soneva.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:8e:df:9f:92:3d:26:99:e7:c4:44:0f:6c:a8:7b:73:06:37 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=soneva.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:8e:df:9f:92:3d:26:99:e7:c4:44:0f:6c:a8:7b:73:06:37Serial Number (int): 309954200282391211565946120365973303395895
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 25:0a:20:13:00:82:b4:a7:ce:7a:0f:b8:de:9a:b2:05:09:18:62:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 77:5f:07:24:ce:56:13:0a:b2:cc:31:ab:b1:be:33:f9:ee:c9:6f:a4
Fingerprint (sha256): 10:5d:2b:6b:82:38:b9:3b:64:73:67:0d:a5:6b:ec:30:28:91:6d:49:85:6a:e9:60:90:83:97:37:30:e6:d5:30
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate soneva.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for soneva.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.soneva.live.journey.travel
soneva.com
soneva.live.journey.travel
www.soneva.com
www.soneva.live.journey.travel
soneva.com
soneva.live.journey.travel
www.soneva.com
www.soneva.live.journey.travel
Other certificates including the domain name soneva.com
(limited to 100 certificates)
privatereserve.soneva.com
imperva.com
festivalofcolour.soneva.com
soneva.com
imperva.com
gifts.soneva.com
festivalofcolour.soneva.com
soneva.com
imperva.com
imperva.com
imperva.com
soneva.com
festivalofcolour.soneva.com
imperva.com
discovery.soneva.com
imperva.com
imperva.com
discovery.soneva.com
imperva.com
imperva.com
imperva.com
imperva.com
foundation.soneva.com
imperva.com
imperva.com
imperva.com
festivalofcolour.soneva.com
imperva.com
imperva.com
soneva.com
imperva.com
villa15.soneva.com
imperva.com
changemakers.soneva.com
imperva.com
gifts.soneva.com
imperva.com
soneva.com
soneva.com
imperva.com
gifts.soneva.com
imperva.com
imperva.com
imperva.com
imperva.com
sni.cloudflaressl.com
changemakers.soneva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
festivalofcolour.soneva.com
imperva.com
festivalofcolour.soneva.com
imperva.com
changemakers.soneva.com
imperva.com
soneva.com
discoverhub.soneva.com
imperva.com
gifts.soneva.com
imperva.com
sni.cloudflaressl.com
festivalofcolour.soneva.com
imperva.com
imperva.com
soneva.com
imperva.com
festivalofcolour.soneva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
soneva.live.journey.travel
imperva.com
soneva.com
reservations.soneva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
reservations.soneva.com
soneva.com
festivalofcolour.soneva.com
discoverhub.soneva.com
soneva.com
sni.cloudflaressl.com
imperva.com
imperva.com
festivalofcolour.soneva.com
villa14.soneva.com
imperva.com
imperva.com
imperva.com
soneva.com
imperva.com
festivalofcolour.soneva.com
soneva.com
imperva.com
gifts.soneva.com
festivalofcolour.soneva.com
soneva.com
imperva.com
imperva.com
imperva.com
soneva.com
festivalofcolour.soneva.com
imperva.com
discovery.soneva.com
imperva.com
imperva.com
discovery.soneva.com
imperva.com
imperva.com
imperva.com
imperva.com
foundation.soneva.com
imperva.com
imperva.com
imperva.com
festivalofcolour.soneva.com
imperva.com
imperva.com
soneva.com
imperva.com
villa15.soneva.com
imperva.com
changemakers.soneva.com
imperva.com
gifts.soneva.com
imperva.com
soneva.com
soneva.com
imperva.com
gifts.soneva.com
imperva.com
imperva.com
imperva.com
imperva.com
sni.cloudflaressl.com
changemakers.soneva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
festivalofcolour.soneva.com
imperva.com
festivalofcolour.soneva.com
imperva.com
changemakers.soneva.com
imperva.com
soneva.com
discoverhub.soneva.com
imperva.com
gifts.soneva.com
imperva.com
sni.cloudflaressl.com
festivalofcolour.soneva.com
imperva.com
imperva.com
soneva.com
imperva.com
festivalofcolour.soneva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
soneva.live.journey.travel
imperva.com
soneva.com
reservations.soneva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
reservations.soneva.com
soneva.com
festivalofcolour.soneva.com
discoverhub.soneva.com
soneva.com
sni.cloudflaressl.com
imperva.com
imperva.com
festivalofcolour.soneva.com
villa14.soneva.com
imperva.com
imperva.com
imperva.com
soneva.com
Certificate
The complete raw certificate details for soneva.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgISA47fn5I9JpnnxEQPbKh7cwY3MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAxMjYyMzIxNDFaFw0x ODA0MjYyMzIxNDFaMBUxEzARBgNVBAMTCnNvbmV2YS5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDaizDBEp0+rNcgNUxeFrQMc4jk+oKaHETpwpU7 OnJuKx5gKmCgfM6v6AcillApZBqyPyPLGYvmpfXuJ9gtIYmaEWK8FdBnhwrZkQyg fKhU7mduUasuuDCj7+MSPx7flI22kPXU5ui50r0xHriZ4P3jR70No9UGSIyvlMvI BdtdqeeJpMtvbwfx09SCAnWC4H5k+gazUkUskUHIh3VndkHRaJAifumiDAO+6OrC Nv5Z4KA6v4lqgo/PBTgr6zZrXGRKqevM7xWC3EmWFFDO7QcZZaYJSs9Dr4JhE5co 44K+FulUrPZb1YOUVjNj4cuqLobI6lx8dNFSuf7LRFQ4bAgLAgMBAAGjggJ4MIIC dDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCUKIBMAgrSnznoPuN6asgUJGGI0MB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w gYIGA1UdEQR7MHmCH21haWwuc29uZXZhLmxpdmUuam91cm5leS50cmF2ZWyCCnNv bmV2YS5jb22CGnNvbmV2YS5saXZlLmpvdXJuZXkudHJhdmVsgg53d3cuc29uZXZh LmNvbYIed3d3LnNvbmV2YS5saXZlLmpvdXJuZXkudHJhdmVsMIH+BgNVHSAEgfYw gfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0 cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBD ZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBh cnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0 ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3Np dG9yeS8wDQYJKoZIhvcNAQELBQADggEBAAJuY7/K3ZfHOeLV3xa/NaDXHIy2KKT7 zJRpn5DQ83BGgXFtTpWmyi19OAoksKkSpCYlGV7FLC4+XpfEoHGcqeQAr/yoAzkF eV8XSIs9HVs1yKzR2xO+10ukqyYm4Ca/j4bRGJqViy6BdthIYYU8jytUu8NSjH4K mbDGXIHLCMW8S2Q7fq6bO9XTuIW4nA7sXA9D+Kr40RpglI6adEvNlRs/eYrBMrx7 NeeR0WQD/8Aoh+C4nMFNS7qs9X5FbTiIR3hHPFWn6BLMew5EdgToyD/IsB5QpjR0 n2mgkYrLG9p0nF3tO7WrTWs8VYv44NZSHxDwIzHpdNUaDd1t4ieNAII= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oswwRKdPqzXIDVMXha0 DHOI5PqCmhxE6cKVOzpybiseYCpgoHzOr+gHIpZQKWQasj8jyxmL5qX17ifYLSGJ mhFivBXQZ4cK2ZEMoHyoVO5nblGrLrgwo+/jEj8e35SNtpD11OboudK9MR64meD9 40e9DaPVBkiMr5TLyAXbXanniaTLb28H8dPUggJ1guB+ZPoGs1JFLJFById1Z3ZB 0WiQIn7pogwDvujqwjb+WeCgOr+JaoKPzwU4K+s2a1xkSqnrzO8VgtxJlhRQzu0H GWWmCUrPQ6+CYROXKOOCvhbpVKz2W9WDlFYzY+HLqi6GyOpcfHTRUrn+y0RUOGwI CwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 309954200282391211565946120365973303395895 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-26 23:21:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-26 23:21:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'soneva.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27588587849700591382956602803482957574144594462921455954279573393741720138043408287742693240947137964721087688808134816421701260319592279998747755103114362351437452581269609004817424335707393269939878975367276192792927773606707957940473261002267282711440557355511067161181626420677906292402068360912163442634729572508401364169904930460082916396663621286511411541587431479822394014800386989507477585511153385306419476015784473705185948909404381241294225436203613568061750373602658631636732407385396535290037204051612273948176170635020057573898285722905570629797029567420739455447791110924640580433854113578410838853643 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 250a20130082b4a7ce7a0fb8de9ab20509186234 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.soneva.live.journey.travel' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soneva.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soneva.live.journey.travel' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soneva.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soneva.live.journey.travel' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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