889768590114296465434064078536004969444393024473341924542288796008747698746939853270328069605699059484127396369245710487185226092604224393751 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ff0178cfe455f1f596da0d34e9bbfb92e96b03a3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.crim.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000179d29b79650000040300463044022027695424c32921e3ffa6eaa5deb18fa77de2be27d887717182093d536ffe09a90220396da7b26d1a717684a987ae72eef6f4a556164f8d1b454ae527340d1d4d54b70076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000179d29b7b50000004030047304502210098df09b5e6964abbcb4412ea2aa984797f73a558db5f28c2996a6ac2bf8f4bb50220471ff8c144b0f0d9300cbeaea34f2b63bd1c30e8c37cc2f96cadbfb18061b0cc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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