promo.iatn.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:04:64:9c:52:1a:90:e0:c1:d3:a3:b5:99:a0:23:7c:5d:49 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=promo.iatn.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:04:64:9c:52:1a:90:e0:c1:d3:a3:b5:99:a0:23:7c:5d:49Serial Number (int): 349944007657875520741676033508357642673481
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6c:08:c6:f8:c3:6a:d7:8a:7d:e5:c2:3f:a1:47:91:a5:a1:25:94:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 2c:f2:2d:dd:b5:1a:bc:d2:c0:3c:d1:3d:13:d8:dc:11:4a:2a:bd:b4
Fingerprint (sha256): b9:ad:dd:6e:f9:8e:a2:15:e3:15:c2:e6:28:f1:11:53:93:b0:92:fb:8d:2c:c6:5e:7f:fe:7a:4f:b7:69:d1:82
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate promo.iatn.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for promo.iatn.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
promo.iatn.net
Other certificates including the domain name iatn.net
(limited to 100 certificates)
trust.iatn.net
trust.iatn.net
members.iatn.net
trust.iatn.net
promo.iatn.net
promo.iatn.net
it-status.psemi.com
store.iatn.net
it-status.psemi.com
trust.iatn.net
promo.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
promo.iatn.net
store.iatn.net
*.iatn.net
promo.iatn.net
www.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
members.iatn.net
trust.iatn.net
cumulus.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
*.iatn.net
trust.iatn.net
promo.iatn.net
trust.iatn.net
trust.iatn.net
store.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
members.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
*.iatn.net
store.iatn.net
store.iatn.net
it-status.psemi.com
store.iatn.net
it-status.psemi.com
trust.complianceds.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
tms1-status.bbpos.com
store.iatn.net
store.iatn.net
promo.iatn.net
promo.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
cumulus.iatn.net
trust.iatn.net
status.ewaycorp.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
*.iatn.net
trust.iatn.net
*.iatn.net
promo.iatn.net
trust.iatn.net
trust.iatn.net
promo.iatn.net
trust.iatn.net
promo.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
promo.iatn.net
trust.iatn.net
members.iatn.net
trust.iatn.net
*.iatn.net
trust.iatn.net
www.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
promo.iatn.net
store.iatn.net
trust.iatn.net
members.iatn.net
trust.iatn.net
promo.iatn.net
promo.iatn.net
it-status.psemi.com
store.iatn.net
it-status.psemi.com
trust.iatn.net
promo.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
promo.iatn.net
store.iatn.net
*.iatn.net
promo.iatn.net
www.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
members.iatn.net
trust.iatn.net
cumulus.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
*.iatn.net
trust.iatn.net
promo.iatn.net
trust.iatn.net
trust.iatn.net
store.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
members.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
*.iatn.net
store.iatn.net
store.iatn.net
it-status.psemi.com
store.iatn.net
it-status.psemi.com
trust.complianceds.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
tms1-status.bbpos.com
store.iatn.net
store.iatn.net
promo.iatn.net
promo.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
cumulus.iatn.net
trust.iatn.net
status.ewaycorp.com
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
*.iatn.net
trust.iatn.net
*.iatn.net
promo.iatn.net
trust.iatn.net
trust.iatn.net
promo.iatn.net
trust.iatn.net
promo.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
promo.iatn.net
trust.iatn.net
members.iatn.net
trust.iatn.net
*.iatn.net
trust.iatn.net
www.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
trust.iatn.net
promo.iatn.net
store.iatn.net
Certificate
The complete raw certificate details for promo.iatn.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgISBARknFIakODB06O1maAjfF1JMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjUxNzMxMzNaFw0x OTExMjMxNzMxMzNaMBkxFzAVBgNVBAMTDnByb21vLmlhdG4ubmV0MIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7goTuG0PlW3wA4maJDG2XtI+SoO8E6eL bjyY1EZGJzc63rM8EzyB/6I1vBJI6VOSXVrg/vtzgLYvlnBd+VngGclzL0nzWMEs CzHu27QGHYsWMSqoRmbubI6QsKAnRv8NaaZcErVMNheEDsJ13GVEAWm1EG9YwBJH cTJcLi7jcGli6sGReIqoscZk5zkjdhKijvnys78zxYdVQIFDhWtNCJ3nyYQApDwq vnX5fVThAXKxKJDHOIQlafYsz+ohfCpvpuD1YTYbtRvSQAyM+OTTXF3Ll8TiiCzc Za7GXp5GAieDndGLFFb9CZkj0uxMDYwGI9chrq9ez1ZdCdVWJT3yiGV9HM44Y6hm ogdmgm3Dn3QPOeN+I3RHOM/hXN262cnbEl8y70+yuZtxVpb+b7z3b4tIS1ZmgFa/ cB1jpa3ZLUNUCsxV5uWV4owfl7XKsCMiyNoBOlHdM/4v5+mnvNMT8+GPdo5POKug +VtLGe2Jwpc8upXlu6pA70DIF4hvVa/uw9Y4TInUYxr6vMX3RxmRjOmj3kdzWriU 1LDnzh4zLoLUjRebu4FtFE0MR70I5SKwbhL+c0tgRpxNd0dS8B82kF37Pa8B0p1m Kq+sFBoMkB9CrhWR1OtJJFL8BGCvu2sL2lcMSj4vbE1X+k/oCsN2UhSRGllYFl9n EAmafvANw7cCAwEAAaOCAmMwggJfMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUbAjG +MNq14p95cI/oUeRpaEllD8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5wcm9tby5pYXRuLm5ldDBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE gfIA8AB3AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABbMoMNssA AAQDAEgwRgIhAMzab2mqgOu1vd8CYedgP8KKsmmlINUerBrGqGSTa7+zAiEAyj5V rRQqhOD65OcEy45mb6dM8lb2R7eC6kmPFWK5tmAAdQApPFGWVMg5ZbqqUPxYB9S3 b79Yeily3KTDDPTlRUf0eAAAAWzKDDa7AAAEAwBGMEQCID3OMdBDkM1Gkr32v7ha xiD9iooktl9E7wXOopErF2CMAiAAzi9RpqzSf+D9o6IA8Mhoc1/hCPWhIQb/MIkr KED2wDANBgkqhkiG9w0BAQsFAAOCAQEAJBbvwhfNb4RYd5Pg19Y2V5yfgahN1muF WCNuSVpipNJYIOAVVI4NrQGLQXlN5cytLF+pkboyxzG0CDp24rn7r4gD9TQDz3L2 K++hJ+vP00JW6/UpNR/sHQAasTxZ6JElo43rBUy55Di4s31TM96yWeUGWYX7vxTA XhRvVHTFHiYw51e0NlUrUCl7Kk7CHGRP2CFtp7uqHsChYY7g/LdMuD0Or/8GoBIS JJb/NsnKMebjyb1uIEE6sR7sNwA1IJI7Ho10EmKZFe977P5nlxlRGl9N/xABfVZb UkQ6UWfxBog6lMGKUuA9lQxEdIqkW9DS/SH3Q2aoWsDCiWCAANXflw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7goTuG0PlW3wA4maJDG2 XtI+SoO8E6eLbjyY1EZGJzc63rM8EzyB/6I1vBJI6VOSXVrg/vtzgLYvlnBd+Vng GclzL0nzWMEsCzHu27QGHYsWMSqoRmbubI6QsKAnRv8NaaZcErVMNheEDsJ13GVE AWm1EG9YwBJHcTJcLi7jcGli6sGReIqoscZk5zkjdhKijvnys78zxYdVQIFDhWtN CJ3nyYQApDwqvnX5fVThAXKxKJDHOIQlafYsz+ohfCpvpuD1YTYbtRvSQAyM+OTT XF3Ll8TiiCzcZa7GXp5GAieDndGLFFb9CZkj0uxMDYwGI9chrq9ez1ZdCdVWJT3y iGV9HM44Y6hmogdmgm3Dn3QPOeN+I3RHOM/hXN262cnbEl8y70+yuZtxVpb+b7z3 b4tIS1ZmgFa/cB1jpa3ZLUNUCsxV5uWV4owfl7XKsCMiyNoBOlHdM/4v5+mnvNMT 8+GPdo5POKug+VtLGe2Jwpc8upXlu6pA70DIF4hvVa/uw9Y4TInUYxr6vMX3RxmR jOmj3kdzWriU1LDnzh4zLoLUjRebu4FtFE0MR70I5SKwbhL+c0tgRpxNd0dS8B82 kF37Pa8B0p1mKq+sFBoMkB9CrhWR1OtJJFL8BGCvu2sL2lcMSj4vbE1X+k/oCsN2 UhSRGllYFl9nEAmafvANw7cCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 349944007657875520741676033508357642673481 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 17:31:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-23 17:31:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'promo.iatn.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 971115876889423215204161024211963100320578406558725491740018770647776296136367549468373506610231134315022686576840134265828574312057515149600369649180645748447688459749990098577198828032366730162708439664127030948019361618363955622608753959002066068370134791571636474134035724072214980710577419810829401383054288146544632265869345814781196616377298798387929597949565383803419782326445301899928955713922594267934462075081260706642009465353269979577349942323817244609057572273694620381827652546681644883010683443522420087012368563995376262545513278110252560656626666799753047239822589498119267790132437748307726032182767819630390071760324954699040015077323711459974193308275566696128657901245672597152624102603016606976913695618921137972649063460652803032337954568483723873373024190348789854654029442520457150125007026492501679479545602629713902625713733817911433894869369215018938783147120529049187233829565267607595167768130272261612807906377609975691422546755263829566555777943479365456246461702502469747178961539106180885550004414870311811889263756648339411639634098884435349384347130407998235231876710856352293165613252651682572181578882454775839443751261608922306281724788449091867396506927702131707160561871048428315147756225463 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6c08c6f8c36ad78a7de5c23fa14791a5a125943f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo.iatn.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cca0c36cb0000040300483046022100ccda6f69aa80ebb5bddf0261e7603fc28ab269a520d51eac1ac6a864936bbfb3022100ca3e55ad142a84e0fae4e704cb8e666fa74cf256f647b782ea498f1562b9b660007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cca0c36bb000004030046304402203dce31d04390cd4692bdf6bfb85ac620fd8a8a24b65f44ef05cea2912b17608c022000ce2f51a6acd27fe0fda3a200f0c868735fe108f5a12106ff30892b2840f6c0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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