aviatavi.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:0f:5d:c7:ac:02:73:46:a8:ba:b4:cb:4a:96:a7:ce:d2:a9 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=aviatavi.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:0f:5d:c7:ac:02:73:46:a8:ba:b4:cb:4a:96:a7:ce:d2:a9Serial Number (int): 266565748258546246849554809653678377456297
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a7:be:90:91:7f:1a:61:4b:99:ed:2a:96:37:37:4c:72:d9:b6:c7:b9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6e:18:51:e4:74:22:15:a3:0e:bc:11:cc:29:38:ca:34:cd:b1:8e:94
Fingerprint (sha256): 3d:9d:ef:be:87:6a:a7:e3:2e:8d:5b:1f:07:d0:d0:0c:3d:73:39:55:83:fc:eb:33:b9:a9:3a:2c:c9:0f:1c:df
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate aviatavi.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aviatavi.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aviatavi.com
Other certificates including the domain name aviatavi.com
(limited to 100 certificates)
www.higgsfoundations.com
admin.staging.rover.io
www.cachorrosaudavel.com.br
sendsms.cc
www.aviatavi.com
accribos.no
feedback.dev.hundredxinc.com
app.xprep.co
*.firebaseapp.com
clearwatersadventure.co.zw
*.firebaseapp.com
eden-test-firebase.edenfarm.tech
totalbienes.com
*.firebaseapp.com
unitrans.me
sodaden.com
styles.periscopeholdings.cloud
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
monjdev.com
*.firebaseapp.com
aviatavi.com
travexagency.com
*.firebaseapp.com
*.firebaseapp.com
xx.dev.avatar64.com
blacklisttourist.com
*.firebaseapp.com
fireflow.xyz
www.ashwindevendran.com
www.lotez.com
*.firebaseapp.com
app.kwerk.co
www.howtomakegames.academy
webstore.nearbymarts.com
muesfile.com
preparedhouston.com
www.travlocally.com
portal.sandbox.thatch.co
*.firebaseapp.com
agenda.zipper.com.co
www.lk-panenka.cz
fiskos.org
merterim.dev
*.firebaseapp.com
*.firebaseapp.com
www.remadis.eu
www.aviatavi.com
*.firebaseapp.com
app.worldtable.co
*.firebaseapp.com
commutelist.com
lakeandlandhomes.com
q3-track.dpdlocal.co.uk
gotointeractive.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
www.agroponik.com
www.liquidityai.io
*.firebaseapp.com
pinoylottoapp.theusefulapps.com
www.tutorialisland.net
*.firebaseapp.com
*.firebaseapp.com
sidecart.thehellopos.com
groovytask-dev.nerdyhippie.com
*.firebaseapp.com
*.firebaseapp.com
pitchxo.com
www.jawas.io
aviatavi.com
onewwa.com
www.tipa.site
*.firebaseapp.com
lakeandlandhomes.com
*.firebaseapp.com
skillsearchwesa.bcg.com
aviatavi.com
*.firebaseapp.com
super.smon.me
www.nextflick.co
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
q3-track.dpdlocal.co.uk
greentag.app
*.firebaseapp.com
holonia.aviatavi.com
www.aviatavi.com
aviatavi.com
liquidityai.io
ww.bamideas.com
liquidityai.io
app.kwerk.co
admin.staging.rover.io
www.cachorrosaudavel.com.br
sendsms.cc
www.aviatavi.com
accribos.no
feedback.dev.hundredxinc.com
app.xprep.co
*.firebaseapp.com
clearwatersadventure.co.zw
*.firebaseapp.com
eden-test-firebase.edenfarm.tech
totalbienes.com
*.firebaseapp.com
unitrans.me
sodaden.com
styles.periscopeholdings.cloud
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
monjdev.com
*.firebaseapp.com
aviatavi.com
travexagency.com
*.firebaseapp.com
*.firebaseapp.com
xx.dev.avatar64.com
blacklisttourist.com
*.firebaseapp.com
fireflow.xyz
www.ashwindevendran.com
www.lotez.com
*.firebaseapp.com
app.kwerk.co
www.howtomakegames.academy
webstore.nearbymarts.com
muesfile.com
preparedhouston.com
www.travlocally.com
portal.sandbox.thatch.co
*.firebaseapp.com
agenda.zipper.com.co
www.lk-panenka.cz
fiskos.org
merterim.dev
*.firebaseapp.com
*.firebaseapp.com
www.remadis.eu
www.aviatavi.com
*.firebaseapp.com
app.worldtable.co
*.firebaseapp.com
commutelist.com
lakeandlandhomes.com
q3-track.dpdlocal.co.uk
gotointeractive.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
www.agroponik.com
www.liquidityai.io
*.firebaseapp.com
pinoylottoapp.theusefulapps.com
www.tutorialisland.net
*.firebaseapp.com
*.firebaseapp.com
sidecart.thehellopos.com
groovytask-dev.nerdyhippie.com
*.firebaseapp.com
*.firebaseapp.com
pitchxo.com
www.jawas.io
aviatavi.com
onewwa.com
www.tipa.site
*.firebaseapp.com
lakeandlandhomes.com
*.firebaseapp.com
skillsearchwesa.bcg.com
aviatavi.com
*.firebaseapp.com
super.smon.me
www.nextflick.co
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
q3-track.dpdlocal.co.uk
greentag.app
*.firebaseapp.com
holonia.aviatavi.com
www.aviatavi.com
aviatavi.com
liquidityai.io
ww.bamideas.com
liquidityai.io
app.kwerk.co
Certificate
The complete raw certificate details for aviatavi.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAw9dx6wCc0aourTLSpanztKpMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjExMTUyMjE1MDBaFw0x NzAyMTMyMjE1MDBaMBcxFTATBgNVBAMTDGF2aWF0YXZpLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBANXaPCroTE7JiayS1Dmu2EUcfDSSP1CLwGdS Vpq2DIuq3xp9UGiDvVHIjeuaD7eBh0DFlV1quA1bXvCtrJmOotB8sav+ofeV/1Fk 01qdxX69vGtQ0uCg+xeJJT2w+l3wTtyfrPUOcBfLpaMNcQg+LMU2lzIKvbjH/ih7 0DHzJjgq0YdmfoiiA9eUomlndz9+Npfui+otMm05Vh80ZHodhclpuyvult2Lk6xr TH91PQysiRAQtQUp40MQbUtUIWBRwdfwSiK1lWODjYRY1jUZ3f3GvZra1VH3wiI1 pUWMU8FuNafLjUqMuLb9Qm/P2LgrCyzWlZBaEJSVOD4xcCUUtt8CAwEAAaOCAg0w ggIJMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUp76QkX8aYUuZ7SqWNzdMctm2x7kw HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUHAQEEZDBi MC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wFwYDVR0RBBAwDoIMYXZpYXRhdmkuY29tMIH+BgNVHSAEgfYwgfMwCAYGZ4EM AQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0 ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5k IG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kg Zm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJ KoZIhvcNAQELBQADggEBACtXqFvjwmLRGv+/Eo9yQv4ybKBQK9/KmWiXgbdSswx/ xPpAWo8e0fshId8aQTNjCSVJsW4rlUR6SbZNvnApIXsrWdQ99rMTg7Rp2qsAr3yX pBkVhXyTwTcYRSgigai1Ohce6XButXASi8Yr8KOODMwPi9tSv+M+PteZhuI8xGvx wmL5q1smhlud+WiqsWNbjroZISNJ8v5pAqpTt0FbdWnvEuBpWxXopVk2haemSd7t 0WnPXXyF9NIiTitxL3PO0Ne9ny//4iXHzaGFIMeQtKwVJDCzZhIPA+YL26dFZoKI HtGa337JaWJuUVgVh59yzj4bQtWV+ug9ERJzAq89mnU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1do8KuhMTsmJrJLUOa7Y RRx8NJI/UIvAZ1JWmrYMi6rfGn1QaIO9UciN65oPt4GHQMWVXWq4DVte8K2smY6i 0Hyxq/6h95X/UWTTWp3Ffr28a1DS4KD7F4klPbD6XfBO3J+s9Q5wF8ulow1xCD4s xTaXMgq9uMf+KHvQMfMmOCrRh2Z+iKID15SiaWd3P342l+6L6i0ybTlWHzRkeh2F yWm7K+6W3YuTrGtMf3U9DKyJEBC1BSnjQxBtS1QhYFHB1/BKIrWVY4ONhFjWNRnd /ca9mtrVUffCIjWlRYxTwW41p8uNSoy4tv1Cb8/YuCsLLNaVkFoQlJU4PjFwJRS2 3wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 266565748258546246849554809653678377456297 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-15 22:15:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-13 22:15:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aviatavi.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26996374661815261501695419830793353617641190623379759147879728700624058441085763759981497031569133176747074122519270912624778899749528119865031605082291596182245703379205443432189620928469372589052303239459838527356091269413388625530330678557233351663232757937629481296809230624497280342314042286832922590535740515583915746160705939175382143969103202652378171915982734991090663263005150668905971798457744935818086627989417972371448579447735346732882573931967763686886704639591098935938086939942479349338432871629811640226238398950448866201111520949533881779523744713884991479615866450367303015893144094996840985179871 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a7be90917f1a614b99ed2a9637374c72d9b6c7b9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviatavi.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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