www.freeukgenealogy.org.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:9d:9b:2a:66:43:b3:3e:dd:6c:8f:af:76:2a:26:bc:c2:68 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.freeukgenealogy.org.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9d:9b:2a:66:43:b3:3e:dd:6c:8f:af:76:2a:26:bc:c2:68Serial Number (int): 314967439891852339403412525683416502157928
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4b:df:07:e6:84:6d:81:5a:3a:4f:51:68:d4:a8:ed:3e:ed:02:38:e6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 96:09:de:23:05:98:0b:db:0f:87:db:bb:21:60:fe:c2:c5:91:17:38
Fingerprint (sha256): 29:02:4a:4a:c5:26:d5:5e:c4:de:c6:35:ff:70:dd:9b:86:5d:c2:15:98:03:2b:a4:61:53:74:e2:c7:a4:86:fb
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.freeukgenealogy.org.uk
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.freeukgenealogy.org.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
freeukgenealogy.org.uk
mail.freeukgen.org.uk
www.freeukgenealogy.org.uk
mail.freeukgen.org.uk
www.freeukgenealogy.org.uk
Other certificates including the domain name freeukgenealogy.org.uk
(limited to 100 certificates)
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
www.freeukgenealogy.org.uk
freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
freeukgenealogy.org.uk
craft1.freeukgen.org.uk
freeukgenealogy.org.uk
craft1.freeukgen.org.uk
wp1.freeukgen.org.uk
freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
craft2.freeukgen.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
www.freeukgenealogy.org.uk
wp1.freeukgen.org.uk
wp1.freeukgen.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
freeukgenealogy.org.uk
craft1.freeukgen.org.uk
freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
www.freeukgenealogy.org.uk
freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
freeukgenealogy.org.uk
craft1.freeukgen.org.uk
freeukgenealogy.org.uk
craft1.freeukgen.org.uk
wp1.freeukgen.org.uk
freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
craft2.freeukgen.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
www.freeukgenealogy.org.uk
wp1.freeukgen.org.uk
wp1.freeukgen.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
freeukgenealogy.org.uk
Certificate
The complete raw certificate details for www.freeukgenealogy.org.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgISA52bKmZDsz7dbI+vdiomvMJoMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA4MDEwMTMxMDBaFw0x NzEwMzAwMTMxMDBaMCUxIzAhBgNVBAMTGnd3dy5mcmVldWtnZW5lYWxvZ3kub3Jn LnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVRuUru6hIqBbZjU qhplTHjg6ma4sZQ0oEqs6az6NZtduhyHxJLxLZIAgUjSMkBvZyJbyXAdJXbqDyAc Cd89JkQmqmCW2WZpAbmwr+OEgcF+oIdxCRoLSfDj0jQp7SZEQ8KCar4LNQ9wNJAZ Za3GoXwiu2hmquDgOCAPkp9kQ17GDsOo3ExKmnC9Sz/+D80Gx5UP5ldGo5CWN79P BltHVRQb0rNQwXT8RxYE5OiGUqP9nlYtU6fzrIUV12AkcriAsyQJ9YYhlDnygnMn TNUjesGLUmR7uNZ9PukEFb4+/4rk4Hy5mmF1ETfQeB3r5Dbm9Qxd4wl3MjNafjGA 6b87MwIDAQABo4ICSTCCAkUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRL3wfmhG2B WjpPUWjUqO0+7QI45jAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMFQGA1UdEQRNMEuCFmZyZWV1a2dlbmVhbG9neS5vcmcu dWuCFW1haWwuZnJlZXVrZ2VuLm9yZy51a4Iad3d3LmZyZWV1a2dlbmVhbG9neS5v cmcudWswgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHW MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYB BQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1 cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdp dGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNl bmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAMXN6dQqX VtifFN3T2YR0w54noRSNa/Js2uSB4EC8nYrc5YtLKPjAuiUgg6O0NL5AfJM2/1wM n1etggaMQ9+HNTAgLy53Hwq7srYvDgvDFQa64ngq9SpmEzJC6wFyaHBMwTTeue7O jNj9rfmc1mVz8d3lqfdugDe/AOdjzj4uINtiPADdAue6BVMS5DoVH66HT4slqWzv Hh+Y+NWxaHCwVKdU3608JuKR2on1Znbzxn+elKt39FDEfzrIiJJtms213orOq6rR iCDW63Ym1hbKfFg9E4ttsinNklc6CyhtOaU7Nijs2FU5jtzhzl9euAmGwtmwntkf Gie/3Jpo0Gwlwg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVRuUru6hIqBbZjUqhpl THjg6ma4sZQ0oEqs6az6NZtduhyHxJLxLZIAgUjSMkBvZyJbyXAdJXbqDyAcCd89 JkQmqmCW2WZpAbmwr+OEgcF+oIdxCRoLSfDj0jQp7SZEQ8KCar4LNQ9wNJAZZa3G oXwiu2hmquDgOCAPkp9kQ17GDsOo3ExKmnC9Sz/+D80Gx5UP5ldGo5CWN79PBltH VRQb0rNQwXT8RxYE5OiGUqP9nlYtU6fzrIUV12AkcriAsyQJ9YYhlDnygnMnTNUj esGLUmR7uNZ9PukEFb4+/4rk4Hy5mmF1ETfQeB3r5Dbm9Qxd4wl3MjNafjGA6b87 MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 314967439891852339403412525683416502157928 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-01 01:31:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-30 01:31:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.freeukgenealogy.org.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22890767651994648477370842225374800105317606434366634435974162893669961094410589851889325244804520953209041289637238998611391620962922304902130404361554131250093819761342175095108154873794139865087535339400267460120992853797838763212481293478927376039098791278770227356537792014698815016568199894486289741672731017320499191633121546708434513407153325468364430937876560053076015056517529965144167018745738182911323968988169956185058812607419490784369682402977178460267572594050148762408479291950261103658316297113646986842342187068221271100397320162635929025818157043928574308992565035981050957683134235696814006156083 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4bdf07e6846d815a3a4f5168d4a8ed3eed0238e6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeukgenealogy.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.freeukgen.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freeukgenealogy.org.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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