io.lv
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d9:6a:cf:c5:a5:04:ab:db:1e:25:51:c8:c0:2f:97:af:5c was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=io.lv
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d9:6a:cf:c5:a5:04:ab:db:1e:25:51:c8:c0:2f:97:af:5cSerial Number (int): 335320108398836088738612377605672445390684
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 0a:4c:c8:0b:64:b3:6b:db:d6:29:8b:a4:fe:33:f7:ff:ad:8e:91:b4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 0c:09:98:1a:52:ca:b3:93:4e:dc:1b:99:c5:d7:f3:54:12:37:12:cc
Fingerprint (sha256): f4:10:b1:ed:ee:19:e9:b0:18:28:4a:6f:56:d2:82:be:cf:0d:82:a9:d4:bb:40:9c:22:a3:1a:9a:82:06:af:13
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate io.lv
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for io.lv
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autoconfig.io.lv
autoconfig.lnk-industries.lv
autoconfig.lnk-properties.lv
autoconfig.lnk.lv
autoconfig.ltpiling.lv
io.lv
autoconfig.lnk-industries.lv
autoconfig.lnk-properties.lv
autoconfig.lnk.lv
autoconfig.ltpiling.lv
io.lv
Other certificates including the domain name io.lv
(limited to 100 certificates)
git.io.lv
io.lv
io.lv
online.ut.io.lv
apps.io.lv
sentry.io.lv
sentry.io.lv
sentry.io.lv
server-08.io.lv
git.io.lv
io.lv
server-10.io.lv
server-15.io.lv
git.io.lv
io.lv
webmail.io.lv
webmail.io.lv
registry.io.lv
irbe.s3.io.lv
git.io.lv
webmail.io.lv
*.io.lv
irbe.s3.io.lv
sentry.io.lv
webmail.io.lv
webmail.io.lv
webmail.io.lv
irbe.s3.io.lv
git.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
io.lv
sentry.io.lv
webmail.io.lv
server-15.io.lv
sentry.io.lv
server-15.io.lv
io.lv
apps.io.lv
webmail.io.lv
server-15.io.lv
online.ut.io.lv
apps.io.lv
irbe.s3.io.lv
webmail.io.lv
webmail.io.lv
sentry.io.lv
io.lv
io.lv
server-07.io.lv
git.io.lv
io.lv
io.lv
io.lv
online.ut.io.lv
apps.io.lv
sentry.io.lv
sentry.io.lv
sentry.io.lv
server-08.io.lv
git.io.lv
io.lv
server-10.io.lv
server-15.io.lv
git.io.lv
io.lv
webmail.io.lv
webmail.io.lv
registry.io.lv
irbe.s3.io.lv
git.io.lv
webmail.io.lv
*.io.lv
irbe.s3.io.lv
sentry.io.lv
webmail.io.lv
webmail.io.lv
webmail.io.lv
irbe.s3.io.lv
git.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
webmail.io.lv
io.lv
io.lv
sentry.io.lv
webmail.io.lv
server-15.io.lv
sentry.io.lv
server-15.io.lv
io.lv
apps.io.lv
webmail.io.lv
server-15.io.lv
online.ut.io.lv
apps.io.lv
irbe.s3.io.lv
webmail.io.lv
webmail.io.lv
sentry.io.lv
io.lv
io.lv
server-07.io.lv
git.io.lv
io.lv
Certificate
The complete raw certificate details for io.lv in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGvTCCBaWgAwIBAgISA9lqz8WlBKvbHiVRyMAvl69cMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMTQwNzM0MzZaFw0x OTAyMTIwNzM0MzZaMBAxDjAMBgNVBAMTBWlvLmx2MIICIjANBgkqhkiG9w0BAQEF AAOCAg8AMIICCgKCAgEAqLBKYObn3By+Vm2iHrHxh4uUwnETjt/p3caAldgAQjEF pypljbeFLdDDLzhKxOT7rGvwX0tttf7DLcCj0HHcdBe37X31CzeeYUeSJbsYpu/z PI24ROeqxLG3wzGj8aKjrgwzgjQRl3kfWuG7VIZKTR8cMr98JGW33spxiHHprPPQ C/1TODe463oc9mRoqUe2fEBfoGcf+2lNtGMAMOGxXcUPNbx4kn51a2LfCJsGxOHU 02e0W7Exv4eL89zvgphKWqeYQDCLXanEO8Dta//aeeNwimiJw6OQwzANjV9g2yF4 amQ/6QLgytiblkoTBYFIp1t73BAwmYJ6Zcf+KnNVjyvY5B5zQe7ExVXwkAeGYhyM 2sgEGEnOw3H48WV3uxOabcKP9qnpV4Wlks22hoS2Cg6m+qDDlUr7Br4JDKdpPxOc 63lFVCgJvy+YSbkHCJnjSpgeQ0pwH1jmv0HyckzNxbM9aO+jIjxBq4iqdQbW8ZAF rilXu+rOddS0pxsmlon82ZMKphl1wjjaxEImAzRTkUt/QN5aqXqf+PNJT3BrzNXA Gqr9AdLLT5uSwJMSYtFfwsu4hJbHos6WbSJTBLZitp7taTHsHG9lNogPfnybvJCU G10ISl4SyvmrREwr7kvE60uv+d7mFgWspSgdnw5gnPwRI0eY1rzLO92uT1tRku0C AwEAAaOCAtUwggLRMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUCkzIC2Sza9vWKYuk /jP3/62OkbQwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzCBiwYDVR0RBIGDMIGAghBhdXRvY29uZmlnLmlvLmx2ghxhdXRv Y29uZmlnLmxuay1pbmR1c3RyaWVzLmx2ghxhdXRvY29uZmlnLmxuay1wcm9wZXJ0 aWVzLmx2ghFhdXRvY29uZmlnLmxuay5sdoIWYXV0b2NvbmZpZy5sdHBpbGluZy5s doIFaW8ubHYwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEE AdZ5AgQCBIH0BIHxAO8AdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPT DAAAAWcRW6L6AAAEAwBHMEUCIQDYxPo4zzSXPiFZVH17nsncXukE7IHJ+uuFGzpv Mu3BQAIgFzrrjxyalEq4T3gFDTDFhZixvFvNROS/uAzBMeIL1bEAdQBj8tvN6DvM LM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWcRW6EIAAAEAwBGMEQCIHqXjZ9i NsqMH7DEum8CpYpuNq6YjH+lVtFiKIqU/ZuDAiAjASJ/i8s0jE8nrIIclw0BwovT J6SVWhi66ZiP0vStTDANBgkqhkiG9w0BAQsFAAOCAQEAlqPn/Fg8v5flWukrcKu6 GLPoBn5n6YqfJ8AzhqbLTCsCwH3CeucyNqKRcLBkUnbiOp09n68DxhabWHlqzH55 eGcBGPlcHGqxNRq6GXz5/28NP2agWR7XnwvPaZlA3zs85NRLjBtsMudWf8jzsmar jMotpU/7TH2xzWdiD+cZ1GuUAdIT5d3/l5pkp/Pt4tA+ix7bgYCSRATdSivXwj4X tO0fpIMukadSzQKWuCjUSrN/l+T2gaJhW0X1gEvD7Znfl5fZ9CSJcFysFwM18vNH DyVG9q0ZQfSnZKu0wGuJ9QFa79efit8sirBxJce5P/uq8Dv0I7j9XCTTMph7QN0f Sw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqLBKYObn3By+Vm2iHrHx h4uUwnETjt/p3caAldgAQjEFpypljbeFLdDDLzhKxOT7rGvwX0tttf7DLcCj0HHc dBe37X31CzeeYUeSJbsYpu/zPI24ROeqxLG3wzGj8aKjrgwzgjQRl3kfWuG7VIZK TR8cMr98JGW33spxiHHprPPQC/1TODe463oc9mRoqUe2fEBfoGcf+2lNtGMAMOGx XcUPNbx4kn51a2LfCJsGxOHU02e0W7Exv4eL89zvgphKWqeYQDCLXanEO8Dta//a eeNwimiJw6OQwzANjV9g2yF4amQ/6QLgytiblkoTBYFIp1t73BAwmYJ6Zcf+KnNV jyvY5B5zQe7ExVXwkAeGYhyM2sgEGEnOw3H48WV3uxOabcKP9qnpV4Wlks22hoS2 Cg6m+qDDlUr7Br4JDKdpPxOc63lFVCgJvy+YSbkHCJnjSpgeQ0pwH1jmv0HyckzN xbM9aO+jIjxBq4iqdQbW8ZAFrilXu+rOddS0pxsmlon82ZMKphl1wjjaxEImAzRT kUt/QN5aqXqf+PNJT3BrzNXAGqr9AdLLT5uSwJMSYtFfwsu4hJbHos6WbSJTBLZi tp7taTHsHG9lNogPfnybvJCUG10ISl4SyvmrREwr7kvE60uv+d7mFgWspSgdnw5g nPwRI0eY1rzLO92uT1tRku0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 335320108398836088738612377605672445390684 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-14 07:34:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-12 07:34:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'io.lv' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 688189588819078303731407772896762160832534304952491916589743360140112430328627955982932912715681125189669829649144289885026937309823676880989355938473269408978776804401597426894395170302167476485300479587106569658755518324930200259154944811486733401366088075111935869987993906905804815766158057671576951104161630812374858926116302298943799311504145697560215712527007830760773826135829544511492593146967652999584050859677418084733410635548223178640120753479898468555832609173619435584523205198913646088793218807294502717996001609983554198705101250664551768905004718059349738601100168632055948306951127537244174999717106036733282258786220221174478250890898288322662166394231743496625981270228663517263798196883082557853710714800492068773208005207555147208733341840917778574876043995152675624899634221356675780339751680478972966254200617915272053685508702434466732608327965421643943966618377205902272518753802495898314802564070904125554360094560958717235430004423719092901012196873224138731087855089940242150650240031744478285321120153615205211706263189021451555907221433243655930610664655018515264901090917754240963989780087558057048992482231184952836310152812880658631867493996262713900510014583647038983064251160121940815384327328493 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0a4cc80b64b36bdbd6298ba4fe33f7ffad8e91b4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.io.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.lnk-industries.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.lnk-properties.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.lnk.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.ltpiling.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'io.lv' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000167115ba2fa0000040300473045022100d8c4fa38cf34973e2159547d7b9ec9dc5ee904ec81c9faeb851b3a6f32edc1400220173aeb8f1c9a944ab84f78050d30c58598b1bc5bcd44e4bfb80cc131e20bd5b100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167115ba108000004030046304402207a978d9f6236ca8c1fb0c4ba6f02a58a6e36ae988c7fa556d162288a94fd9b8302202301227f8bcb348c4f27ac821c970d01c28bd327a4955a18bae9988fd2f4ad4c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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