gitea.dkw.io
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:61:29:98:86:1d:97:01:f7:73:7a:be:ea:6f:a8:1e:c1:31 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gitea.dkw.io
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:61:29:98:86:1d:97:01:f7:73:7a:be:ea:6f:a8:1e:c1:31Serial Number (int): 294399537683748687956608715074306553332017
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d9:b3:f4:da:fd:21:e6:6a:7e:78:21:41:6d:65:2c:2f:ef:06:a4:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 2c:32:64:00:9d:1d:0e:72:69:27:98:95:82:be:70:7b:fe:be:fd:7a
Fingerprint (sha256): 7a:c9:ec:97:b3:7f:9a:b6:61:d7:7a:de:05:eb:4c:56:61:0c:82:7b:29:22:b5:4d:84:cc:e0:28:94:cc:2b:cd
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate gitea.dkw.io
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gitea.dkw.io
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gitea.dkw.io
Other certificates including the domain name dkw.io
(limited to 100 certificates)
dkw.io
gitea.dkw.io
ka.dkw.io
dkw.io
dkw.io
dkw.io
csci.dkw.io
*.dkw.io
ka.dkw.io
*.dkw.io
karen.dkw.io
dkw.io
karen.dkw.io
clc.dkw.io
dkw.io
*.dkw.io
*.dkw.io
*.dkw.io
dkw.io
dystoria.dkw.io
spartan.dkw.io
*.dkw.io
clc.dkw.io
dkw.io
nsat.dkw.io
karen.dkw.io
*.dkw.io
dns.dkw.io
*.dkw.io
dkw.io
ip.dkw.io
spartan.dkw.io
dkw.io
dkw.io
dkw.io
dkw.io
mail.dkw.io
gitea.dkw.io
nsat.dkw.io
dkw.io
dkw.io
dkw.io
karen.dkw.io
dkw.io
*.dkw.io
dkw.io
mail.dkw.io
vs.dkw.io
taiga.dkw.io
*.dkw.io
dystoria.dkw.io
*.dkw.io
dystoria.dkw.io
ka.dkw.io
dkw.io
dkw.io
dkw.io
mail.dkw.io
*.dkw.io
dkw.io
*.dkw.io
dkw.io
mail.dkw.io
*.dkw.io
*.dkw.io
ip.dkw.io
dkw.io
karen.dkw.io
nsat.dkw.io
*.dkw.io
ip.dkw.io
cloud.dkw.io
dkw.io
dkw.io
dkw.io
*.dkw.io
taiga.dkw.io
dkw.io
vs.dkw.io
dkw.io
*.dkw.io
cloud.dkw.io
*.dkw.io
gitea.dkw.io
ka.dkw.io
dkw.io
dkw.io
dkw.io
csci.dkw.io
*.dkw.io
ka.dkw.io
*.dkw.io
karen.dkw.io
dkw.io
karen.dkw.io
clc.dkw.io
dkw.io
*.dkw.io
*.dkw.io
*.dkw.io
dkw.io
dystoria.dkw.io
spartan.dkw.io
*.dkw.io
clc.dkw.io
dkw.io
nsat.dkw.io
karen.dkw.io
*.dkw.io
dns.dkw.io
*.dkw.io
dkw.io
ip.dkw.io
spartan.dkw.io
dkw.io
dkw.io
dkw.io
dkw.io
mail.dkw.io
gitea.dkw.io
nsat.dkw.io
dkw.io
dkw.io
dkw.io
karen.dkw.io
dkw.io
*.dkw.io
dkw.io
mail.dkw.io
vs.dkw.io
taiga.dkw.io
*.dkw.io
dystoria.dkw.io
*.dkw.io
dystoria.dkw.io
ka.dkw.io
dkw.io
dkw.io
dkw.io
mail.dkw.io
*.dkw.io
dkw.io
*.dkw.io
dkw.io
mail.dkw.io
*.dkw.io
*.dkw.io
ip.dkw.io
dkw.io
karen.dkw.io
nsat.dkw.io
*.dkw.io
ip.dkw.io
cloud.dkw.io
dkw.io
dkw.io
dkw.io
*.dkw.io
taiga.dkw.io
dkw.io
vs.dkw.io
dkw.io
*.dkw.io
cloud.dkw.io
*.dkw.io
Certificate
The complete raw certificate details for gitea.dkw.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISA2EpmIYdlwH3c3q+6m+oHsExMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDYxNjI3MTVaFw0y MDA3MDUxNjI3MTVaMBcxFTATBgNVBAMTDGdpdGVhLmRrdy5pbzCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAMBFZhzs2sFfWrmTVWU+TM/EsgYvuxZKLrzG Iu86QVEa8mjnPjE1IKh86avVbf06IN8mg7RRmlXRyciSt4E7b+j6pYKVdHqgONX6 T0k1GQkcTYuHcfGehOqdkct50G/2rNSN7vxZsctkBi40Meva4JjjTyWWVvzNqMa8 H2EJI6A3RbrwQiPx1CX14otKBXL0Py7P23vAZTpyrVf2G+7ifx+72woE6txy5z9C LH4m0COnnG79tFf2rHeh3UFCw2tLXJ+PAz8uhkuu7QhbE+2DE0qvfQypxy1pWkz0 nHT4bkuDYHpXqOVPFKNVoeR0dDiVLNfS842eXcV6QceD7448RCvifnwiJEo9c/nf 65BVVBvTqW4Of3IMdxlOC514yV52nbhmBUKetyuBPuPV1xKg0j19jh03m1TVLWPM YcWMuMKfJcc1rmtjcNToZlavX4yCMNZBsB9oEuOCOm1tUi79MlPFyFLcH/uASWML ABQ1OsxPUcoNcUHlt+ruiMr59kn0kdMdowh7Jd5Opkkug0rUgeqf8kKkSCR7PvxZ +XcVcVvVl7VNyn/Ksnl8RUPkMX1KPO4wPVaHY5NkJ6/SicBFt7ZQG0E+dbLwrsIM MaCDrIzOUwqaxET9IIkDsqO30+3peZHYWyVtySSprsJX9I7NTJgsiZPe5nwuly5k 57/8xjOlAgMBAAGjggJiMIICXjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNmz9Nr9 IeZqfnghQW1lLC/vBqRQMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMZ2l0ZWEuZGt3LmlvMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx AHcA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFxUIg1DwAABAMA SDBGAiEA0D8hBLVF7G8IJHiGvvGGO5L74ToAcpTeVHIov8MoLtcCIQCbP5zH3z/l 4rRkW/Vr4BVjhmoBsDjiT4O/cDpuzYMbFQB2ALIeBcyLos2KIE6HZvkruYolIGdr 2vpw57JJUy3vi5BeAAABcVCINSUAAAQDAEcwRQIgLjk+IfuQxYdvLr/x96x/KeO5 4E8369tj7cymSDA1s6MCIQCA5iTld+CBnBliqyMZKxwbDQdepPPOb+eZ1eNOVVtJ OzANBgkqhkiG9w0BAQsFAAOCAQEATYE6gwg50fWs9etlFwqPBlH8xgkxfkhVu2ZJ CQGtQ3bB1vSHYutbGKjNTqLGebrQsgMMd640zFlrmkSQIXiW6EOi7UVWyInBHvjq J9MaYnKFDQqLWbo9Sc77dS0FvbHzCcDTBFGrIsBLW7ZoagkynxWewMU5PhgIk1tx wGqQAVkVal0fyJn22BBBaifpllF/8HPtCErK8ZjIFa/9hzjNlwDIKFZHfCpgO0Kp tJ33t/VT6WfwNAQa2KZVPMxpJb3Xr4eC3Wpt/qaR0UysA9/j01hijuxsBUj03jie UzP9Uy+NVPXStPhgha081c1WrLR8tVp2WpkbHIE4OqBIH19Z0w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwEVmHOzawV9auZNVZT5M z8SyBi+7FkouvMYi7zpBURryaOc+MTUgqHzpq9Vt/Tog3yaDtFGaVdHJyJK3gTtv 6PqlgpV0eqA41fpPSTUZCRxNi4dx8Z6E6p2Ry3nQb/as1I3u/Fmxy2QGLjQx69rg mONPJZZW/M2oxrwfYQkjoDdFuvBCI/HUJfXii0oFcvQ/Ls/be8BlOnKtV/Yb7uJ/ H7vbCgTq3HLnP0IsfibQI6ecbv20V/asd6HdQULDa0tcn48DPy6GS67tCFsT7YMT Sq99DKnHLWlaTPScdPhuS4Ngeleo5U8Uo1Wh5HR0OJUs19LzjZ5dxXpBx4PvjjxE K+J+fCIkSj1z+d/rkFVUG9Opbg5/cgx3GU4LnXjJXnaduGYFQp63K4E+49XXEqDS PX2OHTebVNUtY8xhxYy4wp8lxzWua2Nw1OhmVq9fjIIw1kGwH2gS44I6bW1SLv0y U8XIUtwf+4BJYwsAFDU6zE9Ryg1xQeW36u6Iyvn2SfSR0x2jCHsl3k6mSS6DStSB 6p/yQqRIJHs+/Fn5dxVxW9WXtU3Kf8qyeXxFQ+QxfUo87jA9Vodjk2Qnr9KJwEW3 tlAbQT51svCuwgwxoIOsjM5TCprERP0giQOyo7fT7el5kdhbJW3JJKmuwlf0js1M mCyJk97mfC6XLmTnv/zGM6UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 294399537683748687956608715074306553332017 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 16:27:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-05 16:27:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitea.dkw.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 784397609202378576780080972338656824274316588047084561452323979582182165087383404973912867630951197681074876498270824806227917038150852663278339210753451540057977505185763393757718973931239518363353565324274649952235233694290417154566849939023959879862425365641181884270591391343079110392055204900221482347288878853917579318221836279228979128069476205728852708150517561630707009525448132038635240688929849533941878061454348415532348649004033578138401101665085095006165085925860688125263146805159985888235151600495463662713984175672561918026574822783424306200028339767735739648120537115818303535295222906549847374240673668531193091208628016926963614535768568442430237888392457353355593390259024789072865033077537111797081778632767505100737047035059075646495184747040309996841452562932819940776121164908661979972380209764553525803795060176239939531250399436705190602544841692717284596194040873769912529787928638866668995415001689832986503014494135778829702517996828823346295497776217876185059208242734677242228746819576396529881540482270906977971849938503538388326401611449105087881382402845530217836290283793784595515095619496677813079180333123551752651056211573129352426816850283511739194946892350726127532910973645255664310241604517 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d9b3f4dafd21e66a7e7821416d652c2fef06a450 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitea.dkw.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001715088350f0000040300483046022100d03f2104b545ec6f08247886bef1863b92fbe13a007294de547228bfc3282ed70221009b3f9cc7df3fe5e2b4645bf56be01563866a01b038e24f83bf703a6ecd831b15007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017150883525000004030047304502202e393e21fb90c5876f2ebff1f7ac7f29e3b9e04f37ebdb63edcca6483035b3a302210080e624e577e0819c1962ab23192b1c1b0d075ea4f3ce6fe799d5e34e555b493b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004d813a830839d1f5acf5eb65170a8f0651fcc609317e4855bb66490901ad4376c1d6f48762eb5b18a8cd4ea2c679bad0b2030c77ae34cc596b9a4490217896e843a2ed4556c889c11ef8ea27d31a6272850d0a8b59ba3d49cefb752d05bdb1f309c0d30451ab22c04b5bb6686a09329f159ec0c5393e1808935b71c06a900159156a5d1fc899f6d810416a27e996517ff073ed084acaf198c815affd8738cd9700c82856477c2a603b42a9b49df7b7f553e967f034041ad8a6553ccc6925bdd7af8782dd6a6dfea691d14cac03dfe3d358628eec6c0548f4de389e5333fd532f8d54f5d2b4f86085ad3cd5cd56acb47cb55a765a991b1c81383aa0481f5f59d3