dev0.aegir.koumbit.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:8d:f8:b8:cc:b3:ba:0d:9a:67:bc:19:d0:e6:d3:8b:aa:86 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dev0.aegir.koumbit.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:8d:f8:b8:cc:b3:ba:0d:9a:67:bc:19:d0:e6:d3:8b:aa:86Serial Number (int): 396759565540320920371609726603490583358086
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ba:d5:c3:be:12:16:0f:3d:67:33:58:62:b3:3a:91:5a:c4:83:89:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 7d:01:4a:bc:37:c0:43:61:54:fd:b1:22:65:8e:04:02:8a:54:73:c9
Fingerprint (sha256): 11:3c:9d:b3:e0:05:77:eb:99:8e:fc:cb:f5:c7:0c:65:ea:a8:92:cb:50:bf:02:4f:fa:8d:77:71:db:8f:09:f6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate dev0.aegir.koumbit.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dev0.aegir.koumbit.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dev.koumbit.net
dev0.aegir.koumbit.net
dev0.aegir.koumbit.net
Other certificates including the domain name koumbit.net
(limited to 100 certificates)
ledger.koumbit.net
wiki.koumbit.net
www.etcgroup.org
collectif.koumbit.net
status.koumbit.net
www.munilamacaza.ca
stats.koumbit.net
genquebec.com
exeko.org
nagios0.koumbit.net
studioxx.koumbit.net
nue.koumbit.net
parcolympique.koumbit.net
aegir3.koumbit.net
jenkins.koumbit.net
www.compop.net
chat.koumbit.net
svn.koumbit.net
www.chute-saint-philippe.ca
nagios1.koumbit.net
jenkins.koumbit.net
ababord0.koumbit.net
test-ml8.aegir3.koumbit.net
odoo1.koumbit.net
jenkins.koumbit.net
mail.studioxx.net
ckut.ca
collectif.koumbit.net
www.munilamacaza.ca
www.cdchl.org
svn.koumbit.net
laspq.org
patwhite.com
www.cdchl.org
dev0.aegir.koumbit.net
www.saint-aime-du-lac-des-iles.ca
imap.koumbit.net
www.steannedulac.ca
staging-alternc.koumbit.net
csnconstruction.koumbit.net
studioxx.koumbit.net
www.saint-aime-du-lac-des-iles.ca
ababord0.koumbit.net
lb.koumbit.net
crm.psc-gpc.ca
www.koumbit.org
lettresquebecoises.qc.ca
webmail.koumbit.net
collabora0.koumbit.net
popotes.org
chat.koumbit.net
www.lamereveille.ca
parcolympique.koumbit.net
ecpar.org
piwik.koumbit.net
revuelespritlibre.org
rappels.ca
admin.alternc1.koumbit.net
courriel.alternc1.koumbit.net
revuelespritlibre.org
www.riviere-rouge.ca
redmine.koumbit.net
www.compop.net
www.assep.koumbit.org
webmail.koumbit.net
aegir3.koumbit.net
www.compop.net
nue.koumbit.net
odoo0.koumbit.net
www.riviere-rouge.ca
status.koumbit.net
revuelespritlibre.org
nuage.koumbit.net
admin.alternc1.koumbit.net
ledger.koumbit.net
www.lacdesecorces.ca
arthives.org
wikifarm.koumbit.net
mta-sts.koumbit.net
3e-imperial.org
d8.patwhite.com
vrec.koumbit.net
ecpar.org
stats.koumbit.net
jenkins.koumbit.net
boxes.koumbit.net
laspq.org
3e-imperial.org
claqo.wpdev0.koumbit.net
webmail.koumbit.net
www.saint-aime-du-lac-des-iles.ca
dev1.aegir.koumbit.net
nue.koumbit.net
fsm.wsf2016.org
www.chute-saint-philippe.ca
csnconstruction.koumbit.net
dev0.aegir.koumbit.net
ceres.koumbit.net
fsm.wsf2016.org
arthives.org
wiki.koumbit.net
www.etcgroup.org
collectif.koumbit.net
status.koumbit.net
www.munilamacaza.ca
stats.koumbit.net
genquebec.com
exeko.org
nagios0.koumbit.net
studioxx.koumbit.net
nue.koumbit.net
parcolympique.koumbit.net
aegir3.koumbit.net
jenkins.koumbit.net
www.compop.net
chat.koumbit.net
svn.koumbit.net
www.chute-saint-philippe.ca
nagios1.koumbit.net
jenkins.koumbit.net
ababord0.koumbit.net
test-ml8.aegir3.koumbit.net
odoo1.koumbit.net
jenkins.koumbit.net
mail.studioxx.net
ckut.ca
collectif.koumbit.net
www.munilamacaza.ca
www.cdchl.org
svn.koumbit.net
laspq.org
patwhite.com
www.cdchl.org
dev0.aegir.koumbit.net
www.saint-aime-du-lac-des-iles.ca
imap.koumbit.net
www.steannedulac.ca
staging-alternc.koumbit.net
csnconstruction.koumbit.net
studioxx.koumbit.net
www.saint-aime-du-lac-des-iles.ca
ababord0.koumbit.net
lb.koumbit.net
crm.psc-gpc.ca
www.koumbit.org
lettresquebecoises.qc.ca
webmail.koumbit.net
collabora0.koumbit.net
popotes.org
chat.koumbit.net
www.lamereveille.ca
parcolympique.koumbit.net
ecpar.org
piwik.koumbit.net
revuelespritlibre.org
rappels.ca
admin.alternc1.koumbit.net
courriel.alternc1.koumbit.net
revuelespritlibre.org
www.riviere-rouge.ca
redmine.koumbit.net
www.compop.net
www.assep.koumbit.org
webmail.koumbit.net
aegir3.koumbit.net
www.compop.net
nue.koumbit.net
odoo0.koumbit.net
www.riviere-rouge.ca
status.koumbit.net
revuelespritlibre.org
nuage.koumbit.net
admin.alternc1.koumbit.net
ledger.koumbit.net
www.lacdesecorces.ca
arthives.org
wikifarm.koumbit.net
mta-sts.koumbit.net
3e-imperial.org
d8.patwhite.com
vrec.koumbit.net
ecpar.org
stats.koumbit.net
jenkins.koumbit.net
boxes.koumbit.net
laspq.org
3e-imperial.org
claqo.wpdev0.koumbit.net
webmail.koumbit.net
www.saint-aime-du-lac-des-iles.ca
dev1.aegir.koumbit.net
nue.koumbit.net
fsm.wsf2016.org
www.chute-saint-philippe.ca
csnconstruction.koumbit.net
dev0.aegir.koumbit.net
ceres.koumbit.net
fsm.wsf2016.org
arthives.org
Certificate
The complete raw certificate details for dev0.aegir.koumbit.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISBI34uMyzug2aZ7wZ0ObTi6qGMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzExMTcxNjA4NTFaFw0x ODAyMTUxNjA4NTFaMCExHzAdBgNVBAMTFmRldjAuYWVnaXIua291bWJpdC5uZXQw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdPvI5OkL0DIzCpxMlQNsT NOIKZlpz3FTkOReKcPyM662XMjErB8/6q/2OaQ/eMlJI0acEG9mpowO76Oj/sHvQ 7EVg12QxkyRz+QKGkmJpf3OjrOixeQsv34M1EzZnN6OpPzFTHxIvM5frwY6I0+f3 ncEOCyL60Jho0Df6Xlbkx5pxY8nwggeJ5AunyNAqLIbqNGsz2Eau3bzAFPhLr3jy sBZFEuAtvXV63gY1kHlLGysNqhYxHMLBv2OroWzzQpZAx3HhscLOcHCfEgpWxgKh nFLPeOi4pvPNOP/iyeim893tMaHcKWdspjzH1owjN9bTSfUl6ZlCyEK4h7i3Yh2f AgMBAAGjggInMIICIzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLrVw74SFg89ZzNY YrM6kVrEg4npMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wMgYDVR0RBCswKYIPZGV2LmtvdW1iaXQubmV0ghZkZXYwLmFl Z2lyLmtvdW1iaXQubmV0MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEE AYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBi ZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNj b3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0 cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQAD ggEBADxW7U6UTnExYLZxtmpotLUg7HUJMNv6hQpMtPQm8rkcIy8aCENvvnaLKQp2 I2pWA/9zou+ly7fOY+S69awkjloE8HqgKSyDDm9TmNlIYo3P3Cc98QwlHQTSLbtR ouDniZ63uECry7vvbVPGL0MuKmb5KDzo/nBZdIZ+x+8zqB7qja1S1X1l9k5CPoCO T3IgyGqCujzElENrxOME7by9nH1bxRpKfSEszeJteAkMlwixmulAAKR2aK1l4Dnd aKxUtrqO+7+sx71BZRt7u+sFrLEJ6wjwkxx1P/OKKvv1G0Q7ktrHkJbtBgt9juxq hvA8mf+on6Hq6Qh4+nGARZJE3Cg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT7yOTpC9AyMwqcTJUDb EzTiCmZac9xU5DkXinD8jOutlzIxKwfP+qv9jmkP3jJSSNGnBBvZqaMDu+jo/7B7 0OxFYNdkMZMkc/kChpJiaX9zo6zosXkLL9+DNRM2ZzejqT8xUx8SLzOX68GOiNPn 953BDgsi+tCYaNA3+l5W5MeacWPJ8IIHieQLp8jQKiyG6jRrM9hGrt28wBT4S694 8rAWRRLgLb11et4GNZB5SxsrDaoWMRzCwb9jq6Fs80KWQMdx4bHCznBwnxIKVsYC oZxSz3jouKbzzTj/4snopvPd7TGh3ClnbKY8x9aMIzfW00n1JemZQshCuIe4t2Id nwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 396759565540320920371609726603490583358086 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-17 16:08:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-15 16:08:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev0.aegir.koumbit.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19850453800725228571767364446983805786413274848882303896395882555819389026934755681708348571081227624937021584500277518886016727164779447238432063470054588953710167444339901563944600585635414555755316598913530187235181335381904156590748383523952311253357026570375391236928882523428779717927495958883674097759001799075616187450797339362307067110910965853461345181250288921727464491747666512450691815273403316266013175849684997249634275533645426685061446406023376677638441911416202617466253591263196333337173793249493707595017175828104901153179438608690766959403555450077145629934926096662771411705404540509989537717663 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bad5c3be12160f3d67335862b33a915ac48389e9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.koumbit.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev0.aegir.koumbit.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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