cejph.szu.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:84:45:52:3f:8b:e2:76:95:a0:ec:99:c1:45:71:a4:a9:cc was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cejph.szu.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:84:45:52:3f:8b:e2:76:95:a0:ec:99:c1:45:71:a4:a9:ccSerial Number (int): 393458559949531029406362400394675304573388
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 42:66:8e:23:d4:d1:f0:43:68:c4:c7:5c:af:8c:c7:c3:eb:ee:01:1a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e1:c8:6e:5c:35:9b:3d:15:a5:25:a4:a0:17:78:95:47:b9:78:aa:92
Fingerprint (sha256): 1d:f9:0d:1a:34:d0:c6:7c:c3:8c:d9:de:7b:42:88:0b:f1:0f:db:ea:63:62:3a:24:e4:3a:ec:cd:96:93:9a:51
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate cejph.szu.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cejph.szu.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cejph.actavia.cz
cejph.szu.cz
cejph.szu.cz
Other certificates including the domain name szu.cz
(limited to 100 certificates)
autorizace.szu.cz
mail.szu.cz
cejph.szu.cz
cejph.szu.cz
katalog.szu.cz
mail.szu.cz
katalogpers.szu.cz
autorizace.szu.cz
katalog.szu.cz
autorizace.szu.cz
earss.szu.cz
katalog.szu.cz
apps.szu.cz
cejph.szu.cz
*.szu.cz
katalogpers.szu.cz
mail.szu.cz
hygiena.szu.cz
mail.szu.cz
indi.szu.cz
cejph.szu.cz
mail.szu.cz
szu.cz
autorizace.szu.cz
epoz.szu.cz
mail.szu.cz
cejph.szu.cz
hygiena.szu.cz
katalog.szu.cz
mail.szu.cz
autorizace.szu.cz
hygiena.szu.cz
autorizace.szu.cz
szu.cz
katalogpers.szu.cz
apps.szu.cz
*.szu.cz
katalog.szu.cz
earss.szu.cz
cejph.szu.cz
autorizace.szu.cz
hygiena.szu.cz
earss.szu.cz
epoz.szu.cz
www.szu.cz
mail.szu.cz
apps.szu.cz
autorizace.szu.cz
mail.szu.cz
archiv.szu.cz
autorizace.szu.cz
autorizace.szu.cz
hygiena.szu.cz
cejph.szu.cz
szu.cz
autorizace.szu.cz
earss.szu.cz
apps.szu.cz
apps.szu.cz
earss.szu.cz
mail.szu.cz
*.szu.cz
katalogpers.szu.cz
mail.szu.cz
epoz.szu.cz
autorizace.szu.cz
hygiena.szu.cz
katalog.szu.cz
hygiena.szu.cz
hygiena.szu.cz
katalog.szu.cz
cejph.szu.cz
katalogpers.szu.cz
hygiena.szu.cz
katalogpers.szu.cz
mail.szu.cz
cejph.szu.cz
mail.szu.cz
autorizace.szu.cz
cejph.szu.cz
www.szu.cz
katalogpers.szu.cz
mail.szu.cz
mail.szu.cz
cejph.szu.cz
cejph.szu.cz
katalog.szu.cz
mail.szu.cz
katalogpers.szu.cz
autorizace.szu.cz
katalog.szu.cz
autorizace.szu.cz
earss.szu.cz
katalog.szu.cz
apps.szu.cz
cejph.szu.cz
*.szu.cz
katalogpers.szu.cz
mail.szu.cz
hygiena.szu.cz
mail.szu.cz
indi.szu.cz
cejph.szu.cz
mail.szu.cz
szu.cz
autorizace.szu.cz
epoz.szu.cz
mail.szu.cz
cejph.szu.cz
hygiena.szu.cz
katalog.szu.cz
mail.szu.cz
autorizace.szu.cz
hygiena.szu.cz
autorizace.szu.cz
szu.cz
katalogpers.szu.cz
apps.szu.cz
*.szu.cz
katalog.szu.cz
earss.szu.cz
cejph.szu.cz
autorizace.szu.cz
hygiena.szu.cz
earss.szu.cz
epoz.szu.cz
www.szu.cz
mail.szu.cz
apps.szu.cz
autorizace.szu.cz
mail.szu.cz
archiv.szu.cz
autorizace.szu.cz
autorizace.szu.cz
hygiena.szu.cz
cejph.szu.cz
szu.cz
autorizace.szu.cz
earss.szu.cz
apps.szu.cz
apps.szu.cz
earss.szu.cz
mail.szu.cz
*.szu.cz
katalogpers.szu.cz
mail.szu.cz
epoz.szu.cz
autorizace.szu.cz
hygiena.szu.cz
katalog.szu.cz
hygiena.szu.cz
hygiena.szu.cz
katalog.szu.cz
cejph.szu.cz
katalogpers.szu.cz
hygiena.szu.cz
katalogpers.szu.cz
mail.szu.cz
cejph.szu.cz
mail.szu.cz
autorizace.szu.cz
cejph.szu.cz
www.szu.cz
katalogpers.szu.cz
mail.szu.cz
Certificate
The complete raw certificate details for cejph.szu.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgISBIRFUj+L4naVoOyZwUVxpKnMMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MDIwMjUxMjFaFw0x ODA3MzEwMjUxMjFaMBcxFTATBgNVBAMTDGNlanBoLnN6dS5jejCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBALJ2i3qTEn/AFJL6qn3lKaEsqsuqa0qeQj3c YSMbzU+oIRiJ8QC8W42Gc8RaIot2VC68A0rDASvYr3cApNbqRdk1HaDIs8v9dl7+ ZOLMzieovY1YJ5zYkGA+ET7Ci4HQXL70TDMaZn1iceCq5cEqFQIxGiy1yl0eWoUy 0+EBVon7C0NqvnMLQSvf1gQaSaHHzxX0uNc58L2YOXNc2M5tONpA0hWlq8V/Qg0h QcCHGUgnDxHe23DA+/WcUNU9uU9SMsy9W7Xaw0CohgRpKCh9yq1FGDQWHRllkG1b F3ccCLDlFLTY++IrplB+quG8CK4fjP+DbgPpleQuFNJR12irHCOeo0r1dXDGxwJV sCTwOIKITE0OfE4i8lg4yRj7Xdo/EIaxmzHWXayqK5lK6DLt7Lm/Q3PkCua073Tq Gpn6y06p0gEm1Sh06IYKO4iXjo1XW5m9Bt6Cq6QrSbUK7DoeYz3YvW8lW/wnfIND 5cBHYFd7HH8cgp9n+mKNVmXS2KxhTD8xdCr3mKySmy1EWQmKk1AqwwQUptoHIH1f 1r3WWIBqxrokHYWold0MmVFp0lP3ybzRbCxpk4RWI8N9+0zCKgAynBivv1evVHCh HzFOMP6W66v+TI0bp7uZR3phsQ86ng+piLEgHZq9rQh9lF93ylBrH7knyQcEpYwu qDftO+2/AgMBAAGjggMmMIIDIjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEJmjiPU 0fBDaMTHXK+Mx8Pr7gEaMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIQY2VqcGguYWN0YXZpYS5jeoIM Y2VqcGguc3p1LmN6MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLf EwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw gasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSBy ZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3Jk YW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6 Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEEBgorBgEEAdZ5AgQCBIH1 BIHyAPAAdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWMe+d4D AAAEAwBGMEQCIBpXWsjp1kODyU5WvYNHFCkyJfNhCiW4rK66z1ym4EJAAiAzUo7u uqG3o+YV1uVUIRGtkVYSVUgAN8Ea6gy6LZ0stgB3ACk8UZZUyDlluqpQ/FgH1Ldv v1h6KXLcpMMM9OVFR/R4AAABYx753e0AAAQDAEgwRgIhAKYH7aYiHO1Dr1hKMvfF pRZvHbZipJMkGt2De3dUZ6CLAiEA17OwcBB7UGxcsULZ0GCxYkuJqC4z1x5hVddU YjtEE3QwDQYJKoZIhvcNAQELBQADggEBABVR5hppEIRXz/yocU+xYyGLZwIhLtRs HcgmuavlsflffBdyb9cHtEO+EmsZio0tZYVItfwuaWdrVUjfeZpK3Ssiur2U6jds hUJvwsWr4APYeQhGy2S4pj5mG+zzNQ1D3y24dmjCy8jXK6A4sVFruCMTY0AwrZDs RyJ0ghsVYmKEy1t5NxW5tIN7kHafPuckqAtXCBwJJWxXECcwblg1V/GQ2aI2dN1D rpJeJxZgFAPRXTbWuFdQNIkcMJck9byVLxm4jQnYKNGJryxGo95SqiXr5M/5gC0o 9oGwT/GIDEfu5+xfZRNiMlQdnV6glGl+8QNPX04GgtwiiKxHPoF/4Jo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsnaLepMSf8AUkvqqfeUp oSyqy6prSp5CPdxhIxvNT6ghGInxALxbjYZzxFoii3ZULrwDSsMBK9ivdwCk1upF 2TUdoMizy/12Xv5k4szOJ6i9jVgnnNiQYD4RPsKLgdBcvvRMMxpmfWJx4KrlwSoV AjEaLLXKXR5ahTLT4QFWifsLQ2q+cwtBK9/WBBpJocfPFfS41znwvZg5c1zYzm04 2kDSFaWrxX9CDSFBwIcZSCcPEd7bcMD79ZxQ1T25T1IyzL1btdrDQKiGBGkoKH3K rUUYNBYdGWWQbVsXdxwIsOUUtNj74iumUH6q4bwIrh+M/4NuA+mV5C4U0lHXaKsc I56jSvV1cMbHAlWwJPA4gohMTQ58TiLyWDjJGPtd2j8QhrGbMdZdrKormUroMu3s ub9Dc+QK5rTvdOoamfrLTqnSASbVKHTohgo7iJeOjVdbmb0G3oKrpCtJtQrsOh5j Pdi9byVb/Cd8g0PlwEdgV3scfxyCn2f6Yo1WZdLYrGFMPzF0KveYrJKbLURZCYqT UCrDBBSm2gcgfV/WvdZYgGrGuiQdhaiV3QyZUWnSU/fJvNFsLGmThFYjw337TMIq ADKcGK+/V69UcKEfMU4w/pbrq/5MjRunu5lHemGxDzqeD6mIsSAdmr2tCH2UX3fK UGsfuSfJBwSljC6oN+077b8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 393458559949531029406362400394675304573388 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-02 02:51:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-31 02:51:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cejph.szu.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728065787660635798200946013139967537011224998086219480151730350138869452875164024428366115743003721343597833042014070006904523142411119142526541249657728713358762159668778834961479289542074303518757971537640237455218662075193232903687255574883442041532804391886709264128868403530134428560472579115231205519948818051717952583829598134504240203696044253701063405986300957014968224052280854869753954546804708988156309783661059300350105733987474733117562547948186961684392716345233267475621993063323792669924613838711517431590144294344250829706721106712877156284531814471884629396151616370150282858785179005672319680976099743347741774518321009046042022827019589146102624400630900290925252855144724357140324236764215804341607782828361124864372624114502238760374983456049647103722976026540600537159652805360071938790014628543635743579165292160506648213306871226589435604644339556465522656084586779541865215569150225075072810204410362571087710579581656454483914879518633603501062123626448117248526025051613721953422396895468042732759171804797478577652036825420728774136981003157651765302479844922376961757644509572054270636640380295060375113062000564855321339779228772400546414183135416184212019690493667419080467569185606207277646003039679 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 42668e23d4d1f04368c4c75caf8cc7c3ebee011a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cejph.actavia.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cejph.szu.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001631ef9de03000004030046304402201a575ac8e9d64383c94e56bd834714293225f3610a25b8acaebacf5ca6e04240022033528eeebaa1b7a3e615d6e5542111ad91561255480037c11aea0cba2d9d2cb6007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001631ef9dded0000040300483046022100a607eda6221ced43af584a32f7c5a5166f1db662a493241add837b775467a08b022100d7b3b070107b506c5cb142d9d060b1624b89a82e33d71e6155d754623b441374 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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