stargraf.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:af:c0:a4:74:f2:8b:4d:fa:ea:99:9b:ab:78:45:04:75:07 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=stargraf.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:af:c0:a4:74:f2:8b:4d:fa:ea:99:9b:ab:78:45:04:75:07Serial Number (int): 321142337690296316645909108391348797732103
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 57:fa:80:84:fd:56:35:82:0d:d5:4e:96:d3:b1:ce:96:9e:40:22:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 48:92:72:85:db:43:10:ae:08:c0:30:6d:31:c5:d1:6d:44:34:e0:87
Fingerprint (sha256): 18:00:5e:9b:11:b5:05:1a:13:c6:96:0b:60:ef:6a:c6:a0:fc:c8:fc:01:70:5b:b8:68:1f:1c:3a:01:d3:fd:d7
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate stargraf.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for stargraf.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
datastore-4.com
sikerei.ch
stargraf.com
www.datastore-4.com
www.stargraf.com
sikerei.ch
stargraf.com
www.datastore-4.com
www.stargraf.com
Other certificates including the domain name stargraf.com
(limited to 100 certificates)
datastore-4.com
datastore-4.com
datastore-5.com
datastore-3.com
datastore-2.com
datastore-4.com
datastore-3.com
stargraf.com
datastore-4.com
datastore-4.com
datastore-4.com
datastore-4.com
datastore-4.com
datastore-5.com
datastore-3.com
datastore-4.com
datastore-theme.com
datastore-theme.com
www.regis-secq-architecte.com
datastore-4.com
datastore-4.com
datastore-4.com
datastore-2.com
datastore-3.com
datastore-5.com
datastore-5.com
datastore-5.com
datastore-4.com
datastore-4.com
datastore-4.com
datastore-3.com
www.regis-secq-architecte.com
www.kentec.fr
datastore-4.com
datastore-4.com
datastore-4.com
www.regis-secq-architecte.com
datastore-4.com
datastore-2.com
www.kenteco.ch
datastore-5.com
datastore-4.com
datastore-3.com
www.regis-secq-architecte.com
datastore-4.com
datastore-7.com
datastore-4.com
datastore-5.com
datastore-4.com
datastore-4.com
datastore-5.com
datastore-3.com
datastore-2.com
datastore-4.com
datastore-3.com
stargraf.com
datastore-4.com
datastore-4.com
datastore-4.com
datastore-4.com
datastore-4.com
datastore-5.com
datastore-3.com
datastore-4.com
datastore-theme.com
datastore-theme.com
www.regis-secq-architecte.com
datastore-4.com
datastore-4.com
datastore-4.com
datastore-2.com
datastore-3.com
datastore-5.com
datastore-5.com
datastore-5.com
datastore-4.com
datastore-4.com
datastore-4.com
datastore-3.com
www.regis-secq-architecte.com
www.kentec.fr
datastore-4.com
datastore-4.com
datastore-4.com
www.regis-secq-architecte.com
datastore-4.com
datastore-2.com
www.kenteco.ch
datastore-5.com
datastore-4.com
datastore-3.com
www.regis-secq-architecte.com
datastore-4.com
datastore-7.com
datastore-4.com
datastore-5.com
datastore-4.com
Certificate
The complete raw certificate details for stargraf.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGQDCCBSigAwIBAgISA6/ApHTyi0366pmbq3hFBHUHMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzAzMDgwODUzMDBaFw0x NzA2MDYwODUzMDBaMBcxFTATBgNVBAMTDHN0YXJncmFmLmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAMbio3QitDNsZD8eLts6Lbyez4s8YtCsRYvS TiLc2Xy3pWXu87fVEUpBHvWoDZZhdY6ufd/fasZbEo4WtWxBlOvDEmbUz3SvBhJR cmS33XJ2TbeGFH5uDxQJ/LPLqNCRMfiN/NQuf01JArFfkRHdUlMawZJWJBRAdIFq sPyFKhsg75cVBRUbOEJT0/Gt1/xjHpHF2w7hoaiB/vZ5VpjYXH8ePjNgLcrD4Pja ONJx2Oxl3sI9OKDupZnxJqM8vjskhiOP9A8HXsBAUJV91p/QdXvTz5Gj2x+FJom1 yaoisvA+iBQV7mQU0v+sTASiuINnBlftaBYNJvrBhfb890k5lOcvg3IX3R6mSGlj 6WRBWy9/7FzoBjTDJvM7tElqkLlOss1ryZ8DCWgDQzVAvddOy9RWjFYhWyacwqdc rgYzZnhLsj/lEXuEfoWz9ZiRHNUBW7OFHuMZa0cnfQD93yjAWVZETaqZXYH7GBBi vRHRfWB2iQ94Gd0Kb9D629IH9dNMrrE6P6ECDXZcA8ba6UtDSDLyVjMQW24ZRRMQ hqWEOLR9xNTHOByy/Wmbo4mYxhikKqa6NZPsx7fThcyRWAsnFHp1ePim4VGPf3xr uKOsTQQnGENIYNnWnFXwHK0nSxg1XXtfcrQYtNWxgGGOUs9cfkZCRYIc/7fTPR4h OL/cSseBAgMBAAGjggJRMIICTTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFf6gIT9 VjWCDdVOltOxzpaeQCKhMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMFsGA1UdEQRUMFKCD2RhdGFzdG9yZS00LmNvbYIK c2lrZXJlaS5jaIIMc3RhcmdyYWYuY29tghN3d3cuZGF0YXN0b3JlLTQuY29tghB3 d3cuc3RhcmdyYWYuY29tMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEE AYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBi ZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNj b3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0 cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQAD ggEBAEbzQgH3nkZyhwdwakF5WAD2dPYPNaqw5QN10KvNbgnYn7fgCtKMozSzW61o ZhTjojDAYf2KeKzCcymK8DpT2SUGHIEuVrNyKfbq7CZDbvNyz0gOywB1LkmoK+ae NGkVyxfpu2xeaZzoE3Ph9Skqqo/R08XlpRggj1ODAz2XxU1WMRbqja95qSRF5G8M /9tOjfOXDegKPZQ+k8UVHewbYiCMCysUcp6ZSEQRAG9e7YV24MkRf1J3t8vVzJZg H+YyA42d647esWbc3KInbeQ3UrluHYY+6nh/Pii9h+e1sxNfNjQJCSZUkBDF1H6K cPF6DQ3nl1Tr0niuq9chEFZwjBw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxuKjdCK0M2xkPx4u2zot vJ7Pizxi0KxFi9JOItzZfLelZe7zt9URSkEe9agNlmF1jq59399qxlsSjha1bEGU 68MSZtTPdK8GElFyZLfdcnZNt4YUfm4PFAn8s8uo0JEx+I381C5/TUkCsV+REd1S UxrBklYkFEB0gWqw/IUqGyDvlxUFFRs4QlPT8a3X/GMekcXbDuGhqIH+9nlWmNhc fx4+M2AtysPg+No40nHY7GXewj04oO6lmfEmozy+OySGI4/0DwdewEBQlX3Wn9B1 e9PPkaPbH4UmibXJqiKy8D6IFBXuZBTS/6xMBKK4g2cGV+1oFg0m+sGF9vz3STmU 5y+DchfdHqZIaWPpZEFbL3/sXOgGNMMm8zu0SWqQuU6yzWvJnwMJaANDNUC9107L 1FaMViFbJpzCp1yuBjNmeEuyP+URe4R+hbP1mJEc1QFbs4Ue4xlrRyd9AP3fKMBZ VkRNqpldgfsYEGK9EdF9YHaJD3gZ3Qpv0Prb0gf100yusTo/oQINdlwDxtrpS0NI MvJWMxBbbhlFExCGpYQ4tH3E1Mc4HLL9aZujiZjGGKQqpro1k+zHt9OFzJFYCycU enV4+KbhUY9/fGu4o6xNBCcYQ0hg2dacVfAcrSdLGDVde19ytBi01bGAYY5Sz1x+ RkJFghz/t9M9HiE4v9xKx4ECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321142337690296316645909108391348797732103 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-08 08:53:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-06 08:53:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stargraf.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811381261306783837393437123733695974641649696348765901713215273691800544202717173246848890819734372135826485015446682351180140887833250627588542781932914651147105836098495759266452778072369680392436780468026456324817685510506155083458607470937130936951653900864673150613732145118793026565976333190966678346037196687337860825529165793785084341857857670534866934553400230484672599638131937358217974920157250375376340382714973192116743317338728004515506699402338082412152248957276524810192845348970080390266557862181833728446256250075605827656418288897350773206892137569831858355230462291876464258546414560625001345995986443988714134177689667725125385424072390433931410584507696950069075784734719669441942605970984695418880327649638631362707509090927325176593490715787686251228883718499603865000484355694225922819467926813117685514530289384904409950669263204053521159696577392166151393950915125908595241457293197912068107142319288256268268546360412763364128371021507568749474423624283272671522152799399934194467536722686262243931264954865695083355369871743528251622542928021313791306279683914772953370102537858487099212974901106983462370023107546736667270145594472143498495140172166239003956003369423492476562770671674388097866513696641 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 57fa8084fd5635820dd54e96d3b1ce969e4022a1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datastore-4.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sikerei.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stargraf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datastore-4.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stargraf.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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