www.bodosom.net
Issued by Let's Encrypt Authority X1
About this certificate
This digital certificate with serial number 01:6d:ec:59:be:70:fc:78:59:fc:0c:37:7f:13:76:df:af:75 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.bodosom.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:6d:ec:59:be:70:fc:78:59:fc:0c:37:7f:13:76:df:af:75Serial Number (int): 124517227710177703523724365260216116162421
Serial Number lenght: 137 bits, 18 octets
SubjectKeyId: e1:2d:04:61:d5:be:44:76:e9:86:84:71:4b:c6:a2:b3:81:9a:93:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c3:7b:5a:ff:be:c5:3f:13:dc:1e:5f:0e:ef:db:b1:6b:fc:7a:9d:02
Fingerprint (sha256): 3f:0f:16:d5:83:ba:dd:95:21:b0:e3:26:e4:7f:3b:47:54:b1:5b:1c:d4:76:5d:6a:08:5a:3b:d2:f5:fd:9e:6e
Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x1.letsencrypt.org/Check the revocation status for certificate www.bodosom.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.bodosom.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.bodosom.net
bodosom.net
bodosom.net
Other certificates including the domain name bodosom.net
(limited to 100 certificates)
bodosom.net
home.bodosom.net
bodosom.net
home.bodosom.net
home.bodosom.net
home.bodosom.net
bodosom.net
home.bodosom.net
home.bodosom.net
home.bodosom.net
home.bodosom.net
bodosom.net
bodosom.net
bodosom.net
www.bodosom.net
bodosom.net
home.bodosom.net
bodosom.net
bodosom.net
home.bodosom.net
bodosom.net
bodosom.net
home.bodosom.net
home.bodosom.net
bodosom.net
bodosom.net
home.bodosom.net
www.bodosom.net
bodosom.net
home.bodosom.net
bodosom.net
home.bodosom.net
home.bodosom.net
home.bodosom.net
home.bodosom.net
bodosom.net
bodosom.net
www.bodosom.net
bodosom.net
home.bodosom.net
home.bodosom.net
bodosom.net
home.bodosom.net
bodosom.net
aves-apis.us
home.bodosom.net
www.bodosom.net
bodosom.net
bodosom.net
home.bodosom.net
home.bodosom.net
bodosom.net
bodosom.net
home.bodosom.net
bodosom.net
home.bodosom.net
bodosom.net
home.bodosom.net
home.bodosom.net
bodosom.net
home.bodosom.net
bodosom.net
home.bodosom.net
bodosom.net
bodosom.net
bodosom.net
home.bodosom.net
home.bodosom.net
bodosom.net
home.bodosom.net
home.bodosom.net
home.bodosom.net
bodosom.net
home.bodosom.net
home.bodosom.net
home.bodosom.net
home.bodosom.net
bodosom.net
bodosom.net
bodosom.net
www.bodosom.net
bodosom.net
home.bodosom.net
bodosom.net
bodosom.net
home.bodosom.net
bodosom.net
bodosom.net
home.bodosom.net
home.bodosom.net
bodosom.net
bodosom.net
home.bodosom.net
www.bodosom.net
bodosom.net
home.bodosom.net
bodosom.net
home.bodosom.net
home.bodosom.net
home.bodosom.net
home.bodosom.net
bodosom.net
bodosom.net
www.bodosom.net
bodosom.net
home.bodosom.net
home.bodosom.net
bodosom.net
home.bodosom.net
bodosom.net
aves-apis.us
home.bodosom.net
www.bodosom.net
bodosom.net
bodosom.net
home.bodosom.net
home.bodosom.net
bodosom.net
bodosom.net
home.bodosom.net
bodosom.net
home.bodosom.net
bodosom.net
home.bodosom.net
home.bodosom.net
bodosom.net
home.bodosom.net
bodosom.net
home.bodosom.net
bodosom.net
bodosom.net
bodosom.net
home.bodosom.net
Certificate
The complete raw certificate details for www.bodosom.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGEjCCBPqgAwIBAgISAW3sWb5w/HhZ/Aw3fxN23691MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTExMzAxNjE4MDBaFw0x NjAyMjgxNjE4MDBaMBoxGDAWBgNVBAMTD3d3dy5ib2Rvc29tLm5ldDCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAPtBQL/X8W9QiBKxeQJNC5UwoOCbqs3s uskANI7/Oz7OzvFlRWd7Z688DX+vlOxjD/TPymeeTWTH+sATCBs2H2QDKK2pgLb+ ESNhseh7gj6U01TFl6DB1vwmtsqpDRmwRX11TdO30663wBsCLl0lXvSwHgvSw6J1 YU9TgEbAfzuxreDXmEBYwkRGzNHrF88IVVzFQaxvYUmD3JucfhavY4jC42TZnwyC 2rhCCGYewFmN3DjlDxWSP9tq/1Y7itGyQaPNLoF6cgcCx9jdPyjXfNDAEm3GnVB9 JLjaM4jbbSYQeT/fT0cIG9sHV/LZjh0boNHHrRGjeMWKMvSlpK41bNBbMWg9KWug IjYqYVh8PFoI2VOGFTZ78typf58STgwPO62jJNi6GY13SktvPusx8kJSyLhfmyW5 Z//au4Qr1LzU6kJxTZyZqIJadJkn2vEpjdVMFDKOHyt6+tUXRzShmfdcfRFSZcUu ZFopVSv0R8lam7Ao2tlIKJMjOOBHWyYgu7XkUiX3NGx4i1EwizrN4gpDWC11cQ4D ayVJK/eauqJgYf4A1KES6CwcgPQcz+rw/gbSKqHpS9DGRIwk2doIH2vR5xi/PaNz HLgbsr/noNu8ozhPt6uNLLtiZLwpCWCLmX8kFbwTi5Jy0i+e03Y3J6ki/5xhQnuT +I1aPobywqchAgMBAAGjggIgMIICHDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOEt BGHVvkR26YaEcUvGorOBmpMPMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50 LXgxLmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14MS5sZXRzZW5jcnlwdC5vcmcvMCcGA1UdEQQgMB6CD3d3dy5ib2Rvc29tLm5l dIILYm9kb3NvbS5uZXQwggEABgNVHSAEgfgwgfUwCgYGZ4EMAQIBMAAwgeYGCysG AQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0 Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5 IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBh Y2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBo dHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsF AAOCAQEAbSCHwVEj6P+Od8Za/1wSZuvcQuzqv3NE4oeDXursVAAhxx9pC9r6hJ7p cJOLpzCdKhB7WCDXpBq3Y6Qi82tmcOKrqDBnBIPF8m/tQXs7ekyqNGJAut3R3Kio /8pz5pSDzaW/dJcwll4eLHDgDfHsi8JUkTxeO8xj1mC/Tucj4ASXG5zimcyUMo8B RymC29Cz5PjMIomRpdbwIXnl4q8F7u2RuWujWtCCov4V4704W/SxDJN4ICSRZ0td BLAMc2DTCU2dLcgKqT5R4opwDQubYmOyGe/YNjEXrgRAH5qTmNblVX+JCsX2NqZV UBl6gus6tYf9DaT0iGVQqdtT9iE7hQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA+0FAv9fxb1CIErF5Ak0L lTCg4Juqzey6yQA0jv87Ps7O8WVFZ3tnrzwNf6+U7GMP9M/KZ55NZMf6wBMIGzYf ZAMoramAtv4RI2Gx6HuCPpTTVMWXoMHW/Ca2yqkNGbBFfXVN07fTrrfAGwIuXSVe 9LAeC9LDonVhT1OARsB/O7Gt4NeYQFjCREbM0esXzwhVXMVBrG9hSYPcm5x+Fq9j iMLjZNmfDILauEIIZh7AWY3cOOUPFZI/22r/VjuK0bJBo80ugXpyBwLH2N0/KNd8 0MASbcadUH0kuNoziNttJhB5P99PRwgb2wdX8tmOHRug0cetEaN4xYoy9KWkrjVs 0FsxaD0pa6AiNiphWHw8WgjZU4YVNnvy3Kl/nxJODA87raMk2LoZjXdKS28+6zHy QlLIuF+bJbln/9q7hCvUvNTqQnFNnJmoglp0mSfa8SmN1UwUMo4fK3r61RdHNKGZ 91x9EVJlxS5kWilVK/RHyVqbsCja2UgokyM44EdbJiC7teRSJfc0bHiLUTCLOs3i CkNYLXVxDgNrJUkr95q6omBh/gDUoRLoLByA9BzP6vD+BtIqoelL0MZEjCTZ2ggf a9HnGL89o3McuBuyv+eg27yjOE+3q40su2JkvCkJYIuZfyQVvBOLknLSL57Tdjcn qSL/nGFCe5P4jVo+hvLCpyECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 124517227710177703523724365260216116162421 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-30 16:18:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-28 16:18:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bodosom.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1025030538876880307048010813624242270967079201939063862435658663809894263633828202730315250778814686118325900399778566258372593865004646177169456287031119809238265962479022161330388563345564547122583452445986543524932718007727895148799647841093380472937284372034997567318558912767567096091071394170343137895349628083771925970869332816537255750265977248581102876167760104272342441294389831008149259673760238422345883923095329957696556037656912265492123328086511717683490764110173442736284591436883226256252909708687069713496914928661678362040286268483419503285083592674273632719017182572664706530343610314263068656760991544481050667066520107718662095737640683517931526827427834226150321048466420785588164474919659689638213003108210125134177809946506305045258500407075328000087819399876436364374514283168886734173710415491853991611103325855192079329809066545027328968671279699258212613679827124364596377477891220685623492106276923027502285521687054664388096492590684797577918714690329394402130482107145453435001232321979059816266264924725950329588397882361364844758893209114001815737690439999828005824387234637132282047808209530089128923527955429243267631416498659758041544527768263572363280531770351598658194881726076589805217945659169 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e12d0461d5be4476e98684714bc6a2b3819a930f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodosom.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodosom.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (248 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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