xn--t-9ga.vn
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:16:eb:bc:a0:de:90:31:4a:07:f6:06:75:c6:47:76:7e:d6 was issued on by Let's Encrypt.
With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=xn--t-9ga.vn
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:16:eb:bc:a0:de:90:31:4a:07:f6:06:75:c6:47:76:7e:d6Serial Number (int): 269136417861179060004607858774972919348950
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1d:d5:48:07:59:63:a8:e8:55:1e:ce:25:19:96:32:34:75:1f:f1:04
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c7:df:c7:d6:f1:75:c6:54:1f:6f:10:bd:12:7d:d9:13:05:ca:2f:23
Fingerprint (sha256): 37:62:8a:0b:30:76:72:04:f6:7c:77:20:35:b6:e8:88:49:b5:5b:17:53:f3:2a:53:70:3e:c4:2f:b5:a5:24:db
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate xn--t-9ga.vn
14
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for xn--t-9ga.vn
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bakery.happycloud.vn
bakery.kitafood.vn
cus.happycloud.vn
kitafood.happycloud.vn
mail.xn--t-9ga.vn
viquang.happycloud.vn
www.bakery.happycloud.vn
www.cus.happycloud.vn
www.kitafood.happycloud.vn
www.viquang.happycloud.vn
www.xn--t-9ga.happycloud.vn
www.xn--t-9ga.vn
xn--t-9ga.happycloud.vn
xn--t-9ga.vn
bakery.kitafood.vn
cus.happycloud.vn
kitafood.happycloud.vn
mail.xn--t-9ga.vn
viquang.happycloud.vn
www.bakery.happycloud.vn
www.cus.happycloud.vn
www.kitafood.happycloud.vn
www.viquang.happycloud.vn
www.xn--t-9ga.happycloud.vn
www.xn--t-9ga.vn
xn--t-9ga.happycloud.vn
xn--t-9ga.vn
Other certificates including the domain name xn--t-9ga.vn
(limited to 100 certificates)
cus.ihappy.asia
vietgianguyen.duy9.name.vn
xn--t-9ga.vn
xn--t-9ga.vn
xn--t-9ga.vn
xn--t-9ga.vn
xn--t-9ga.xn--ihappy-uta.vn
xn--t-9ga.vn
xn--t-9ga.vn
xn--t-9ga.vn
xn--t-9ga.vn
tu.ihappy.info
ingersollrandvietnam.com
www.vnmmoringa.com
vnmmoringa.com
xn--t-9ga.vn
xn--t-9ga.vn
xn--t-9ga.happycloud.vn
dhqe.vn
cuahangvaituananh.com
movenpick-landingpage.ihappy.info
vietgianguyen.duy9.name.vn
xn--t-9ga.vn
xn--t-9ga.vn
xn--t-9ga.vn
xn--t-9ga.vn
xn--t-9ga.xn--ihappy-uta.vn
xn--t-9ga.vn
xn--t-9ga.vn
xn--t-9ga.vn
xn--t-9ga.vn
tu.ihappy.info
ingersollrandvietnam.com
www.vnmmoringa.com
vnmmoringa.com
xn--t-9ga.vn
xn--t-9ga.vn
xn--t-9ga.happycloud.vn
dhqe.vn
cuahangvaituananh.com
movenpick-landingpage.ihappy.info
Certificate
The complete raw certificate details for xn--t-9ga.vn in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgISAxbrvKDekDFKB/YGdcZHdn7WMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA2MjQxNzQwMDBaFw0x NzA5MjIxNzQwMDBaMBcxFTATBgNVBAMTDHhuLS10LTlnYS52bjCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAPeAwJsHj0g/yuwzQuBahTHrF+BQ9vtH77pS NwTwz5OS96A6dSauZSIeSVSC9M1NDVcs8qoJbvNJQUhmGa5iUU2EbOd3N8IRE4WM b8jE8uxknAXcctHFPzxdsJa6JViu25AfnsQo/pmeSi1UnKH0v5wYVXyW13BBDJKo A34i3nOK4wFEHg2wwFjaJSwGfxFFY7ZqfC+eaKRzPuevLG+aobHToMMY586riCuF DGsb6wHy/NPCaAAqcQoxzKY6N1YWXan0RIQ9DTZ+mZIySTNDI/oMrgLrW6MSbsZ5 bG52EP9GyEtHZO/XUViN+2vuyNDsVtszQlu7YC2YHjIMsUPf4mECAwEAAaOCA0Ew ggM9MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUHdVIB1ljqOhVHs4lGZYyNHUf8QQw HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzCCAUoGA1UdEQSCAUEwggE9ghRiYWtlcnkuaGFwcHljbG91ZC52boISYmFrZXJ5 LmtpdGFmb29kLnZughFjdXMuaGFwcHljbG91ZC52boIWa2l0YWZvb2QuaGFwcHlj bG91ZC52boIRbWFpbC54bi0tdC05Z2Eudm6CFXZpcXVhbmcuaGFwcHljbG91ZC52 boIYd3d3LmJha2VyeS5oYXBweWNsb3VkLnZughV3d3cuY3VzLmhhcHB5Y2xvdWQu dm6CGnd3dy5raXRhZm9vZC5oYXBweWNsb3VkLnZughl3d3cudmlxdWFuZy5oYXBw eWNsb3VkLnZught3d3cueG4tLXQtOWdhLmhhcHB5Y2xvdWQudm6CEHd3dy54bi0t dC05Z2Eudm6CF3huLS10LTlnYS5oYXBweWNsb3VkLnZuggx4bi0tdC05Z2Eudm4w gf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIw gZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5 IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhl IENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0 Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEARowFUxGs5wi85k1m Ta8dfMvVQAjJoqpQSJejyw00nSlGUn8vVjRb4+3Pcav6PVWP6/oMhCNc4s+MbVxC 2LhrdiOiL3tLLlI1MRhqdeDJFjDAlN0OQ5Vd1dxPn6+J5QHP+uPwi5wYKzcBgj2S QD8QRpSYHlyNPaRN4wAe45obpdhka9K6K3zgDHMufpCdYz23kg7jyAIY3F2SteEH CTxUiWxCHfqyNZpv2Wqg9uEWvNv67SjAHYOkkUWV1ab2RcOh5B4HWBbPO+68eYc7 5Bp/mw+BgeXRza0W5/bLvQ5vdALogfVh8fnVaUlIFGVY7ll812MdtNQu38cUXDHR bDugNw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA94DAmwePSD/K7DNC4FqF MesX4FD2+0fvulI3BPDPk5L3oDp1Jq5lIh5JVIL0zU0NVyzyqglu80lBSGYZrmJR TYRs53c3whEThYxvyMTy7GScBdxy0cU/PF2wlrolWK7bkB+exCj+mZ5KLVScofS/ nBhVfJbXcEEMkqgDfiLec4rjAUQeDbDAWNolLAZ/EUVjtmp8L55opHM+568sb5qh sdOgwxjnzquIK4UMaxvrAfL808JoACpxCjHMpjo3VhZdqfREhD0NNn6ZkjJJM0Mj +gyuAutboxJuxnlsbnYQ/0bIS0dk79dRWI37a+7I0OxW2zNCW7tgLZgeMgyxQ9/i YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 269136417861179060004607858774972919348950 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-24 17:40:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-22 17:40:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn--t-9ga.vn' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31244351484386130258923476778967883975267063521637281574952640941740816680645084228194544508400050551339884382803639686767210359741619124356748794398320951512786923040639224319152264629856107545813209885455491219374972590607761316693741785110646962461927166340921227902874358410555223900242407060937631301783994487286649287051203371737179006397689742164947469208219040750391247602047397218092247446078463452409727745334115135495303862534686994536561247483823218794763053263938862567283786572879799539991610331546147758510470800294742697106670745822925732908743796832080935918500252167658933783087146499404596632347233 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1dd548075963a8e8551ece2519963234751ff104 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (321 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakery.happycloud.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakery.kitafood.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cus.happycloud.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitafood.happycloud.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.xn--t-9ga.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viquang.happycloud.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bakery.happycloud.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cus.happycloud.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitafood.happycloud.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viquang.happycloud.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--t-9ga.happycloud.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--t-9ga.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--t-9ga.happycloud.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--t-9ga.vn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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