fsax.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:7a:11:40:aa:cb:d1:31:03:bd:c4:8d:1d:94:31:f1:57:70 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fsax.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:7a:11:40:aa:cb:d1:31:03:bd:c4:8d:1d:94:31:f1:57:70Serial Number (int): 302874239206720213514476143212244245763952
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 8b:dd:9f:97:00:ca:1f:f7:81:a1:27:34:9c:f8:60:0c:86:ed:83:05
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 3c:44:09:69:62:34:1d:86:21:63:a5:d3:36:6e:aa:e3:b3:79:bd:03
Fingerprint (sha256): 1b:bf:35:60:5c:2d:09:b2:98:04:b8:fa:90:06:f0:34:39:e3:00:9d:2d:72:c6:77:7c:d5:1f:34:b3:be:b4:ec
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate fsax.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fsax.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fsax.ch
www.fsax.ch
www.fsax.ch
Other certificates including the domain name fsax.ch
(limited to 100 certificates)
addon-websurgartench.fsax.ch
pifa.fsax.ch
prolemo.fsax.ch
mimetype.info
deck.fsax.ch
test.fsax.ch
fsax.ch
digitalist.ch
deck.fsax.ch
fsax.ch
deck.fsax.ch
addon-websurgartench.fsax.ch
fsax.ch
fsax.ch
addon-websaguaseguridadcom.fsax.ch
heimplan.ch
siedler.fsax.ch
test.fsax.ch
kitadienstplan.de
addon-individualfilmsch.fsax.ch
addon-websdigitalistch.fsax.ch
deck.fsax.ch
ocelot.fsax.ch
deck.fsax.ch
stuebis-naturmanufaktur.ch
digitalist.ch
digitalist.ch
siedler.fsax.ch
fsax.ch
pifa.fsax.ch
stuebi.fsax.ch
fsax.ch
pifa.fsax.ch
siedler.fsax.ch
addon-websswerftch.fsax.ch
cristoghi.ch
stuebis-naturmanufaktur.ch
prolemo.fsax.ch
dm4-1.com
stuebis-naturmanufaktur.ch
swerft.ch
cristoghi.fsax.ch
siedler.fsax.ch
mimetype.info
fsax.ch
siedler.fsax.ch
addon-websurgartench.fsax.ch
prolemo.fsax.ch
deck.fsax.ch
urgarten.ch
deck.fsax.ch
fsax.ch
deck.fsax.ch
addon-websswerftch.fsax.ch
siedler.fsax.ch
fsax.ch
swerft.ch
prolemo.fsax.ch
fsax.ch
fsax.ch
deck.fsax.ch
fsax.ch
addon-individualfilmsch.fsax.ch
fsax.ch
siedler.fsax.ch
prolemo.fsax.ch
dm4-1.com
digitalist.ch
deck.fsax.ch
addon-individualfilmsch.fsax.ch
siedler.fsax.ch
aguaseguridad.com
deck.fsax.ch
siedler.fsax.ch
cristoghi.fsax.ch
fsax.ch
deck.fsax.ch
ocelot.fsax.ch
siedler.fsax.ch
pifa.fsax.ch
siedler.fsax.ch
cristoghi.ch
fsax.ch
addon-individualfilmsch.fsax.ch
deck.fsax.ch
fsax.ch
cristoghi.ch
addon-websswerftch.fsax.ch
fsax.ch
swerft.ch
addon-individualfilmsch.fsax.ch
fsax.ch
urgarten.ch
fsax.ch
siedler.fsax.ch
fsax.ch
addon-websaguaseguridadcom.fsax.ch
prolemo.fsax.ch
addon-websdigitalistch.fsax.ch
addon-individualfilmsch.fsax.ch
pifa.fsax.ch
prolemo.fsax.ch
mimetype.info
deck.fsax.ch
test.fsax.ch
fsax.ch
digitalist.ch
deck.fsax.ch
fsax.ch
deck.fsax.ch
addon-websurgartench.fsax.ch
fsax.ch
fsax.ch
addon-websaguaseguridadcom.fsax.ch
heimplan.ch
siedler.fsax.ch
test.fsax.ch
kitadienstplan.de
addon-individualfilmsch.fsax.ch
addon-websdigitalistch.fsax.ch
deck.fsax.ch
ocelot.fsax.ch
deck.fsax.ch
stuebis-naturmanufaktur.ch
digitalist.ch
digitalist.ch
siedler.fsax.ch
fsax.ch
pifa.fsax.ch
stuebi.fsax.ch
fsax.ch
pifa.fsax.ch
siedler.fsax.ch
addon-websswerftch.fsax.ch
cristoghi.ch
stuebis-naturmanufaktur.ch
prolemo.fsax.ch
dm4-1.com
stuebis-naturmanufaktur.ch
swerft.ch
cristoghi.fsax.ch
siedler.fsax.ch
mimetype.info
fsax.ch
siedler.fsax.ch
addon-websurgartench.fsax.ch
prolemo.fsax.ch
deck.fsax.ch
urgarten.ch
deck.fsax.ch
fsax.ch
deck.fsax.ch
addon-websswerftch.fsax.ch
siedler.fsax.ch
fsax.ch
swerft.ch
prolemo.fsax.ch
fsax.ch
fsax.ch
deck.fsax.ch
fsax.ch
addon-individualfilmsch.fsax.ch
fsax.ch
siedler.fsax.ch
prolemo.fsax.ch
dm4-1.com
digitalist.ch
deck.fsax.ch
addon-individualfilmsch.fsax.ch
siedler.fsax.ch
aguaseguridad.com
deck.fsax.ch
siedler.fsax.ch
cristoghi.fsax.ch
fsax.ch
deck.fsax.ch
ocelot.fsax.ch
siedler.fsax.ch
pifa.fsax.ch
siedler.fsax.ch
cristoghi.ch
fsax.ch
addon-individualfilmsch.fsax.ch
deck.fsax.ch
fsax.ch
cristoghi.ch
addon-websswerftch.fsax.ch
fsax.ch
swerft.ch
addon-individualfilmsch.fsax.ch
fsax.ch
urgarten.ch
fsax.ch
siedler.fsax.ch
fsax.ch
addon-websaguaseguridadcom.fsax.ch
prolemo.fsax.ch
addon-websdigitalistch.fsax.ch
addon-individualfilmsch.fsax.ch
Certificate
The complete raw certificate details for fsax.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgISA3oRQKrL0TEDvcSNHZQx8VdwMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MjMyMzQyMzlaFw0x ODExMjEyMzQyMzlaMBIxEDAOBgNVBAMTB2ZzYXguY2gwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDK+ZK9navBMB8rE3rp1gAf4DFGTW/65p8vva779pEj 7D5W6rfcOXMj/Tp2ZGf8p/4uEWva5xb6Ir5xCb+waFmgzfKbm8mUFTNETkgnO2C5 I6gx8y50o0wZs+XD54oq+JJMpR6EKyNY/QEyBX8Ax+J3ZIx7NUdbGZSjUy01QMPY w/KL1ZpLlx/BXKHJm/CdhvZ8LOgXiQfZ4QdDXuTVj0KN5iPbbkunLIugVJ5Fo+gS 6mQ8w3Kk3CRDnU7ed8f96k0NvvniowePeToA4P4kkjcusa/6S07LTO1047bEIgTK MwMnElYcmVRx6bw5rYwB1WS3yamXytVIn3XTUdt9Q6YDAgMBAAGjggMeMIIDGjAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFIvdn5cAyh/3gaEnNJz4YAyG7YMFMB8GA1Ud IwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggr BgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggr BgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHwYD VR0RBBgwFoIHZnNheC5jaIILd3d3LmZzYXguY2gwgf4GA1UdIASB9jCB8zAIBgZn gQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmlj YXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBh bmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGlj eSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCC AQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEA KQaNsgiaN9kTAAABZWliE1UAAAQDAEgwRgIhAPn2EQJwwuSNrHHnmrNguFcRaHeF Qeu0o0PC+oHd9zGFAiEA1VDgKHmgKoXeHsihGlrUdyao9KvLegEADqj1SP7rMXcA dwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWVpYhTgAAAEAwBI MEYCIQDhYbwYikwFmYG00AuEX5Qj7k8lRT0RKbhPSQ8CmB3+QAIhALTMMtyuagZW vCIRrvLrUQqcQbWopU2Zvx76oefbw2G1MA0GCSqGSIb3DQEBCwUAA4IBAQB8JSRN SfKU6afKFGq4GGWL7NCa1tBhSgiawoERmpQZ/WL373vqWnzcWAnADRWF7yPS4ZZv mt+rKDxxG6598zp2RtctcyziIk5sQN9XqdxBZnaID77A4kBC8OICWDQvhF78fN8p O8qDEG3virsgAVzjcz7G+QPGvDF6R+BnVt3EFXNYDXXeMapmZaU1G8ypRo6WyQTk fMYoJsYWHUl2YtlWR9QTA4IodJCaFu0T/6Y83ehxjSc/AcPQ/P5V5Nf4wmbn7/Ip d3vrhxTKh6C2GjMNmO2dirRNjdyO17Z3CifLgoMsByueSsT2OuL+I/LZpDFwzuyO sAtujfr+K9cii2EF -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvmSvZ2rwTAfKxN66dYA H+AxRk1v+uafL72u+/aRI+w+Vuq33DlzI/06dmRn/Kf+LhFr2ucW+iK+cQm/sGhZ oM3ym5vJlBUzRE5IJztguSOoMfMudKNMGbPlw+eKKviSTKUehCsjWP0BMgV/AMfi d2SMezVHWxmUo1MtNUDD2MPyi9WaS5cfwVyhyZvwnYb2fCzoF4kH2eEHQ17k1Y9C jeYj225LpyyLoFSeRaPoEupkPMNypNwkQ51O3nfH/epNDb754qMHj3k6AOD+JJI3 LrGv+ktOy0ztdOO2xCIEyjMDJxJWHJlUcem8Oa2MAdVkt8mpl8rVSJ9101HbfUOm AwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 302874239206720213514476143212244245763952 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-23 23:42:39 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-21 23:42:39 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fsax.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25623206737777747919467084819138806566224504365965466465918496598983274098986782805846347566744223005850234044089880382521864257897938787937406243502020762223143978155500955184869624999594034682655881434984732063483294421518274987389289988101371812722809373099841175079642005008205795878684255571014614656391444935240391637694717775176728610547157040901373095717321714308172291282784889035795874689513686875513569153572287806331198612012812619774341112894077007972022912153996182171069313528397901725942325125588783602476577505896240351358065900966035311585002729775139091533755796217701653122781847773212889414084099 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8bdd9f9700ca1ff781a127349cf8600c86ed8305 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsax.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsax.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165696213550000040300483046022100f9f6110270c2e48dac71e79ab360b8571168778541ebb4a343c2fa81ddf73185022100d550e02879a02a85de1ec8a11a5ad47726a8f4abcb7a01000ea8f548feeb3177007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165696214e00000040300483046022100e161bc188a4c059981b4d00b845f9423ee4f25453d1129b84f490f02981dfe40022100b4cc32dcae6a0656bc2211aef2eb510a9c41b5a8a54d99bf1efaa1e7dbc361b5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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