casacupula.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:fc:6a:97:d6:6a:46:08:1b:b3:5d:4a:2f:5b:6a:c2:8e:4c was issued on by Let's Encrypt.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=casacupula.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:fc:6a:97:d6:6a:46:08:1b:b3:5d:4a:2f:5b:6a:c2:8e:4cSerial Number (int): 434341986744351833381641836781881146904140
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: cb:a6:27:cf:32:0f:c9:80:65:84:57:be:77:b8:40:6d:10:87:6c:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 7f:77:16:4b:b8:99:90:24:1b:5b:82:ce:c2:00:c0:1e:24:74:48:8b
Fingerprint (sha256): 41:33:25:4b:b7:6d:b3:4a:20:5b:f5:af:75:70:fd:44:0d:74:7a:2e:52:db:9c:2e:8d:1f:2a:87:8f:42:af:80
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate casacupula.com
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for casacupula.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
casacupula.com
casacupula.urated.com
mail.casacupula.com
mail.vaneurosoccer.ca
vaneurosoccer-ca.urated.com
vaneurosoccer.ca
www.casacupula.com
www.casacupula.urated.com
www.vaneurosoccer-ca.urated.com
www.vaneurosoccer.ca
casacupula.urated.com
mail.casacupula.com
mail.vaneurosoccer.ca
vaneurosoccer-ca.urated.com
vaneurosoccer.ca
www.casacupula.com
www.casacupula.urated.com
www.vaneurosoccer-ca.urated.com
www.vaneurosoccer.ca
Other certificates including the domain name casacupula.com
(limited to 100 certificates)
casacupula.com
casacupula.com
casacupula.com
concierge.casacupula.com
casacupula.com
reservations.casacupula.com
sni.cloudflaressl.com
concierge.casacupula.com
casacupula.com
casacupula.com
casacupula.com
casacupula.com
casacupula.com
concierge.casacupula.com
casacupula.com
reservations.casacupula.com
casacupula.com
casacupula.com
casacupula.com
reservations.casacupula.com
mail.mail.casacupula.com
concierge.casacupula.com
casacupula.com
casacupula.com
concierge.casacupula.com
sni.cloudflaressl.com
reservations.casacupula.com
concierge.casacupula.com
concierge.casacupula.com
concierge.casacupula.com
casacupula.com
sni.cloudflaressl.com
casacupula.com
casacupula.com
casacupula.com
concierge.casacupula.com
concierge.casacupula.com
casacupula.com
casacupula.com
concierge.casacupula.com
casacupula.com
reservations.casacupula.com
sni.cloudflaressl.com
concierge.casacupula.com
casacupula.com
casacupula.com
casacupula.com
casacupula.com
casacupula.com
concierge.casacupula.com
casacupula.com
reservations.casacupula.com
casacupula.com
casacupula.com
casacupula.com
reservations.casacupula.com
mail.mail.casacupula.com
concierge.casacupula.com
casacupula.com
casacupula.com
concierge.casacupula.com
sni.cloudflaressl.com
reservations.casacupula.com
concierge.casacupula.com
concierge.casacupula.com
concierge.casacupula.com
casacupula.com
sni.cloudflaressl.com
casacupula.com
casacupula.com
casacupula.com
concierge.casacupula.com
concierge.casacupula.com
Certificate
The complete raw certificate details for casacupula.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG4TCCBcmgAwIBAgISBPxql9ZqRggbs11KL1tqwo5MMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MjEwNjQzNTdaFw0x ODEwMTkwNjQzNTdaMBkxFzAVBgNVBAMTDmNhc2FjdXB1bGEuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXSvXYgVhtr3DObAMQ01pAg1TjdkBZSf s9AfLSe6+nfXMd3biMubaES/zsUAx3LA/sYhk7tLxxy/9xA+OJlHs2XjXE6fFIyp oXcRGKiQPRSpU5OfeZJxUIkgY1JOe10Um/DgtlDUYANRwG/WZfXhPq0Dkor4IDgd la5T+FdFRlVqbn4SMjsIq6qRmFGIZ3OvKlAUXpfoiMRHSYtXHP6zus4rL+zebQaf 5HnaYqBZCVuum3VMByiYpaks3hYdl8hL1qDkLI5bkpzbwS17KRycwQ2xaUQgkaqz Nfr4UmCzio7gsp+OC3EEzKYeev0mixxbaOL906rT/ast7pNXPtMW4QIDAQABo4ID 8DCCA+wwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTLpifPMg/JgGWEV753uEBtEIds ZDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMIHzBgNVHREEgeswgeiCDmNhc2FjdXB1bGEuY29tghVjYXNhY3VwdWxhLnVy YXRlZC5jb22CE21haWwuY2FzYWN1cHVsYS5jb22CFW1haWwudmFuZXVyb3NvY2Nl ci5jYYIbdmFuZXVyb3NvY2Nlci1jYS51cmF0ZWQuY29tghB2YW5ldXJvc29jY2Vy LmNhghJ3d3cuY2FzYWN1cHVsYS5jb22CGXd3dy5jYXNhY3VwdWxhLnVyYXRlZC5j b22CH3d3dy52YW5ldXJvc29jY2VyLWNhLnVyYXRlZC5jb22CFHd3dy52YW5ldXJv c29jY2VyLmNhMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEB ATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasG CCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxp ZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5j ZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9s ZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdQDbdK/uyynssf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWS7y5HUAAAE AwBGMEQCIBukfQ9nhBtB1HB3lcW8cki7Pq/aBh75mG95+4FbPVlDAiBPZq+pKOD8 zXvbRUkxw1+3Fr6w0jvJU+lya0uWzgAHBQB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6 KXLcpMMM9OVFR/R4AAABZLvLk6kAAAQDAEcwRQIhAJcqJyqCXTI1cgah165UCDox S9ysHOmPq2SrEFi8W1ouAiA3sK1TNnMssBOLhuqw3p5l7rBr2H6bJXLgGCxAv9I0 xjANBgkqhkiG9w0BAQsFAAOCAQEAEtcoMikVwjWYJepMdh+MId/eCDofopQbyn2D ZR4HOke8RHB6JYt82XmpA5+aJqKzP0OmIAKIuprZfoUrpAGmNWL6xvly2GIrlPcb 0lj7Eevy7/dV8XDPVCljkc5EGlu1hQjnoEj536oj5LT2p8dVhJ7hAITMr4UaEQSs Vw4572XEhMBqGKm4ENLbObOeC0OCBsZh9MYe2cm45qK576/oe/58qIjW2/D1gSUZ L2+6VXfAvjXdgc/ioZuVK4dvgU3X2sFpmhfP5pdbATHGGzyBZtzaAl+hXwl5j/Ob rFErzLfXhNSqHHSra21u6LzF54zO+9sCRrH4POWnK07LpoGu4A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXSvXYgVhtr3DObAMQ01 pAg1TjdkBZSfs9AfLSe6+nfXMd3biMubaES/zsUAx3LA/sYhk7tLxxy/9xA+OJlH s2XjXE6fFIypoXcRGKiQPRSpU5OfeZJxUIkgY1JOe10Um/DgtlDUYANRwG/WZfXh Pq0Dkor4IDgdla5T+FdFRlVqbn4SMjsIq6qRmFGIZ3OvKlAUXpfoiMRHSYtXHP6z us4rL+zebQaf5HnaYqBZCVuum3VMByiYpaks3hYdl8hL1qDkLI5bkpzbwS17KRyc wQ2xaUQgkaqzNfr4UmCzio7gsp+OC3EEzKYeev0mixxbaOL906rT/ast7pNXPtMW 4QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 434341986744351833381641836781881146904140 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-21 06:43:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 06:43:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'casacupula.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23411625947068340811241633468738745537985685970588802911854097388931440620007986043491324830115052097544015548418025470495657146501554948111627787913492456689503453169522044239076361886546499933622285221152471977170087910758198208795955873889134904994664754678943138503007953699025142592238837198972142780781898614400687157273648042288668341820178618723535598924722886119261102204204093601438291843778895020644488916703521141070537542191597551985528883043594727705272658428566523371042165687623759181327907136123625306339895284255710332091148195993423682501444900761894817539912190220724138924827610521601242534450913 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cba627cf320fc980658457be77b8406d10876c64 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (235 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casacupula.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casacupula.urated.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.casacupula.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vaneurosoccer.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaneurosoccer-ca.urated.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaneurosoccer.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casacupula.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casacupula.urated.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaneurosoccer-ca.urated.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaneurosoccer.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000164bbcb91d4000004030046304402201ba47d0f67841b41d4707795c5bc7248bb3eafda061ef9986f79fb815b3d594302204f66afa928e0fccd7bdb454931c35fb716beb0d23bc953e9726b4b96ce000705007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164bbcb93a90000040300473045022100972a272a825d32357206a1d7ae54083a314bdcac1ce98fab64ab1058bc5b5a2e022037b0ad5336732cb0138b86eab0de9e65eeb06bd87e9b2572e0182c40bfd234c6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0012d728322915c2359825ea4c761f8c21dfde083a1fa2941bca7d83651e073a47bc44707a258b7cd979a9039f9a26a2b33f43a6200288ba9ad97e852ba401a63562fac6f972d8622b94f71bd258fb11ebf2eff755f170cf54296391ce441a5bb58508e7a048f9dfaa23e4b4f6a7c755849ee10084ccaf851a1104ac570e39ef65c484c06a18a9b810d2db39b39e0b438206c661f4c61ed9c9b8e6a2b9efafe87bfe7ca888d6dbf0f58125192f6fba5577c0be35dd81cfe2a19b952b876f814dd7dac1699a17cfe6975b0131c61b3c8166dcda025fa15f09798ff39bac512bccb7d784d4aa1c74ab6b6d6ee8bcc5e78ccefbdb0246b1f83ce5a72b4ecba681aee0