io.lv
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e0:e2:f1:f1:f9:25:1d:a8:b0:d4:1a:21:c6:86:27:46:f3 was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=io.lv
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e0:e2:f1:f1:f9:25:1d:a8:b0:d4:1a:21:c6:86:27:46:f3Serial Number (int): 337861769763961267383338377285916902770419
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 21:ee:71:17:d1:d9:ab:d7:41:8f:fb:cd:1f:36:d1:2d:f1:23:45:7b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 61:89:69:1f:58:16:49:04:32:23:ff:d2:1c:97:80:d3:e1:ae:51:0f
Fingerprint (sha256): df:4b:25:f7:1e:d8:a1:97:24:aa:0f:77:0c:f5:67:22:be:83:7a:9f:fa:86:e2:8d:bd:51:34:e0:94:9e:96:81
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate io.lv
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for io.lv
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autoconfig.io.lv
autoconfig.lnk-industries.lv
autoconfig.lnk-properties.lv
autoconfig.lnk.lv
autoconfig.ltpiling.lv
io.lv
autoconfig.lnk-industries.lv
autoconfig.lnk-properties.lv
autoconfig.lnk.lv
autoconfig.ltpiling.lv
io.lv
Other certificates including the domain name io.lv
(limited to 100 certificates)
git.io.lv
io.lv
io.lv
online.ut.io.lv
apps.io.lv
sentry.io.lv
sentry.io.lv
sentry.io.lv
server-08.io.lv
git.io.lv
io.lv
server-10.io.lv
server-15.io.lv
git.io.lv
io.lv
webmail.io.lv
webmail.io.lv
registry.io.lv
irbe.s3.io.lv
git.io.lv
webmail.io.lv
*.io.lv
irbe.s3.io.lv
sentry.io.lv
webmail.io.lv
webmail.io.lv
webmail.io.lv
irbe.s3.io.lv
git.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
io.lv
sentry.io.lv
webmail.io.lv
server-15.io.lv
sentry.io.lv
server-15.io.lv
io.lv
apps.io.lv
webmail.io.lv
server-15.io.lv
online.ut.io.lv
apps.io.lv
irbe.s3.io.lv
webmail.io.lv
webmail.io.lv
sentry.io.lv
io.lv
io.lv
server-07.io.lv
git.io.lv
io.lv
io.lv
io.lv
online.ut.io.lv
apps.io.lv
sentry.io.lv
sentry.io.lv
sentry.io.lv
server-08.io.lv
git.io.lv
io.lv
server-10.io.lv
server-15.io.lv
git.io.lv
io.lv
webmail.io.lv
webmail.io.lv
registry.io.lv
irbe.s3.io.lv
git.io.lv
webmail.io.lv
*.io.lv
irbe.s3.io.lv
sentry.io.lv
webmail.io.lv
webmail.io.lv
webmail.io.lv
irbe.s3.io.lv
git.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
io.lv
sentry.io.lv
webmail.io.lv
server-15.io.lv
sentry.io.lv
server-15.io.lv
io.lv
apps.io.lv
webmail.io.lv
server-15.io.lv
online.ut.io.lv
apps.io.lv
irbe.s3.io.lv
webmail.io.lv
webmail.io.lv
sentry.io.lv
io.lv
io.lv
server-07.io.lv
git.io.lv
io.lv
Certificate
The complete raw certificate details for io.lv in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGvTCCBaWgAwIBAgISA+Di8fH5JR2osNQaIcaGJ0bzMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMDUwMjAxNDlaFw0y MDAyMDMwMjAxNDlaMBAxDjAMBgNVBAMTBWlvLmx2MIICIjANBgkqhkiG9w0BAQEF AAOCAg8AMIICCgKCAgEA1n4El+0/iEPrP1G8eBi1O8X9FYvDmUlZMlfF+ZN+yGj0 pCDVG9SkEJRxI33xlN8ytwcRluJ9vNJe7t5Uoqm10yyQ1dcLkmEtpY98k3Zk54F4 niNb0CQz6mQYJ0NyK5QsS+gtMbQmvlmZr3o7Rp/o1Rf8iVRyeYR3c8NviM6SJyQk rAmMBj0kL3f7m33pk2pR2kLbiCQCYgvRQ3O7csu7YPonGEt2J92rXfPQx+tzsNrW i9RHEfo6qDNXq/vLQswJYNIUPI0Cov1ZKSR02iLC6pu9bzV0ckEUvO994jAcUi4U tVeQWBkakixnR3y41lo5JNlHALVxJInFpSoHYnRToUIhAPtGiSws8MUQcueVTs/i eC5Misf999Gd2oJDh8z1PSr3y8WiMFQfsWWYmQIn2QqPM0qHFfkuCO/t9wHu0TMD PPsz6Hi3bySfl4TDWUqiw9hS3BmVenBKriC3TS9B8CbJI/JF4/AmJ1Laqz2rt+ik aEej3B2mEdrXhwx7vOizs86dddQDV8+5tcqFYKk6mrHwp9EXuoZx/ovpw9P0ekkJ 7phFH67Ow5G1tb8Xcc2PnszberKxbYlst4Ob2XRQFheal1VIFFN2CHg0Wq+bmvYi Ghtp7BGbHf4BV7LHzzIWSKJPIthsfkZcTpMQBvoHwdx3pEEH7x9oaEzU2Hmph30C AwEAAaOCAtUwggLRMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUIe5xF9HZq9dBj/vN HzbRLfEjRXswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzCBiwYDVR0RBIGDMIGAghBhdXRvY29uZmlnLmlvLmx2ghxhdXRv Y29uZmlnLmxuay1pbmR1c3RyaWVzLmx2ghxhdXRvY29uZmlnLmxuay1wcm9wZXJ0 aWVzLmx2ghFhdXRvY29uZmlnLmxuay5sdoIWYXV0b2NvbmZpZy5sdHBpbGluZy5s doIFaW8ubHYwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEE AdZ5AgQCBIH0BIHxAO8AdQCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQ XgAAAW45guKdAAAEAwBGMEQCIC4H0dMwliJCvVjTzmHFU1tT/FznFNvb6kaSuRYE 0LHnAiBiJG7mftkn3dNy+W1S6qYVu//M2uWjmFYZvgxGgfhdhAB2AF6nc/nfVsDn tTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbjmC5KAAAAQDAEcwRQIgDqeDUHZM 7RdmxjzzC7QeJkmtBm0FUkKnjYGYqIZ7yr8CIQDWsrEy3Zah9aLmfXUtYQcLWuLf DieKPCJhnmFV48lhpDANBgkqhkiG9w0BAQsFAAOCAQEAe9NANiJqFVZ23dzfjuTi k+9Rxn9kP2iRQSkP7nelM5iN+196y5a6t0ouaYi4E5pyPTh+/OiF4fyewPQQtszf //b8+2ZLKOc++jvxSx/7dZ4G/gUv9Whvvdr34srEJDukhX3AgfkR65EGG1A2vpAj ON7EG1KRCPbe1Gp6mZAle3pMbQIbJVvRXxvvWZTHaAEj/Z4Rlcrn7/i2PKAIgEfI m+VDpPH4JT2tKxfhtIFxztDuEeaD0RQsqzCHdvmqxTc5Hw8sWQZLZmln4FWB9hZ6 ikWJcpu7sDiqT0Zmas8KQdsVuE2HRoxWIgNzxzn6d295lnVsBF7MqPAn3G7MvYSv Cw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1n4El+0/iEPrP1G8eBi1 O8X9FYvDmUlZMlfF+ZN+yGj0pCDVG9SkEJRxI33xlN8ytwcRluJ9vNJe7t5Uoqm1 0yyQ1dcLkmEtpY98k3Zk54F4niNb0CQz6mQYJ0NyK5QsS+gtMbQmvlmZr3o7Rp/o 1Rf8iVRyeYR3c8NviM6SJyQkrAmMBj0kL3f7m33pk2pR2kLbiCQCYgvRQ3O7csu7 YPonGEt2J92rXfPQx+tzsNrWi9RHEfo6qDNXq/vLQswJYNIUPI0Cov1ZKSR02iLC 6pu9bzV0ckEUvO994jAcUi4UtVeQWBkakixnR3y41lo5JNlHALVxJInFpSoHYnRT oUIhAPtGiSws8MUQcueVTs/ieC5Misf999Gd2oJDh8z1PSr3y8WiMFQfsWWYmQIn 2QqPM0qHFfkuCO/t9wHu0TMDPPsz6Hi3bySfl4TDWUqiw9hS3BmVenBKriC3TS9B 8CbJI/JF4/AmJ1Laqz2rt+ikaEej3B2mEdrXhwx7vOizs86dddQDV8+5tcqFYKk6 mrHwp9EXuoZx/ovpw9P0ekkJ7phFH67Ow5G1tb8Xcc2PnszberKxbYlst4Ob2XRQ Fheal1VIFFN2CHg0Wq+bmvYiGhtp7BGbHf4BV7LHzzIWSKJPIthsfkZcTpMQBvoH wdx3pEEH7x9oaEzU2Hmph30CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 337861769763961267383338377285916902770419 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 02:01:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 02:01:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'io.lv' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 875052066316129033624975341494175474761996824816863789827071849302862017805960354182860807100301231444200440953147232615481805282686180832841729470993298972266142960590095454049708721253892982354583567738072638362323175461918032912606855553013799728194781728679920087673616468710906681248534629520097145115652340251435004354511584488767486192574816435277985417912151935350956430935421576261111310172994480474830027785164964368836140390994692076393313012848575531308327568514221207313577575169333537725093850753957468969787505824632901129039112788667943904788000379072949119402531496959144178169386619640004663853417582781989260317614052087274629650970058188996893327609565263743482677553002787325794052817063190563264805356699811024966124392065460931286125884001979111703434005952950381036742184374594661790019243013488593889938725485943026951368197948038496140001669974900390022349546347078914807679422645839030139270766100876802109143048819662593018624992647389509563755841820142883084539668666721327418633248478607228702061098436032326487011214014706500532867668258446029041504862559142037882779110080935100745765320701725567342492679974510525301764813850999470135095688176332200457790748618773107988380418775040261194257533601661 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 21ee7117d1d9abd7418ffbcd1f36d12df123457b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.io.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.lnk-industries.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.lnk-properties.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.lnk.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.ltpiling.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'io.lv' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e3982e29d000004030046304402202e07d1d330962242bd58d3ce61c5535b53fc5ce714dbdbea4692b91604d0b1e7022062246ee67ed927ddd372f96d52eaa615bbffccdae5a3985619be0c4681f85d840076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e3982e4a0000004030047304502200ea78350764ced1766c63cf30bb41e2649ad066d055242a78d8198a8867bcabf022100d6b2b132dd96a1f5a2e67d752d61070b5ae2df0e278a3c22619e6155e3c961a4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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