io.lv
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d3:03:f9:b6:94:9c:35:cd:ea:5e:98:d9:83:3c:65:4a:4b was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=io.lv
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d3:03:f9:b6:94:9c:35:cd:ea:5e:98:d9:83:3c:65:4a:4bSerial Number (int): 333141721484676546274066148257498466175563
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 66:b0:84:8c:7f:cd:7d:45:db:36:f8:4d:2f:9e:73:04:cd:36:04:2e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d4:42:20:b0:ef:7a:b9:b6:48:f8:d7:c3:b6:9c:07:90:eb:80:7d:6c
Fingerprint (sha256): e2:82:f7:7c:f3:f8:0e:be:52:5c:96:af:0d:18:42:bb:e1:d7:fc:9f:f0:87:7f:48:9c:6a:34:8e:5e:2b:54:7f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate io.lv
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for io.lv
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autoconfig.io.lv
autoconfig.lnk-industries.lv
autoconfig.lnk-properties.lv
autoconfig.lnk.lv
autoconfig.ltpiling.lv
io.lv
autoconfig.lnk-industries.lv
autoconfig.lnk-properties.lv
autoconfig.lnk.lv
autoconfig.ltpiling.lv
io.lv
Other certificates including the domain name io.lv
(limited to 100 certificates)
git.io.lv
io.lv
io.lv
online.ut.io.lv
apps.io.lv
sentry.io.lv
sentry.io.lv
sentry.io.lv
server-08.io.lv
git.io.lv
io.lv
server-10.io.lv
server-15.io.lv
git.io.lv
io.lv
webmail.io.lv
webmail.io.lv
registry.io.lv
irbe.s3.io.lv
git.io.lv
webmail.io.lv
*.io.lv
irbe.s3.io.lv
sentry.io.lv
webmail.io.lv
webmail.io.lv
webmail.io.lv
irbe.s3.io.lv
git.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
io.lv
sentry.io.lv
webmail.io.lv
server-15.io.lv
sentry.io.lv
server-15.io.lv
io.lv
apps.io.lv
webmail.io.lv
server-15.io.lv
online.ut.io.lv
apps.io.lv
irbe.s3.io.lv
webmail.io.lv
webmail.io.lv
sentry.io.lv
io.lv
io.lv
server-07.io.lv
git.io.lv
io.lv
io.lv
io.lv
online.ut.io.lv
apps.io.lv
sentry.io.lv
sentry.io.lv
sentry.io.lv
server-08.io.lv
git.io.lv
io.lv
server-10.io.lv
server-15.io.lv
git.io.lv
io.lv
webmail.io.lv
webmail.io.lv
registry.io.lv
irbe.s3.io.lv
git.io.lv
webmail.io.lv
*.io.lv
irbe.s3.io.lv
sentry.io.lv
webmail.io.lv
webmail.io.lv
webmail.io.lv
irbe.s3.io.lv
git.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
io.lv
sentry.io.lv
webmail.io.lv
server-15.io.lv
sentry.io.lv
server-15.io.lv
io.lv
apps.io.lv
webmail.io.lv
server-15.io.lv
online.ut.io.lv
apps.io.lv
irbe.s3.io.lv
webmail.io.lv
webmail.io.lv
sentry.io.lv
io.lv
io.lv
server-07.io.lv
git.io.lv
io.lv
Certificate
The complete raw certificate details for io.lv in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGvjCCBaagAwIBAgISA9MD+baUnDXN6l6Y2YM8ZUpLMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MDcwMTAxMzhaFw0x OTEyMDYwMTAxMzhaMBAxDjAMBgNVBAMTBWlvLmx2MIICIjANBgkqhkiG9w0BAQEF AAOCAg8AMIICCgKCAgEA6Wm6irOZgDsKhDDSlVdmZ9pJVlbjZbBgyRGN/SAymGOJ iyHsQrER+rEa+y/rOpIj00qlkhDsIDCALyAuDglXsP+E4CwCAFKONs6dNxPQa8jx 8cF9gdQ+3gvqU7vnKVgK2HlL4sNTHiw/RApY9Uhf1dE36sP0LU05PNhtQEt83pxS hwOqEP/zknPjsH93ODq3zP99ME6/I3YA7Bm2vT2xa2QD6Rpq1M5tlTmNDEsYfHT4 4VokW6/vr7ihVYqHkaqdqq4rtTtQhVfoJhvi+ctt4QrXdldAEEFoeN29+owmEsmH q9YKdhpzy0du83pmZJXmIVqnYiNiJdgUktfP099nhRY5uAtC7TXEngOz+9YVHjNR AnQG+UUWBMrnKpobBkEDOkKLbnnNNMbdx67G8Aylil2KivAOBQowMrsqR62iDpn7 qAJKkfJ4R+tax+03FpAFUCZljAcKFl+8vTOm40dSWChg7T0WmnrjwbzXivyi2Gsn wDliAkNKJunGdm6mmAnnjJn680/FMYuR+CylMqEGGKdl69FH5qi55P79t4k1tPqk 682h+jKLbZqg16rnmpvbSRhefr1ZkUtTzHfectw5UjNjEso6OlkjV6GHj6pzS4SI XuYhh+CQAh9BJIV2LegOzFt3dyToIEw/4tNOmtWa/lQTYg3Tc8horxiX80QxVW8C AwEAAaOCAtYwggLSMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUZrCEjH/NfUXbNvhN L55zBM02BC4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzCBiwYDVR0RBIGDMIGAghBhdXRvY29uZmlnLmlvLmx2ghxhdXRv Y29uZmlnLmxuay1pbmR1c3RyaWVzLmx2ghxhdXRvY29uZmlnLmxuay1wcm9wZXJ0 aWVzLmx2ghFhdXRvY29uZmlnLmxuay5sdoIWYXV0b2NvbmZpZy5sdHBpbGluZy5s doIFaW8ubHYwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE AdZ5AgQCBIH1BIHyAPAAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb /gAAAW0JdJPnAAAEAwBHMEUCIQCPoFy+yLfDtoo/uiMjqDTDT+po2g7zMBzFsmYb n8gIJwIgMzXXA5OIE3xknlBdT1inAVzZsVvKjolHqyE6CrvIhhEAdgBj8tvN6DvM LM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAW0JdJXQAAAEAwBHMEUCIHGmqCvg 6abWTB21ab6cRtgS5RVCA9HgLKI6TSqs6tmIAiEAlyX6IBBT7Bd8S5FpXmDYEZuV 5UHmwJOLMq7/etTikZwwDQYJKoZIhvcNAQELBQADggEBACaxPUGVIuWsm1wytcrv cbo5iZlsyEoYwAs4lK9vbFDFCMi+B/VQ5MvDwkssdIU+H+jyydCR/RWwXFhvrtar +H3R/iDtzMIFOO9UdIgWVEo9zBVVpYJ2CkNCP9TW34q0G0hatgSIkAhJzjFNO7+x dalpQx2l04X5k7XJUqvuVk2Cn6+/FfkL+OcPsdILljdqyRA9SyICpFSTm/xTytoP 65a9mahlpmF1pPYK41dbK7VkIv9RbhGgfFa28oQIerEisvHA02fbeMO0g7srjAYb cj72DmVLvzTgkV86mb+m6EQDRlcef/gNwdtncNVpAaoWCg3/tEF0a8DstDWJ+tPF sAc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6Wm6irOZgDsKhDDSlVdm Z9pJVlbjZbBgyRGN/SAymGOJiyHsQrER+rEa+y/rOpIj00qlkhDsIDCALyAuDglX sP+E4CwCAFKONs6dNxPQa8jx8cF9gdQ+3gvqU7vnKVgK2HlL4sNTHiw/RApY9Uhf 1dE36sP0LU05PNhtQEt83pxShwOqEP/zknPjsH93ODq3zP99ME6/I3YA7Bm2vT2x a2QD6Rpq1M5tlTmNDEsYfHT44VokW6/vr7ihVYqHkaqdqq4rtTtQhVfoJhvi+ctt 4QrXdldAEEFoeN29+owmEsmHq9YKdhpzy0du83pmZJXmIVqnYiNiJdgUktfP099n hRY5uAtC7TXEngOz+9YVHjNRAnQG+UUWBMrnKpobBkEDOkKLbnnNNMbdx67G8Ayl il2KivAOBQowMrsqR62iDpn7qAJKkfJ4R+tax+03FpAFUCZljAcKFl+8vTOm40dS WChg7T0WmnrjwbzXivyi2GsnwDliAkNKJunGdm6mmAnnjJn680/FMYuR+CylMqEG GKdl69FH5qi55P79t4k1tPqk682h+jKLbZqg16rnmpvbSRhefr1ZkUtTzHfectw5 UjNjEso6OlkjV6GHj6pzS4SIXuYhh+CQAh9BJIV2LegOzFt3dyToIEw/4tNOmtWa /lQTYg3Tc8horxiX80QxVW8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 333141721484676546274066148257498466175563 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-07 01:01:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 01:01:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'io.lv' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 952241971668091380544580320182716710826916951167631846384622779959341490098784492909696731334181182354356943445965957180232617695884900282039896471406502008092915537796050916535337873236871330065787032807775859487572637767474316733157585482395189249274085188027475876641418452288174058334878785243037818847057413016376860416068191478453946414874958556186602125135541426526844294729608615131939877078125056598989836610424125078171441283023777825019488785649084337072527707687964130908177229508415496366766494328245912511874658233439619689311861567781133215320475059469187624198599556482724585230254820321861094489884016304775501995623757613417173844778098547326278980905437126228561909698202525696104149576366376760882621589674386084088444070907908512833435968888303829033827861831193679586070099831935538218709848564622261544737558070494222531343435755984370593854140605512402044154124802171138214767329610865453024575228144735611067090192186321809729644364143870762875173463356157209459971485137632082738083118701509521886077582677596362505892800612249058427745056481286792923503456390266587541046459854774762749928471807589678763391864120818832037278775669079306283291566441891501299135759671040586864091037610542153182446680626543 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 66b0848c7fcd7d45db36f84d2f9e7304cd36042e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.io.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.lnk-industries.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.lnk-properties.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.lnk.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.ltpiling.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'io.lv' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d097493e700000403004730450221008fa05cbec8b7c3b68a3fba2323a834c34fea68da0ef3301cc5b2661b9fc8082702203335d7039388137c649e505d4f58a7015cd9b15bca8e8947ab213a0abbc8861100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d097495d00000040300473045022071a6a82be0e9a6d64c1db569be9c46d812e5154203d1e02ca23a4d2aacead9880221009725fa201053ec177c4b91695e60d8119b95e541e6c0938b32aeff7ad4e2919c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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