ix004.dnsnic.in
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:06:50:33:14:37:5f:13:18:ab:24:7b:da:30:a9:8f:0a:fb was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ix004.dnsnic.in
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:06:50:33:14:37:5f:13:18:ab:24:7b:da:30:a9:8f:0a:fbSerial Number (int): 263485155453644114440028671038582787345147
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 35:27:f8:45:fb:c3:04:a2:49:5e:f5:9d:1e:da:11:f4:a0:b7:77:7b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 01:70:87:64:cc:c9:40:c1:27:08:22:57:0a:a9:39:56:29:d1:44:13
Fingerprint (sha256): 1c:19:f9:58:78:d6:6d:e2:08:ad:5a:aa:8f:d5:f6:c9:63:fb:20:0a:ca:21:bf:a0:a9:49:96:9c:02:d3:db:f8
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ix004.dnsnic.in
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ix004.dnsnic.in
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ix004.dnsnic.in
Other certificates including the domain name dnsnic.in
(limited to 100 certificates)
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix008.dnsnic.in
ix004.dnsnic.in
sni157161.cloudflaressl.com
ix004.dnsnic.in
ix004.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix025.dnsnic.in
ix004.dnsnic.in
sni157161.cloudflaressl.com
ix004.dnsnic.in
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
ny1002.dnsnic.in
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
apps-lin.dnsnic.in
ny1001.dnsnic.in
sni157161.cloudflaressl.com
ix011.dnsnic.in
ix004.dnsnic.in
sni157161.cloudflaressl.com
ix004.dnsnic.in
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
ix025.dnsnic.in
ix004.dnsnic.in
icd4.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ny1001.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix005.dnsnic.in
results.unigoa.ac.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix018.dnsnic.in
sni157161.cloudflaressl.com
ix006.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
results.unigoa.ac.in
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix004.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix003.dnsnic.in
tata-dr01.dnsnic.in
apps-lin.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix007.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix005.dnsnic.in
sni157161.cloudflaressl.com
sni34771.cloudflaressl.com
ix004.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix007.dnsnic.in
ix007.dnsnic.in
ix006.dnsnic.in
ix018.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix002.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
apps-lin.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
akash.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix011.dnsnic.in
results.unigoa.ac.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix008.dnsnic.in
ix004.dnsnic.in
sni157161.cloudflaressl.com
ix004.dnsnic.in
ix004.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix025.dnsnic.in
ix004.dnsnic.in
sni157161.cloudflaressl.com
ix004.dnsnic.in
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
ny1002.dnsnic.in
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
apps-lin.dnsnic.in
ny1001.dnsnic.in
sni157161.cloudflaressl.com
ix011.dnsnic.in
ix004.dnsnic.in
sni157161.cloudflaressl.com
ix004.dnsnic.in
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
ix025.dnsnic.in
ix004.dnsnic.in
icd4.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ny1001.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix005.dnsnic.in
results.unigoa.ac.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix018.dnsnic.in
sni157161.cloudflaressl.com
ix006.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
results.unigoa.ac.in
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix004.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix003.dnsnic.in
tata-dr01.dnsnic.in
apps-lin.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix007.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix005.dnsnic.in
sni157161.cloudflaressl.com
sni34771.cloudflaressl.com
ix004.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix007.dnsnic.in
ix007.dnsnic.in
ix006.dnsnic.in
ix018.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix002.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
apps-lin.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
akash.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix011.dnsnic.in
results.unigoa.ac.in
sni157161.cloudflaressl.com
Certificate
The complete raw certificate details for ix004.dnsnic.in in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAwZQMxQ3XxMYqyR72jCpjwr7MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEwMDQxMDEzMzZaFw0x ODAxMDIxMDEzMzZaMBoxGDAWBgNVBAMTD2l4MDA0LmRuc25pYy5pbjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAM0g7ycJrTXJN1xD7E2DN5hRCv9exgBv lJuQ+clqtCsA7TEjNpY5geBIwdwq2yP3Y7VK/I4k287XV8RS9f5pXkOY0An4L/qS 35Mlw4ymOgkT3UyURi81iB7oNgMclAq1eEf7+z06U9WvL29PbMzdz/Ft1Rgb0s9z CqGI7hYdtykZRIoESIz/ZhorCPUqti6biLkHlaoZNzKgSX3ht4MY5D7ap6ik5BEk DjjGHDgAqISS3VlEH6a0J0NecRqXdLQHFWSncV0UKuLU0gRb8g0zyjJ6KnEWrhjQ SHhg6F+mP0LysX1txVzGLHumYy60vGiYzep4Q1AK6aBZ1CZAUEApVgECAwEAAaOC Ag8wggILMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUNSf4RfvDBKJJXvWdHtoR9KC3 d3swHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzAaBgNVHREEEzARgg9peDAwNC5kbnNuaWMuaW4wgf4GA1UdIASB9jCB8zAI BgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8v Y3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRp ZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGll cyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBv bGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5 LzANBgkqhkiG9w0BAQsFAAOCAQEAGhLQv++Mcgug9kW1BZfYtuJyh8YnwNJWyqsX 1jymXSA8wbs4P8+1+JsAaOoW23wY1ZcOywfTwmUF8eHIvzGlXnMSNRjal69fIZYj 0jRO7L4JQSrrTQEIP7R88xq/iTsIbIOb1hinTSa2I/yNYkv9Hbj4dfqoKV5E5sTS cwIYACSjZ6q0I2ZW+8dtsIqjqT+92r/ZjABvh5KHGtl+NLLI4b8grxA1PBlcdXS8 GXGul+TdRzMnj0pJ/gRB2/pttG+d0UD/1ulpBRaDl/glX6rF+AhE18rwJQc1nGnK +ZJQkJ8ii+GW9ZLjCq48+5Ace7fbm35NeYdACe/VVhcj3Sk1HA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSDvJwmtNck3XEPsTYM3 mFEK/17GAG+Um5D5yWq0KwDtMSM2ljmB4EjB3CrbI/djtUr8jiTbztdXxFL1/mle Q5jQCfgv+pLfkyXDjKY6CRPdTJRGLzWIHug2AxyUCrV4R/v7PTpT1a8vb09szN3P 8W3VGBvSz3MKoYjuFh23KRlEigRIjP9mGisI9Sq2LpuIuQeVqhk3MqBJfeG3gxjk PtqnqKTkESQOOMYcOACohJLdWUQfprQnQ15xGpd0tAcVZKdxXRQq4tTSBFvyDTPK MnoqcRauGNBIeGDoX6Y/QvKxfW3FXMYse6ZjLrS8aJjN6nhDUArpoFnUJkBQQClW AQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 263485155453644114440028671038582787345147 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-04 10:13:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-02 10:13:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ix004.dnsnic.in' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25895092972134807873561806908521911616266523977742977065038725860126235687177173820551799894004314723776548938638664220533008710755793769383420621309515262104605093281535448869636078903296438669879369340028163650550669548887627170101342718305472707908470442569977849070821739105484513109794805396967965955995970944066910507675914539295835379496866627508652015789642878266645129902949647242798842978027910841965245456045662340207659809843628392174201350560477774587658305238740600756897525228614766464248872410054723493978597923108593559886532975220572309283160598504975558341753569949567822645875273592933830875502081 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3527f845fbc304a2495ef59d1eda11f4a0b7777b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ix004.dnsnic.in' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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