unizdrav.sk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:fe:6e:77:44:87:a2:4b:6a:4a:83:5c:a3:4a:d8:f5:2a:4f was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=unizdrav.sk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:fe:6e:77:44:87:a2:4b:6a:4a:83:5c:a3:4a:d8:f5:2a:4fSerial Number (int): 347915413346011498780788237968519753706063
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5c:e9:df:bf:15:28:74:8d:40:50:cd:89:8a:cd:06:13:af:a7:bb:91
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ad:f4:de:7b:8a:6b:ef:d6:84:c1:df:9b:2c:48:e1:77:cb:bb:5e:59
Fingerprint (sha256): de:f4:23:e4:d5:b5:a9:d3:1f:8d:68:a9:99:bf:dc:59:cf:ad:af:58:a7:23:6c:08:f6:46:a0:03:91:36:e9:a2
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate unizdrav.sk
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for unizdrav.sk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autoconfig.unizdrav.sk
cloud.unizdrav.sk
collabora.unizdrav.sk
email.unizdrav.sk
emailcz.unizdrav.sk
newsletter.unizdrav.sk
unizdrav.sk
www.unizdrav.sk
cloud.unizdrav.sk
collabora.unizdrav.sk
email.unizdrav.sk
emailcz.unizdrav.sk
newsletter.unizdrav.sk
unizdrav.sk
www.unizdrav.sk
Other certificates including the domain name unizdrav.sk
(limited to 100 certificates)
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
Certificate
The complete raw certificate details for unizdrav.sk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG4zCCBcugAwIBAgISA/5ud0SHoktqSoNco0rY9SpPMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMTQxNDUyMTdaFw0x OTA2MTIxNDUyMTdaMBYxFDASBgNVBAMTC3VuaXpkcmF2LnNrMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEAtPw6Gn1KP18lREgaFwrl7oCOnKeKFyl7azfJ T+Lzq3OpFLL3x5tiaHe3meT6jWt0ylZ56Tp6EsXvPvN3V2g84Z7g50+ZL1c8WTNg 2h+V5YAGkD8WHHKoF1EWj8q+F5CjpSYdlnlLVfYQOIFHhExC53NCfCiYA3g28IQP b2MYva7K25Wiw+7bqWxKuQ5VrDlqGL3LQtuCdfZLB0qsKbi4+crGMpwmD7R5E5Xj st9o3Mr+iqAyPVds3v9XNzrl5lg+RcCBMoR0bnfQeOONnqbokVzpQFp+nYoJUpRp x34SI5PB3IsYDIYB7yW1VpLnK1NFRCw16gtHr9YZnwDMozIEcUq6DL1U6OvdgU4I OhKUawCjpmzpLBeILzDLFQSN+QhGi/SzHHSw+Y2DBU7txVZ0b0Srj3+wTwODNodp barFhOPvKoJzHr3V2ZpVc0cppD/oc8BX/rq9aKdb2O0V4pCm3eZNuHBkDppGYjzu 3c1+Z5wS188XhvOUiN6/Dy+kLhldZzJ9mfyilUeLO3j3MNSQLer9s/beEmLzxbhI Y3oakXm9mB60nh7gMRWCVKR2urtnb2DvvsTOnntWWPw4cWL82iG3UWPk7WofqhDn lVJV9RiyO2Q1amHZhOBXWo3eJ00OlmrrOc/9x6txzlU6rBVQxrxe7n/YUiD4so18 DDPXfy0CAwEAAaOCAvUwggLxMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUXOnfvxUo dI1AUM2Jis0GE6+nu5EwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzCBqwYDVR0RBIGjMIGgghZhdXRvY29uZmlnLnVuaXpk cmF2LnNrghFjbG91ZC51bml6ZHJhdi5za4IVY29sbGFib3JhLnVuaXpkcmF2LnNr ghFlbWFpbC51bml6ZHJhdi5za4ITZW1haWxjei51bml6ZHJhdi5za4IWbmV3c2xl dHRlci51bml6ZHJhdi5za4ILdW5pemRyYXYuc2uCD3d3dy51bml6ZHJhdi5zazBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQE gfEA7wB2AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABaXzndl4A AAQDAEcwRQIhAJ0J365++iWkFvW1NopYcpbAckvGtmBzVr6EYDqB46ttAiADueN3 sgCletuImAOifiZDmEPrTNSBciR5Qks5fWZJQwB1AGPy283oO8wszwtyhCdXazOk jWF3j711pjixx2hUS9iNAAABaXzndqkAAAQDAEYwRAIgOHg5qZEJqzQS7j6NK7ar qYW3gQac29xCmqzaJY3dHyICIE2hjRxUlAk1wQUdOSTI9eHILVLaE7/xV15ZqK8R BwkKMA0GCSqGSIb3DQEBCwUAA4IBAQBdo9ELa+qomeiF395fRC5uGmp2LAFUsOk2 yonNMntma4BCGXyB5MxI5vgb8gZr2opG/ISeDJBKgejfIdqMgSRI+YSV4Yziry12 7WKv8vCWHqVCqz2G0E0lDxEO3eAe9K/qyfgkb/QCA5i5jKI6qe2RMt361cvePMl4 TMTvjOWjdTLzI4yAmJQR4HiA6TVKBs2Tn5ci5KHPDxtRMVsYqW/f5n+YN2PkqJO0 ubPsRwJ+QlltuKha4YsyWozcaCjiibSsq4zXUgKUX74a6Mc4hfQqaqsQKXvmVbrD gnISphw0UlB8qGN89wyTiyADzDMDta0KL7BVWrts11o/S6AWczPd -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtPw6Gn1KP18lREgaFwrl 7oCOnKeKFyl7azfJT+Lzq3OpFLL3x5tiaHe3meT6jWt0ylZ56Tp6EsXvPvN3V2g8 4Z7g50+ZL1c8WTNg2h+V5YAGkD8WHHKoF1EWj8q+F5CjpSYdlnlLVfYQOIFHhExC 53NCfCiYA3g28IQPb2MYva7K25Wiw+7bqWxKuQ5VrDlqGL3LQtuCdfZLB0qsKbi4 +crGMpwmD7R5E5Xjst9o3Mr+iqAyPVds3v9XNzrl5lg+RcCBMoR0bnfQeOONnqbo kVzpQFp+nYoJUpRpx34SI5PB3IsYDIYB7yW1VpLnK1NFRCw16gtHr9YZnwDMozIE cUq6DL1U6OvdgU4IOhKUawCjpmzpLBeILzDLFQSN+QhGi/SzHHSw+Y2DBU7txVZ0 b0Srj3+wTwODNodpbarFhOPvKoJzHr3V2ZpVc0cppD/oc8BX/rq9aKdb2O0V4pCm 3eZNuHBkDppGYjzu3c1+Z5wS188XhvOUiN6/Dy+kLhldZzJ9mfyilUeLO3j3MNSQ Ler9s/beEmLzxbhIY3oakXm9mB60nh7gMRWCVKR2urtnb2DvvsTOnntWWPw4cWL8 2iG3UWPk7WofqhDnlVJV9RiyO2Q1amHZhOBXWo3eJ00OlmrrOc/9x6txzlU6rBVQ xrxe7n/YUiD4so18DDPXfy0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 347915413346011498780788237968519753706063 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-14 14:52:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-12 14:52:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'unizdrav.sk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 738355448839238521731935658376576541563551352124111099071518870688410514629085450227846194811295191823409053120789156326873275949716518556054214362250326823531967995471119675459158676026201651411643948441385928623202941313229054635999921845829401744224415909926515510787880114786286889752981981335613519914951547905565672322725728471755285485770670380435318111510482922157666586483964467053071833266906729831739649892846416053877596729281642764150829955773303976430581055002019500541117625298101725560680683870277807223702049174545498928266165898128422814173905963850045447053846158607415578039799904111460967661385712205147934934559192279570576874097394715707798340767864554632958870282766169092740914545028179505647827190220919413700194006931209988125593314946334982071796559540623756743290095610566840190901543201875575265669338058944043083842378446125348433773866967964062361907921656691560424854131835351507767697771216886909385123170241190372495455267829554887818313583493030650970798103586767942176621171992110547790783366595068797556780507041361623267489965056439019254783844808530346088589834957792888555713069030946127285807011433891959983644273730116867916337183678920041693109762657786399755585398918145087120967166557997 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5ce9dfbf1528748d4050cd898acd0613afa7bb91 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (163 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.unizdrav.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.unizdrav.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collabora.unizdrav.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.unizdrav.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailcz.unizdrav.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.unizdrav.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unizdrav.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unizdrav.sk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001697ce7765e00000403004730450221009d09dfae7efa25a416f5b5368a587296c0724bc6b6607356be84603a81e3ab6d022003b9e377b200a57adb889803a27e26439843eb4cd481722479424b397d66494300750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001697ce776a900000403004630440220387839a99109ab3412ee3e8d2bb6aba985b781069cdbdc429aacda258ddd1f2202204da18d1c54940935c1051d3924c8f5e1c82d52da13bff1575e59a8af1107090a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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