qafkyy.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:77:71:44:49:c2:b0:9a:8c:6d:df:e8:cd:6e:37:53:53:6c was issued on by Let's Encrypt.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=qafkyy.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:77:71:44:49:c2:b0:9a:8c:6d:df:e8:cd:6e:37:53:53:6cSerial Number (int): 301981016794623313747732283967148790076268
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 3b:ca:ce:52:36:a8:fe:fd:d0:58:45:c5:6c:03:75:49:43:a4:3e:ce
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ff:7d:9e:18:7d:67:3b:2e:4f:24:a1:e0:83:e8:3f:dd:45:6f:04:b4
Fingerprint (sha256): 2c:bd:41:fc:61:cc:1c:42:d0:18:40:16:bd:6f:d6:ef:e3:5f:f8:ed:d9:c4:97:6e:ea:b8:a2:c3:0b:94:3f:61
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate qafkyy.com
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for qafkyy.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gthyhotel.com
gthyhotel.hanfacar.com
int-erd.hanfacar.com
int-erd.org
mail.gthyhotel.com
mail.int-erd.org
mail.qafkyy.com
mail.ziricotradersltd.com
qafkyy.com
qafkyy.hanfacar.com
www.gthyhotel.com
www.gthyhotel.hanfacar.com
www.int-erd.hanfacar.com
www.int-erd.org
www.qafkyy.com
www.qafkyy.hanfacar.com
www.ziricotradersltd.com
www.ziricotradersltd.hanfacar.com
ziricotradersltd.com
ziricotradersltd.hanfacar.com
gthyhotel.hanfacar.com
int-erd.hanfacar.com
int-erd.org
mail.gthyhotel.com
mail.int-erd.org
mail.qafkyy.com
mail.ziricotradersltd.com
qafkyy.com
qafkyy.hanfacar.com
www.gthyhotel.com
www.gthyhotel.hanfacar.com
www.int-erd.hanfacar.com
www.int-erd.org
www.qafkyy.com
www.qafkyy.hanfacar.com
www.ziricotradersltd.com
www.ziricotradersltd.hanfacar.com
ziricotradersltd.com
ziricotradersltd.hanfacar.com
Other certificates including the domain name qafkyy.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for qafkyy.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgISA3dxREnCsJqMbd/ozW43U1NsMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzAxMjcyMTMwMDBaFw0x NzA0MjcyMTMwMDBaMBUxEzARBgNVBAMTCnFhZmt5eS5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQC2TBGfbVVV5FCwAbRvsbZiFABaCBwcy8+NHeMx ajjr17tos4WCskTrfzz2yfohBudsY+j4c8bO4A72MxdDhdC8OTvB1bHd7TK47P5q CKNOvozc8928b4RxDQ5s1OfEBtDE6z7JB4Ps3mJcGpRFPBLIQPtnTECtAaI7tM6/ W2O+iBbov75yckh9EbCzjgzCwoAw6JOhQ7syXKBoe4i5RBc2QNYfbxy+x/kKDId6 W0X7JBySvdCW6f4XgoUS1xrZlkjcOdXPh1ipbpnh0drfFOQAayWwzPtD/WLRxdxm +/fkiajqS8n8ZPjLhFRJCwkyI4iexMkNdFdGnwElLwJyWetdAgMBAAGjggO3MIID szAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDvKzlI2qP790FhFxWwDdUlDpD7OMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMHAGCCsGAQUFBwEBBGQwYjAv BggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv MIIBvwYDVR0RBIIBtjCCAbKCDWd0aHlob3RlbC5jb22CFmd0aHlob3RlbC5oYW5m YWNhci5jb22CFGludC1lcmQuaGFuZmFjYXIuY29tggtpbnQtZXJkLm9yZ4ISbWFp bC5ndGh5aG90ZWwuY29tghBtYWlsLmludC1lcmQub3Jngg9tYWlsLnFhZmt5eS5j b22CGW1haWwuemlyaWNvdHJhZGVyc2x0ZC5jb22CCnFhZmt5eS5jb22CE3FhZmt5 eS5oYW5mYWNhci5jb22CEXd3dy5ndGh5aG90ZWwuY29tghp3d3cuZ3RoeWhvdGVs LmhhbmZhY2FyLmNvbYIYd3d3LmludC1lcmQuaGFuZmFjYXIuY29tgg93d3cuaW50 LWVyZC5vcmeCDnd3dy5xYWZreXkuY29tghd3d3cucWFma3l5LmhhbmZhY2FyLmNv bYIYd3d3Lnppcmljb3RyYWRlcnNsdGQuY29tgiF3d3cuemlyaWNvdHJhZGVyc2x0 ZC5oYW5mYWNhci5jb22CFHppcmljb3RyYWRlcnNsdGQuY29tgh16aXJpY290cmFk ZXJzbHRkLmhhbmZhY2FyLmNvbTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYL KwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9u bHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGlu IGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0 IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEB CwUAA4IBAQBab0yCtX1fzwnR7FazltiOODMqXhoi2OXNNYalyeNAeRmI3NgIsIee nD83K3fYZCCEY0V46/p9xAtPXTDKFA9J95QmVb3HSpWGyxFgBRlpJxDJJDfaDXVw gRXqotIA5VpHkbXpTR50rrg79n6fD6kCy85wogv+WAWFfSzBv8XtP4g1WEOphmfs VxbubwgTWzEmYic1pTNVO5lEvQhgWhJlBMt+WXXZ0/sJLjHeTpg3XEU1CFyvnI6D anzyz0BVNwAEgimbihBAom7YlEwCd/wjrgYR/KlwGodJsWAkT4u8kPKSLdri6Uia 5NR8Zw4lpRKw9C4j7JZCZCPHWV3byDz8 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkwRn21VVeRQsAG0b7G2 YhQAWggcHMvPjR3jMWo469e7aLOFgrJE63889sn6IQbnbGPo+HPGzuAO9jMXQ4XQ vDk7wdWx3e0yuOz+agijTr6M3PPdvG+EcQ0ObNTnxAbQxOs+yQeD7N5iXBqURTwS yED7Z0xArQGiO7TOv1tjvogW6L++cnJIfRGws44MwsKAMOiToUO7MlygaHuIuUQX NkDWH28cvsf5CgyHeltF+yQckr3Qlun+F4KFEtca2ZZI3DnVz4dYqW6Z4dHa3xTk AGslsMz7Q/1i0cXcZvv35Imo6kvJ/GT4y4RUSQsJMiOInsTJDXRXRp8BJS8Cclnr XQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 301981016794623313747732283967148790076268 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-27 21:30:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-27 21:30:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qafkyy.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23012882446343252472993239371269374807375118056605232252796644505313010074150236348420208162821655349523140492482051944526903580210639676284715429394334724676815176171901414217048047487296104716321431415153512255834531461773245951866407630369041999438748401110751715033722401973520581403439530285946750535411806601275690224309743406123406873545250783650450652285079671746727718916090654644334498330508254666472369707753894516621764228811783123692223464871224727880554066434810359360484954343508799951830038128713392426973618219508755536866795370667507160758176858442023979775278440161871426759475984266658674470677341 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3bcace5236a8fefdd05845c56c03754943a43ece . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (438 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gthyhotel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gthyhotel.hanfacar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-erd.hanfacar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-erd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gthyhotel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.int-erd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.qafkyy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ziricotradersltd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qafkyy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qafkyy.hanfacar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gthyhotel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gthyhotel.hanfacar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.int-erd.hanfacar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.int-erd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qafkyy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qafkyy.hanfacar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ziricotradersltd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ziricotradersltd.hanfacar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziricotradersltd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziricotradersltd.hanfacar.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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