ifire.cz
Issued by R3
About this certificate
This digital certificate with serial number 04:9c:22:31:39:6e:77:9d:24:5d:5d:16:88:c2:48:e7:9a:99 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ifire.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:9c:22:31:39:6e:77:9d:24:5d:5d:16:88:c2:48:e7:9a:99Serial Number (int): 401578642305959606206978723345323247770265
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 13:3b:e1:3f:41:e1:8e:51:75:88:d5:36:ce:25:6b:4e:69:9a:1b:18
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 9b:9b:27:c5:35:bc:8d:d0:9b:7a:9d:53:7a:69:61:ba:54:56:b9:4f
Fingerprint (sha256): ac:57:cd:32:38:be:90:f1:93:59:50:e7:c8:15:1b:f6:3e:b0:98:0b:74:ca:2c:35:f5:ad:87:cf:61:7f:6a:0e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ifire.cz
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ifire.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ifire.cz
Other certificates including the domain name ifire.cz
(limited to 100 certificates)
casomira.ifire.cz
bluewagon.ifire.cz
ifire.cz
ifire.cz
ifire.cz
test-honzejk.ifire.cz
ivetafairaislova.ifire.cz
observium.ifire.cz
ifire.cz
test-honzejk.ifire.cz
casomira.ifire.cz
bee.ifire.cz
casomira.ifire.cz
ifire.cz
ifire.cz
test-honzejk.ifire.cz
casomira.ifire.cz
ifire.cz
ifire.cz
test-honzejk.ifire.cz
ifire.cz
casomira.ifire.cz
dpz.ifire.cz
www.ifire.cz
casomira.ifire.cz
casomira.ifire.cz
ifire.cz
www.paragliding-mapa.cz
redmine.ifire.cz
bee.dev.ifire.cz
www.ifire.cz
ifire.cz
casomira.ifire.cz
test-honzejk.ifire.cz
test-honzejk.ifire.cz
test-honzejk.ifire.cz
test-honzejk.ifire.cz
ifire.cz
pg-auth.ifire.cz
www.paragliding-mapa.cz
sql.ifire.cz
test-honzejk.ifire.cz
test-honzejk.ifire.cz
test-honzejk.ifire.cz
ifire.cz
ifire.cz
ifire.cz
logger.ifire.cz
ifire.cz
www.paragliding-mapa.cz
ifire.cz
ifire.cz
casomira.ifire.cz
ifire.cz
ifire.cz
ifire.cz
casomira.ifire.cz
test-honzejk.ifire.cz
mail.ifire.cz
casomira.ifire.cz
casomira.ifire.cz
test-honzejk.ifire.cz
ifire.cz
langica.ifire.cz
casomira.ifire.cz
sql.ifire.cz
ifire.cz
ifire.cz
ifire.cz
casomira.ifire.cz
casomira.ifire.cz
ifire.cz
ifire.cz
casomira.ifire.cz
casomira.ifire.cz
ifire.cz
test-honzejk.ifire.cz
skstudenec.ifire.cz
casomira.ifire.cz
ifire.cz
ifire.cz
casomira.ifire.cz
bee.dev.ifire.cz
test-honzejk.ifire.cz
ifire.cz
bee.ifire.cz
casomira.ifire.cz
ifire.cz
ifire.cz
ifire.cz
test-honzejk.ifire.cz
casomira.ifire.cz
test-honzejk.ifire.cz
ifire.cz
ifire.cz
test-honzejk.ifire.cz
test-honzejk.ifire.cz
freezybee.ifire.cz
casomira.ifire.cz
bluewagon.ifire.cz
ifire.cz
ifire.cz
ifire.cz
test-honzejk.ifire.cz
ivetafairaislova.ifire.cz
observium.ifire.cz
ifire.cz
test-honzejk.ifire.cz
casomira.ifire.cz
bee.ifire.cz
casomira.ifire.cz
ifire.cz
ifire.cz
test-honzejk.ifire.cz
casomira.ifire.cz
ifire.cz
ifire.cz
test-honzejk.ifire.cz
ifire.cz
casomira.ifire.cz
dpz.ifire.cz
www.ifire.cz
casomira.ifire.cz
casomira.ifire.cz
ifire.cz
www.paragliding-mapa.cz
redmine.ifire.cz
bee.dev.ifire.cz
www.ifire.cz
ifire.cz
casomira.ifire.cz
test-honzejk.ifire.cz
test-honzejk.ifire.cz
test-honzejk.ifire.cz
test-honzejk.ifire.cz
ifire.cz
pg-auth.ifire.cz
www.paragliding-mapa.cz
sql.ifire.cz
test-honzejk.ifire.cz
test-honzejk.ifire.cz
test-honzejk.ifire.cz
ifire.cz
ifire.cz
ifire.cz
logger.ifire.cz
ifire.cz
www.paragliding-mapa.cz
ifire.cz
ifire.cz
casomira.ifire.cz
ifire.cz
ifire.cz
ifire.cz
casomira.ifire.cz
test-honzejk.ifire.cz
mail.ifire.cz
casomira.ifire.cz
casomira.ifire.cz
test-honzejk.ifire.cz
ifire.cz
langica.ifire.cz
casomira.ifire.cz
sql.ifire.cz
ifire.cz
ifire.cz
ifire.cz
casomira.ifire.cz
casomira.ifire.cz
ifire.cz
ifire.cz
casomira.ifire.cz
casomira.ifire.cz
ifire.cz
test-honzejk.ifire.cz
skstudenec.ifire.cz
casomira.ifire.cz
ifire.cz
ifire.cz
casomira.ifire.cz
bee.dev.ifire.cz
test-honzejk.ifire.cz
ifire.cz
bee.ifire.cz
casomira.ifire.cz
ifire.cz
ifire.cz
ifire.cz
test-honzejk.ifire.cz
casomira.ifire.cz
test-honzejk.ifire.cz
ifire.cz
ifire.cz
test-honzejk.ifire.cz
test-honzejk.ifire.cz
freezybee.ifire.cz
casomira.ifire.cz
Certificate
The complete raw certificate details for ifire.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgISBJwiMTlud50kXV0WiMJI55qZMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA3MjgxMzU5MDJaFw0yMjEwMjYxMzU5MDFaMBMxETAPBgNVBAMT CGlmaXJlLmN6MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwYcFfBQC r/qgnIe/YFRzHwRuVyQnKz2YHXZpgZbtNC+NPxh2e0MlhhQzYZc3gT8mExiDjz3b 1LOxeMDHEUbr6YA10hvwPenNv5+zhxYEcEKEHGkibGG3GACkGs+9Bt58fbmUNqoi 70inuA7nyFN4ii7i5Mg8UYAySMjVL4QEHXkxX1Eq7m6C2vlcdfRwe5dUQkJtMGVo jVONtZ+aTCcn8KNxsC5UxtwMDCrVDiIQhBZuY5sI+VZp9ohD1An6V/dVkWjSLJeB ad1Wzsd0GWUC4Xi0qmcxBExlCrBvtyLmUw40Agasu6l6T7gKGQXLRo1ZYYMBfw52 OO9UbCMrHtUbbV0akLgal56O6qA2RgCcl3FCCoGGK+jzVShrkL7sZW+CcMOcnQUz UPLMq1vCT90eiRs7o9frXH1xur4CAsFbHaj9UOMWum1oQW2oThwM52+VoB0seFAj 10AlNgdHF2H73FZEDpIQ2mJXk30mB3YWExWhzUPvuNOvtMms+3GB4MFh00qR9VaG yx2vBLSaj6QYveOVUhoUPI1QbqsQtrbTtaDm1eBXFzfsHfMsJwpDUds+KvcZ177I I1Q2ewiWU9jWost/5rdpUdqOi43fGJDxO9Raoc1m2/s5Qp0e/lYe4+/h/vTmG96T ZBT6C7xV86HxEG5Vbywddxpdk47fJk5FnskCAwEAAaOCAkIwggI+MA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQUEzvhP0HhjlF1iNU2ziVrTmmaGxgwHwYDVR0jBBgwFoAU FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p LmxlbmNyLm9yZy8wEwYDVR0RBAwwCoIIaWZpcmUuY3owTAYDVR0gBEUwQzAIBgZn gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBGpVXrdfqR IDC1oolp9PN9ESxBdL79SbiFq/L8cP5tRwAAAYJFUXjkAAAEAwBGMEQCIDS/jWNj z9KXmw60XMzE1d6Nts0Wx46GGeFRSMSJ+1HUAiA5ODyX1e2Fd4p9bjoaeKDCMAij uDziug9xV7nBeDzZKgB2AEHIyrHfIkZKEMahOglCh15OMYsbA+vrS8do8JBilgb2 AAABgkVReNcAAAQDAEcwRQIhANcofVExIOcyB2p9hpi2IzBu5E4RKDCcUIZU86s1 E9MXAiB95n2h5kNTjqU/cpO7BJl+vETCPR3xs/uiH0F02j087jANBgkqhkiG9w0B AQsFAAOCAQEAMJXppPj02QU05amJ359dzl0ArxvYdrxFDN0+B1vtXIjCI+srXI8y cSJXriWv7ANqzKSzbrKhkcrolihV7W0qUYKfHDrC8OFeGr8uNh2N1fp/K4GO890u 1Axum7yUVVYD7kNfVtcdqdGZx42F2eCEKcOfENAcoQ63EjdgglYYRrBoONwvS2sK +/Mi/Y5GgukHWomg3IS3atFXK5O/CvwZpK3s/0Xe595ZzfXZmyfs/hdXok3GmQzy 3OyqvBn+ry3xj/gyHa8W0MLwoitRBq2NGbraftudJg3UJ2Kg128JjZ74bjRpLV// nCIy+dOmyTGeC/Lgi/A5kXN2bEzsWkhfvw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwYcFfBQCr/qgnIe/YFRz HwRuVyQnKz2YHXZpgZbtNC+NPxh2e0MlhhQzYZc3gT8mExiDjz3b1LOxeMDHEUbr 6YA10hvwPenNv5+zhxYEcEKEHGkibGG3GACkGs+9Bt58fbmUNqoi70inuA7nyFN4 ii7i5Mg8UYAySMjVL4QEHXkxX1Eq7m6C2vlcdfRwe5dUQkJtMGVojVONtZ+aTCcn 8KNxsC5UxtwMDCrVDiIQhBZuY5sI+VZp9ohD1An6V/dVkWjSLJeBad1Wzsd0GWUC 4Xi0qmcxBExlCrBvtyLmUw40Agasu6l6T7gKGQXLRo1ZYYMBfw52OO9UbCMrHtUb bV0akLgal56O6qA2RgCcl3FCCoGGK+jzVShrkL7sZW+CcMOcnQUzUPLMq1vCT90e iRs7o9frXH1xur4CAsFbHaj9UOMWum1oQW2oThwM52+VoB0seFAj10AlNgdHF2H7 3FZEDpIQ2mJXk30mB3YWExWhzUPvuNOvtMms+3GB4MFh00qR9VaGyx2vBLSaj6QY veOVUhoUPI1QbqsQtrbTtaDm1eBXFzfsHfMsJwpDUds+KvcZ177II1Q2ewiWU9jW ost/5rdpUdqOi43fGJDxO9Raoc1m2/s5Qp0e/lYe4+/h/vTmG96TZBT6C7xV86Hx EG5Vbywddxpdk47fJk5FnskCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 401578642305959606206978723345323247770265 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-28 13:59:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-26 13:59:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ifire.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 789523021353079410409131995341799299904456428418528572456181613839062406895525612335295061624464432022326304326738024554120380882275550854175221838442269159249744876905718621826725801922943757986701469097005026131097045342197861222004914711266121604522888611102882467141304586158236718988488157704127127280999741266909902263659119395596885874374941517100605844593885106150823375506210956148924305801557841838780192624326613190187862377815619792057816135132286193169846203218984304047058074641849386301277034152852562147897929486731281454842022934113280666193296481372940914990298518842094225670810985543091445376563677402446555139464733710623433736770679129238653162210327975100788094500637995529370942816398656347191692987752635238872400331897222662349413855875574993070047952126175182051541573039042432423421117208133041750956147570693535405471484231009163652655041299224326235079041230288451905365616206861910474501752827577207351109782447427985555751039350847489020695313222425389131811849606817867796622343824183506764222059083254059861821359080893930696858508250577687518454524622071614661306809189620962154824825155662395058322838363584307256886364055211639306924879736892165033523015635185759992011240737980510027094488882889 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 133be13f41e18e517588d536ce256b4e699a1b18 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifire.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000182455178e40000040300463044022034bf8d6363cfd2979b0eb45cccc4d5de8db6cd16c78e8619e15148c489fb51d4022039383c97d5ed85778a7d6e3a1a78a0c23008a3b83ce2ba0f7157b9c1783cd92a00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000182455178d70000040300473045022100d7287d513120e732076a7d8698b623306ee44e1128309c508654f3ab3513d31702207de67da1e643538ea53f7293bb04997ebc44c23d1df1b3fba21f4174da3d3cee . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003095e9a4f8f4d90534e5a989df9f5dce5d00af1bd876bc450cdd3e075bed5c88c223eb2b5c8f32712257ae25afec036acca4b36eb2a191cae8962855ed6d2a51829f1c3ac2f0e15e1abf2e361d8dd5fa7f2b818ef3dd2ed40c6e9bbc94555603ee435f56d71da9d199c78d85d9e08429c39f10d01ca10eb712376082561846b06838dc2f4b6b0afbf322fd8e4682e9075a89a0dc84b76ad1572b93bf0afc19a4adecff45dee7de59cdf5d99b27ecfe1757a24dc6990cf2dcecaabc19feaf2df18ff8321daf16d0c2f0a22b5106ad8d19bada7edb9d260dd42762a0d76f098d9ef86e34692d5fff9c2232f9d3a6c9319e0bf2e08bf0399173766c4cec5a485fbf