column.prime-strategy.co.jp

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:52:58:92:73:50:6c:8a:2e:7a:67:3c:c1:6c:e9:47:d9:ea was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=column.prime-strategy.co.jp

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:58:92:73:50:6c:8a:2e:7a:67:3c:c1:6c:e9:47:d9:ea
Serial Number (int): 289357744360617061478911574660791784692202
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:d2:df:a2:c6:5a:35:b1:07:b0:e6:f6:bf:0d:dd:f0:3b:f7:e4:58
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 56:3a:4d:ec:7b:76:2d:da:c0:f4:3a:6a:aa:8e:8b:59:53:e5:54:2e
Fingerprint (sha256): 0a:e4:60:af:01:67:90:6a:25:a1:84:1d:5d:d6:4b:7e:8e:95:28:df:78:f3:ca:6c:3a:ae:fa:03:5f:ba:43:86

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate column.prime-strategy.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for column.prime-strategy.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

column.prime-strategy.co.jp

Other certificates including the domain name prime-strategy.co.jp

(limited to 100 certificates)
ssl.prime-strategy.co.jp
repo.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
repo-test.prime-strategy.co.jp
column.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
marketplace.prime-strategy.co.jp
column.prime-strategy.co.jp
repo.prime-strategy.co.jp
alue.prime-strategy.co.jp
*.prime-strategy.co.jp
wpbk2.prime-strategy.co.jp
kusanagi80.prime-strategy.co.jp
wpbk2.prime-strategy.co.jp
onlineshop.prime-strategy.co.jp
yachiyo.prime-strategy.co.jp
column.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
blog.prime-strategy.co.jp
wpbk2.prime-strategy.co.jp
yachiyo.prime-strategy.co.jp
recruit.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
www.prime-strategy.co.jp
recruit.prime-strategy.co.jp
betabizrepo.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
*.prime-strategy.co.jp
mail2.prime-strategy.co.jp
concrete5.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
kusanagi-hosting.prime-strategy.co.jp
cydesignation.vip-demo.prime-strategy.co.jp
www.prime-strategy.co.jp
column.prime-strategy.co.jp
recruit.prime-strategy.co.jp
column.prime-strategy.co.jp
alue.prime-strategy.co.jp
wpbk2.prime-strategy.co.jp
alue.prime-strategy.co.jp
recruit.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
alue.prime-strategy.co.jp
pacific.prime-strategy.co.jp
blog.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
ssl.prime-strategy.co.jp
yachiyo.prime-strategy.co.jp
recruit.prime-strategy.co.jp
column.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
kusanagi-hosting.prime-strategy.co.jp
column.prime-strategy.co.jp
recruit.prime-strategy.co.jp
marketplace.prime-strategy.co.jp
recruit.prime-strategy.co.jp
advrepo.prime-strategy.co.jp
www.prime-strategy.co.jp
repo.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
marketplace.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
alue.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
advrepo.prime-strategy.co.jp
column.prime-strategy.co.jp
pacific.prime-strategy.co.jp
column.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
sociableweaver.prime-strategy.co.jp
www.prime-strategy.co.jp
ssl.prime-strategy.co.jp
column.prime-strategy.co.jp
i7-243.prime-strategy.co.jp
kusanagi80.prime-strategy.co.jp
gcpdemo.prime-strategy.co.jp
wpbk2.prime-strategy.co.jp
mail2.prime-strategy.co.jp
marketplace.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
www.prime-strategy.co.jp
alue.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
yachiyo.prime-strategy.co.jp
column.prime-strategy.co.jp
wpbk2.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
i7-246.prime-strategy.co.jp
mail2.prime-strategy.co.jp
alue.prime-strategy.co.jp
develop.prime-strategy.co.jp
blog.prime-strategy.co.jp
blog.prime-strategy.co.jp
recruit.prime-strategy.co.jp
column.prime-strategy.co.jp
yachiyo.prime-strategy.co.jp
alue.prime-strategy.co.jp
hrd.mynavi.jp.prime-strategy.co.jp

Certificate

The complete raw certificate details for column.prime-strategy.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISA1JYknNQbIouemc8wWzpR9nqMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEyMDkxNzA3MTZaFw0x
ODAzMDkxNzA3MTZaMCYxJDAiBgNVBAMTG2NvbHVtbi5wcmltZS1zdHJhdGVneS5j
by5qcDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPTYg2Co9KsvAgjv
K226J6UvUCE3/TgjAK0knpCUAp0brmGhSXwIjsO9QKss/P+ULKKBG/mcbP/xfsKt
sJYajdw8NuluxAeB7dV6Lkusdx33nqGY6GgRhsTH76T2RDcjyPx1/w+K0kY/fV/e
V5AVOuVfvI7AEl1TyVAzZ89h+aNo2OUY7ZJQ7sg1IIUOdFj+56H84JCYlvV0uVxl
a9knbTVn8R7Hm2XzEqUtET34Ns/SkKR0Y/7UpO1UymmVlR4Mfim9R+wacrPVny9m
BRi19kt2ZofhoO6/dvvqCJPKxWVbWclSvww2c6rD7STZw1ia5qJ28Ks7Ls1614D6
mtWNBZ0CAwEAAaOCAhswggIXMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJdLfosZa
NbEHsOb2vw3d8Dv35FgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAmBgNVHREEHzAdghtjb2x1bW4ucHJpbWUtc3RyYXRl
Z3kuY28uanAwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEB
MIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYI
KwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGll
ZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNl
IHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xl
dHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAbGqz
1LVDMtkfiWFLxvYKs2shOwaR0hXKiD/Hhj2AgW5NRidlqNaaVJcxCFolAX/wFkd5
VFdQmAt1myFyIGV5RVjMMxXAg/bZSvDujIpuFBRrPfEHiDt0OGzakROn/GTHrG0i
G3Tdp09cONUHUtYcsXxgA5anmZLqqPQDdmBnivo0s6BnyQykI/B2ekRRRTJIF20Q
KN6XD8vvRM1olz29GPW7HyFBKh4C98wL9BpiC3CYCDO8UrP425UeLMQaI9JTp4Qs
0n2tZPvwFLuv9DkURWLVPuO1yeVIQilSm0VLJiNWAKNBmgPWyzXAQsgLPdyIfqnk
/+HXfTlTAWJIVKuvmw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NiDYKj0qy8CCO8rbbon
pS9QITf9OCMArSSekJQCnRuuYaFJfAiOw71Aqyz8/5QsooEb+Zxs//F+wq2wlhqN
3Dw26W7EB4Ht1XouS6x3HfeeoZjoaBGGxMfvpPZENyPI/HX/D4rSRj99X95XkBU6
5V+8jsASXVPJUDNnz2H5o2jY5RjtklDuyDUghQ50WP7nofzgkJiW9XS5XGVr2Sdt
NWfxHsebZfMSpS0RPfg2z9KQpHRj/tSk7VTKaZWVHgx+Kb1H7Bpys9WfL2YFGLX2
S3Zmh+Gg7r92++oIk8rFZVtZyVK/DDZzqsPtJNnDWJrmonbwqzsuzXrXgPqa1Y0F
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289357744360617061478911574660791784692202
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-09 17:07:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-09 17:07:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'column.prime-strategy.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30908913046761150697018069341054750149031964666763661679203767922142288030495434359699232115495089528666434889162349944661595610581097134446445808468635433499078326536129583781290156431592903881457780345214589339268119843312869436717829962306720293961426107055839631016927404364964109059907164269859819324985960292773343785971906457334186207209180572416613551052371803065569735778252790785737590042312490932906125990217419823072952234686058565894221405875676857786260824651052554789821179006234193442990233086092552826582434359109656920892696274781126135840720406894948920778491662956479276802785374890213827173746077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25d2dfa2c65a35b107b0e6f6bf0dddf03bf7e458
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'column.prime-strategy.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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