linagora.com
Issued by R3
About this certificate
This digital certificate with serial number 04:17:c7:c5:de:22:38:51:c5:ce:d5:59:21:19:cb:47:97:ee was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=linagora.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:17:c7:c5:de:22:38:51:c5:ce:d5:59:21:19:cb:47:97:eeSerial Number (int): 356541181925271020419722697556817930065902
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 49:ad:7b:42:08:79:f4:2f:d5:6e:d8:08:58:e4:38:40:ec:5a:da:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): df:c2:aa:98:6a:de:4f:13:35:39:cf:47:1b:42:89:c9:b0:21:89:60
Fingerprint (sha256): 85:81:1d:4e:cb:1d:2c:e8:86:8f:0d:e8:89:ec:33:a6:5e:a4:23:5c:3a:a2:5d:e2:0d:eb:89:b6:e8:7a:35:d5
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate linagora.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for linagora.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
linagora.com
Other certificates including the domain name linagora.com
(limited to 100 certificates)
*.linagora.com
*.linagora.com
linagora.com
petals.linagora.com
linshare-internal.commun.linagora.com
www.sielte.com.br
ci-obm.linagora.com
ci-obm.linagora.com
huabei.app
poc.linagora.com
*.linagora.com
extranet.linagora.com
zestdevelopers.com
leoneazevedo.eng.br
linagora.com
petals.linagora.com
faire-simple-dev.linagora.com
faire-simple-dev.linagora.com
www.dogan-osthofen.com
*.linagora.com
ci-openpaas.linagora.com
p2023.linagora.com
petals.linagora.com
linshare.commun.linagora.com
linshare.commun.linagora.com
forge.linagora.com
linagora.com
petals.linagora.com
intranet.linagora.com
*.linagora.com
huabei.app
www.tuune.app
linshare.linagora.com
linagora.com
linshare.commun.linagora.com
*.linagora.com
www.buckyapp.com
petals.linagora.com
linagora.com
petals.linagora.com
sycloe-aeap.linagora.com
thebrent.net
grupomkn.com
linshare-internal.commun.linagora.com
forge.linagora.com
p2023.linagora.com
linshare.linagora.com
*.linagora.com
alegoriamedia.com
linagora.com
petals.linagora.com
petals.linagora.com
research.linagora.com
cryptoiclist.com
research.linagora.com
www.puravidasoftware.com
*.linagora.com
300sunnydays.com
poc.linagora.com
linagora.com
www.linagora.com
linshare-internal.commun.linagora.com
linagora.com
petals.linagora.com
faire-simple-dev.linagora.com
www.linagora.com
faire-simple-dev.linagora.com
petals.linagora.com
petals.linagora.com
linshare-internal.commun.linagora.com
shin.gy
linshare-internal.commun.linagora.com
next-mautic.linagora.com
linshare-internal.commun.linagora.com
linagora.com
*.linagora.com
linagora.com
petals.linagora.com
linshare-internal.commun.linagora.com
www.sielte.com.br
ci-obm.linagora.com
ci-obm.linagora.com
huabei.app
poc.linagora.com
*.linagora.com
extranet.linagora.com
zestdevelopers.com
leoneazevedo.eng.br
linagora.com
petals.linagora.com
faire-simple-dev.linagora.com
faire-simple-dev.linagora.com
www.dogan-osthofen.com
*.linagora.com
ci-openpaas.linagora.com
p2023.linagora.com
petals.linagora.com
linshare.commun.linagora.com
linshare.commun.linagora.com
forge.linagora.com
linagora.com
petals.linagora.com
intranet.linagora.com
*.linagora.com
huabei.app
www.tuune.app
linshare.linagora.com
linagora.com
linshare.commun.linagora.com
*.linagora.com
www.buckyapp.com
petals.linagora.com
linagora.com
petals.linagora.com
sycloe-aeap.linagora.com
thebrent.net
grupomkn.com
linshare-internal.commun.linagora.com
forge.linagora.com
p2023.linagora.com
linshare.linagora.com
*.linagora.com
alegoriamedia.com
linagora.com
petals.linagora.com
petals.linagora.com
research.linagora.com
cryptoiclist.com
research.linagora.com
www.puravidasoftware.com
*.linagora.com
300sunnydays.com
poc.linagora.com
linagora.com
www.linagora.com
linshare-internal.commun.linagora.com
linagora.com
petals.linagora.com
faire-simple-dev.linagora.com
www.linagora.com
faire-simple-dev.linagora.com
petals.linagora.com
petals.linagora.com
linshare-internal.commun.linagora.com
shin.gy
linshare-internal.commun.linagora.com
next-mautic.linagora.com
linshare-internal.commun.linagora.com
linagora.com
Certificate
The complete raw certificate details for linagora.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgISBBfHxd4iOFHFztVZIRnLR5fuMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA1MDkwMjIxMjBaFw0yMzA4MDcwMjIxMTlaMBcxFTATBgNVBAMT DGxpbmFnb3JhLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAM1H 04IvAa4U48N0aHOilwmhwGdRTTirsEKV6pq4xwppPPZdUfGUyryEUDwNdU0jlWvM /axd1jye5jee2Lrz9ocUrg8xOnff+Cd0VCGTAOnAqBXf62e9blF6jRVX1C1CiGu8 rVEisNkkGKYWOs3/BSwAdjtgVFhsvS+iXghuYBhbGwHi9+vrTwlibJjx2ex32w6T gjWEYMyKAkrsilxP+k82JhtCUWf1SePbOQL2mxCFRrPA2x9RajLkVLmqwvLzo1kd bf0k9qlItRNNSwA4l2MqEF7M2h/8zx0w6mdMe3xQmjJWs/TjElQpEqDnRbS76qMS Fo7Quwk+ENSoMpmEIW3Ye/Yvkl3jgGKS/nHTuWUXkQRmQ7ZrXZmBCc08XnnTzX4U Re506MCbhEX3SjS1W4mU15uW78Vr4BsVzAnZUU5p1DLRXiy+H7ZBBjfVSwrmCxdG OXQQlxFsaCzTkS75H8aKtaPzCzHvtHCRuw5SSB1L2IjHrdc78Sm7oHhxdY+CbnhQ ARP08M62M1HOAtGE+d0aq/Wn0Yq8ZCOFGePDybL0Bo6hSvM1QJ7GOR2C1wIQSnb+ IM3oDu8KmsL1RBh3yg0vX+LVRtUpR4mBC9Loy9t+PwulrlRfiMGMq0F0uEWOzA2P VIxC2vp2oxt0KuwTjO7lxWiAVztoan/Kj05gJVFnAgMBAAGjggJJMIICRTAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFEmte0IIefQv1W7YCFjkOEDsWtrUMB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMBcGA1UdEQQQMA6CDGxpbmFnb3JhLmNvbTBMBgNVHSAE RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3 ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABh/6HHWwAAAQDAEgw RgIhANh7hlKgTH+TYrmodKb73RvjscMSsK7EGLaJ0GOSpk5hAiEArrqd6inHWR7U JQF2TyltQz5NbXoTcHQ3ml6TVMQnKCMAdwDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr 7Otp4Xd9bQa9bgAAAYf+hx1ZAAAEAwBIMEYCIQDZlvfoV0hOup3rMdZQjO3oOomv QUs3PT5jjFu83sG9DAIhAMkgZhZW0GUCvKcPKJBfc8CMM2ywdGl4/VsBqhvk0ZJx MA0GCSqGSIb3DQEBCwUAA4IBAQCpYRLUlo8XKmKsA8K8hmRFfmsj7LVywLzjVPvN t4+tGQm7omCeuEVlVMFrnlVX168K9BUrCSmh90ZfbfDk/Sz0VsPSFnTT6kolR2b2 uOE5eJ8uI1uXbQOq8xScM2u4/zUzE4wBCCOQH7sa1usuBdk6MAnX4JZvRBwSPniz kUSDmcRYHjDozKP15y+0DKmcVeVzvrJrPjl8o7ueNeRfy1YIx3v5AlUTurAZKhQk XCt8/pxQCx7jAZrhfaVJUN7uuxCJ8b/FNjoTAeP8tW+UMJLV0x+v79zNf3tM6TyL CpUOq04ZmIkbz2dxYkdwteArZgOSnn30ytjWti1mvz+CoZHp -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzUfTgi8BrhTjw3Roc6KX CaHAZ1FNOKuwQpXqmrjHCmk89l1R8ZTKvIRQPA11TSOVa8z9rF3WPJ7mN57YuvP2 hxSuDzE6d9/4J3RUIZMA6cCoFd/rZ71uUXqNFVfULUKIa7ytUSKw2SQYphY6zf8F LAB2O2BUWGy9L6JeCG5gGFsbAeL36+tPCWJsmPHZ7HfbDpOCNYRgzIoCSuyKXE/6 TzYmG0JRZ/VJ49s5AvabEIVGs8DbH1FqMuRUuarC8vOjWR1t/ST2qUi1E01LADiX YyoQXszaH/zPHTDqZ0x7fFCaMlaz9OMSVCkSoOdFtLvqoxIWjtC7CT4Q1KgymYQh bdh79i+SXeOAYpL+cdO5ZReRBGZDtmtdmYEJzTxeedPNfhRF7nTowJuERfdKNLVb iZTXm5bvxWvgGxXMCdlRTmnUMtFeLL4ftkEGN9VLCuYLF0Y5dBCXEWxoLNORLvkf xoq1o/MLMe+0cJG7DlJIHUvYiMet1zvxKbugeHF1j4JueFABE/TwzrYzUc4C0YT5 3Rqr9afRirxkI4UZ48PJsvQGjqFK8zVAnsY5HYLXAhBKdv4gzegO7wqawvVEGHfK DS9f4tVG1SlHiYEL0ujL234/C6WuVF+IwYyrQXS4RY7MDY9UjELa+najG3Qq7BOM 7uXFaIBXO2hqf8qPTmAlUWcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 356541181925271020419722697556817930065902 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 02:21:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-07 02:21:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'linagora.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837471664225179467265706764621012878610320740036863578195657928806987598927269099837618833181749080925517515085082784014916319504518436273326207538823217062898068208159193699028477036634642531936960371758760182929419062066283694089025205888871368110379920945727367235225224872633573965618238096210361406410154448899909590834319383152146158421807617065894337027246025525309446739236071599133650689991358387973737119961039722747901913556371987316184775133835447573597425436499690154417520592579225570162103451430479735108368933568910993592650337369948368529966668553696968032241424908616231311190797128932070248334603502798979581195083117436870419792681112431850681845190624558531765852665713052108659901819447525181710527351323223526585305850644509421489999138262773899612613373791133273407435846758033164143339899705117575159401730345808092809941085268714360134067053783888711559859270147626102715715020742015291711324805919930967779179448435862866648932178235217656886208602742832526124077020308399121146206615664150971179901602138029362255714542812140510089146281835788470766772761727490250369553039325277918982440658063021086611672538111287401879296353878522532471459272017209419828808434131395986249350964293109909332076211294567 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 49ad7b420879f42fd56ed80858e43840ec5adad4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linagora.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187fe871d6c0000040300483046022100d87b8652a04c7f9362b9a874a6fbdd1be3b1c312b0aec418b689d06392a64e61022100aeba9dea29c7591ed42501764f296d433e4d6d7a137074379a5e9354c4272823007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187fe871d590000040300483046022100d996f7e857484eba9deb31d6508cede83a89af414b373d3e638c5bbcdec1bd0c022100c920661656d06502bca70f28905f73c08c336cb0746978fd5b01aa1be4d19271 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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