iftm.fr
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:76:d1:d1:6e:8c:95:bf:e5:dd:37:6e:79:62:30:40:6b:89 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=iftm.fr
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:76:d1:d1:6e:8c:95:bf:e5:dd:37:6e:79:62:30:40:6b:89Serial Number (int): 301769073175317304235439490721404902468489
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9c:93:6a:b0:46:f3:b5:67:70:8c:4f:dd:4f:6c:22:cc:b5:c6:24:05
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ac:03:41:a3:98:c3:52:13:e3:35:e1:08:5f:81:4a:9a:e3:27:10:84
Fingerprint (sha256): 00:dd:94:ab:ab:68:c0:9a:7d:f4:0e:6f:6d:c8:22:c9:44:18:7f:f9:24:4e:1f:dd:40:0b:84:e2:2f:d3:b5:fc
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate iftm.fr
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for iftm.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
iftm.fr
www.iftm.fr
www.iftm.fr
Other certificates including the domain name iftm.fr
(limited to 100 certificates)
mappro.iftm.fr
*.rxnova.com
www.exhibis.net
*.rxnova.com
*.rxnova.com
iftm.fr
*.rxnova.com
*.rxnova.com
cert8.site.calypso-event.net
*.s01.rxweb-prd.com
*.rxnova.com
france.rxatlas.net
calypso-event.net
www-redirector3.rxweb-prd.com
*.rxnova.com
*.rxnova.com
*.rxnova.com
*.s01.rxweb-prd.com
*.rxnova.com
*.rxnova.com
*.rxnova.com
cert8.site.calypso-event.net
*.rxnova.com
*.rxnova.com
www-redirector3.rxweb-prd.com
*.rxnova.com
*.rxnova.com
calypso-event.net
*.rxnova.com
calypso-event.net
cert8.site.calypso-event.net
*.rxnova.com
calypso-event.net
*.rxnova.com
*.rxnova.com
*.rxnova.com
topresa.iftm.fr
tac.iftm.fr
*.rxnova.com
*.rxnova.com
cert8.site.calypso-event.net
*.rxnova.com
*.rxnova.com
*.rxnova.com
*.s01.rxweb-prd.com
calypso-event.net
*.rxnova.com
*.rxnova.com
*.rxnova.com
*.rxnova.com
*.rxnova.com
*.rxnova.com
calypso-event.net
*.rxnova.com
www-redirector3.rxweb-prd.com
calypso-event.net
*.rxnova.com
*.rxnova.com
*.rxnova.com
*.s01.rxweb-prd.com
*.rxnova.com
mappro.iftm.fr
*.rxnova.com
*.rxnova.com
www.exhibis.net
*.rxnova.com
iftm.fr
cert10.site.calypso-event.net
mappro.iftm.fr
*.rxnova.com
*.rxnova.com
*.rxnova.com
calypso-event.net
calypso-event.net
*.rxnova.com
topresa.iftm.fr
*.rxnova.com
cert10.site.calypso-event.net
*.rxnova.com
*.rxnova.com
*.rxnova.com
*.rxnova.com
calypso-event.net
cert8.site.calypso-event.net
*.rxnova.com
*.rxnova.com
france.rxatlas.net
*.rxnova.com
www.exhibis.net
*.rxnova.com
calypso-event.net
*.rxnova.com
*.rxnova.com
cert10.site.calypso-event.net
*.s01.rxweb-prd.com
salon.iftm.fr
*.rxnova.com
cert10.site.calypso-event.net
*.s01.rxweb-prd.com
*.rxnova.com
*.rxnova.com
www.exhibis.net
*.rxnova.com
*.rxnova.com
iftm.fr
*.rxnova.com
*.rxnova.com
cert8.site.calypso-event.net
*.s01.rxweb-prd.com
*.rxnova.com
france.rxatlas.net
calypso-event.net
www-redirector3.rxweb-prd.com
*.rxnova.com
*.rxnova.com
*.rxnova.com
*.s01.rxweb-prd.com
*.rxnova.com
*.rxnova.com
*.rxnova.com
cert8.site.calypso-event.net
*.rxnova.com
*.rxnova.com
www-redirector3.rxweb-prd.com
*.rxnova.com
*.rxnova.com
calypso-event.net
*.rxnova.com
calypso-event.net
cert8.site.calypso-event.net
*.rxnova.com
calypso-event.net
*.rxnova.com
*.rxnova.com
*.rxnova.com
topresa.iftm.fr
tac.iftm.fr
*.rxnova.com
*.rxnova.com
cert8.site.calypso-event.net
*.rxnova.com
*.rxnova.com
*.rxnova.com
*.s01.rxweb-prd.com
calypso-event.net
*.rxnova.com
*.rxnova.com
*.rxnova.com
*.rxnova.com
*.rxnova.com
*.rxnova.com
calypso-event.net
*.rxnova.com
www-redirector3.rxweb-prd.com
calypso-event.net
*.rxnova.com
*.rxnova.com
*.rxnova.com
*.s01.rxweb-prd.com
*.rxnova.com
mappro.iftm.fr
*.rxnova.com
*.rxnova.com
www.exhibis.net
*.rxnova.com
iftm.fr
cert10.site.calypso-event.net
mappro.iftm.fr
*.rxnova.com
*.rxnova.com
*.rxnova.com
calypso-event.net
calypso-event.net
*.rxnova.com
topresa.iftm.fr
*.rxnova.com
cert10.site.calypso-event.net
*.rxnova.com
*.rxnova.com
*.rxnova.com
*.rxnova.com
calypso-event.net
cert8.site.calypso-event.net
*.rxnova.com
*.rxnova.com
france.rxatlas.net
*.rxnova.com
www.exhibis.net
*.rxnova.com
calypso-event.net
*.rxnova.com
*.rxnova.com
cert10.site.calypso-event.net
*.s01.rxweb-prd.com
salon.iftm.fr
*.rxnova.com
cert10.site.calypso-event.net
*.s01.rxweb-prd.com
*.rxnova.com
Certificate
The complete raw certificate details for iftm.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISA3bR0W6Mlb/l3TdueWIwQGuJMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEwMTAyMDE5NDRaFw0x ODAxMDgyMDE5NDRaMBIxEDAOBgNVBAMTB2lmdG0uZnIwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCgtQCqAPFYtK3YrIsBDNyynyn7umsvMeWjS2vK7nor mHPZh0PWgTgzjbsFnwZoQ+4HVx6AE8KqUsS8QiWLXtRTl7pgZAvwQdZ1JHbIH0LA RkIvvIlOmY6fJSwocTcNIQSjaiGvATA2pkMOnpPzmAkZ9iE0Wnxzx/HHEfPbukli FKdzsqLNgUImnmDXdhxbtL9wSM1mfyRm6XWYR+KedXGChy/T+IrQYwrT1yDMQq0L oLWei5BJQsJM8cN3c8IenwplMQPVvmsyg6ga1vuPcLgga+t/UP96XzKS90Bv1Uq/ 0UxIOZlzdylChbu1wzaTuZHYQXHlW1o15Fs0mOXtb+efAgMBAAGjggIUMIICEDAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFJyTarBG87VncIxP3U9sIsy1xiQFMB8GA1Ud IwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggr BgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggr BgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHwYD VR0RBBgwFoIHaWZ0bS5mcoILd3d3LmlmdG0uZnIwgf4GA1UdIASB9jCB8zAIBgZn gQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmlj YXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBh bmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGlj eSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzAN BgkqhkiG9w0BAQsFAAOCAQEAAAl8IC2ucdfW3QYBITYH0XdNWKvl31YSqIDpTeT7 exOoIU9bwCqQ6sUESeG0mWkpIjbgMRC+GpRdN49ZT5GEaBNx4UnckfuoloFahRoq ChBE2EqsbfeGIsS8nRmVhXnDR55RSwyPLHqCh4FP4aX3X0vcmqapeESAOKDd/cK1 OOFPWXPQvHW4gW9h+g9oEtlEPDOllwJzUp+DJ0wPW/MUl4IuIoKEVMFQ42WK9vsz YgqSixZ6pcfetKbt/LXMB+VAHEDFDG1f+vlO2vzwv3g9xeYoyvTaeTIKjHLp47VF 7rPkk3+mUEIiQsvGv7zM1Qr7tGz7EUVn2icQBkFe0mtGvQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLUAqgDxWLSt2KyLAQzc sp8p+7prLzHlo0tryu56K5hz2YdD1oE4M427BZ8GaEPuB1cegBPCqlLEvEIli17U U5e6YGQL8EHWdSR2yB9CwEZCL7yJTpmOnyUsKHE3DSEEo2ohrwEwNqZDDp6T85gJ GfYhNFp8c8fxxxHz27pJYhSnc7KizYFCJp5g13YcW7S/cEjNZn8kZul1mEfinnVx gocv0/iK0GMK09cgzEKtC6C1nouQSULCTPHDd3PCHp8KZTED1b5rMoOoGtb7j3C4 IGvrf1D/el8ykvdAb9VKv9FMSDmZc3cpQoW7tcM2k7mR2EFx5VtaNeRbNJjl7W/n nwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 301769073175317304235439490721404902468489 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-10 20:19:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-08 20:19:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iftm.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20287384500301308104894743771462181686213762359310455166552080004791193764422026991547817007403399241965642979628228893611420146051757217019944979671309674208052473364141523162330097144143408229235885251641911341737556231054891090937488626401393052913286695334453121974978026510527050700570529299940688160819798736957086807629566753631053287739760738937312020602801368514918488015556444921843962467062173036166152887110927278982515618268732447915945391289069704402256274121024883434193150590564764612801304766014489299855282008074604762248038822151423683334755467281498112535792031481357819614578514738157404363417503 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9c936ab046f3b567708c4fdd4f6c22ccb5c62405 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iftm.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iftm.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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