devservices.com.br
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:97:20:0a:49:26:fe:b4:fa:08:27:71:ef:11:95:48:54:93 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=devservices.com.br
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:97:20:0a:49:26:fe:b4:fa:08:27:71:ef:11:95:48:54:93Serial Number (int): 312762083902881549801048646403798430405779
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f9:1f:2f:be:7d:c5:78:b6:cf:8e:7f:bc:94:00:d5:76:40:4e:17:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 9e:b2:e2:77:a8:03:33:18:3f:1e:af:7f:1b:3e:ce:c3:a5:7d:f3:69
Fingerprint (sha256): 45:c1:e1:d4:ab:b7:8d:2c:43:f9:ea:ee:c5:c0:95:e6:ab:03:b7:94:4f:f6:be:a7:76:8b:ab:3f:62:91:71:25
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate devservices.com.br
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for devservices.com.br
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.devservices.com.br
devservices.com.br
sistemas.devservices.com.br
www.devservices.com.br
devservices.com.br
sistemas.devservices.com.br
www.devservices.com.br
Other certificates including the domain name devservices.com.br
(limited to 100 certificates)
servidor.devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
servidor.devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
servidor.devservices.com.br
devservices.com.br
devservices.com.br
servidor.devservices.com.br
devservices.com.br
devservices.com.br
servidor.devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
servidor.devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
servidor.devservices.com.br
devservices.com.br
devservices.com.br
servidor.devservices.com.br
devservices.com.br
devservices.com.br
servidor.devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
devservices.com.br
Certificate
The complete raw certificate details for devservices.com.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHWjCCBkKgAwIBAgISA5cgCkkm/rT6CCdx7xGVSFSTMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MTYwMTEyMTNaFw0x ODEyMTUwMTEyMTNaMB0xGzAZBgNVBAMTEmRldnNlcnZpY2VzLmNvbS5icjCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANvPu9h9BzSakBK/ZoCywRgUa3TK 5CsodrNyENm1aMly+bCp4/ayPOW5BLYfgLIw+nOJIGZ7/CDZH7NCd19Muv8Vm1jv GBafm/0mbvA7JmrbUcbejlpDNadZs3odeVTeXw3Y8vLHydbfJfXO/SubdlsSvCf4 R7H6lpt/EGtYHVNlv/+UF7zWNp8hQ+gRcsFIaUsNrtT9Fmowln2VjM8sPsBtILxM SoEH3x/VglxVsWLqbe2QxX9IsntXwMWn8DQ7YXIgVbddoOSPyev8+bnLEiPYgzl2 4Q5BTG9EFFLlsBfI2xL21MhXSB89q0gJYlkAHn2VYU0gRL9eIy1f+62aTJloGIpn xE2xVhST6UaI6H5T1TSPVwtBDEdB0EijcfMz5i+7F+2BlL0gEBJl+BvcabwH0DL7 2r5idUIGwibGsEr/9mHDv41QYpiscvWb8pyH49JVGHr5fz5uYl1zuKdEG/oH9o8A FLkJQPdUvlzJ3+QveGV73UTyuDzgAi/SGxcalhIaaklKYLx8deu5VbpRUg+dJVHV Ef9P4w/q9Tz8kWVpKElwAddjyTudF5ghldpfHpRjhUFedR+dZ8t25DKxDgEU/IJN +2+U2cOD6XYe18bbC3Teutf4aywcp/QOQmqireandpBi6OCRV9Zj1dtxjKzgK6Lj BZjl58hggfHS/5lbAgMBAAGjggNlMIIDYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FPkfL759xXi2z45/vJQA1XZAThccMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wagYDVR0RBGMwYYIWYXBpLmRldnNlcnZp Y2VzLmNvbS5icoISZGV2c2VydmljZXMuY29tLmJyghtzaXN0ZW1hcy5kZXZzZXJ2 aWNlcy5jb20uYnKCFnd3dy5kZXZzZXJ2aWNlcy5jb20uYnIwgf4GA1UdIASB9jCB 8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENl cnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFy dGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRl IFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0 b3J5LzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1ACk8UZZUyDlluqpQ/FgH1Ldv v1h6KXLcpMMM9OVFR/R4AAABZeAmV2wAAAQDAEYwRAIgLni02NTDPdBu1YXYVcrU DZ8zCghPyh/NRUlK6md6xWcCIEa4ZGIssKwmEwZLNcy0Pb+AlAVkr7thABhExLhh s6SzAHUAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFl4CZYrAAA BAMARjBEAiBd+WU2mq71Uo7tcsk3+2dxiPkObhFkgK+4MgZfOdX/jAIgBCRykpQZ 03hFNSs+IF+LO/HGm5V/1mx4yn1At/w2ovYwDQYJKoZIhvcNAQELBQADggEBAAs1 yDZzFaj6FhdEbqJwcJUTncoglxY7z2/djRY7b6pcsNZcXxFTD6wPQewYAffY5a/v LCpbT6n+N7mEHGveVlogVvfSn431RNqU3nQHc3fgMMHJuTapxewKVHwe/SE/H6Ll eSgiSOL/uPFfU/daO2PAnr/D2yf96mgdTcMOMzGWUYtO2f+cpUR2+/iFmq3I8moN Z80WQnRtGtR7wHU50RQ7OdzzcpYOBdZFRysqOG7TrJGKNHF8RFpSuqGXrkiBd9Wl 5lWjYVeHlAFhIiynyGSJFVTM5Yh0jD507E6B3Vi9IgMokhuwUI6ZTJIZf9/Cu8BB 4N7nG0wS4NEuW6v5Sgc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA28+72H0HNJqQEr9mgLLB GBRrdMrkKyh2s3IQ2bVoyXL5sKnj9rI85bkEth+AsjD6c4kgZnv8INkfs0J3X0y6 /xWbWO8YFp+b/SZu8DsmattRxt6OWkM1p1mzeh15VN5fDdjy8sfJ1t8l9c79K5t2 WxK8J/hHsfqWm38Qa1gdU2W//5QXvNY2nyFD6BFywUhpSw2u1P0WajCWfZWMzyw+ wG0gvExKgQffH9WCXFWxYupt7ZDFf0iye1fAxafwNDthciBVt12g5I/J6/z5ucsS I9iDOXbhDkFMb0QUUuWwF8jbEvbUyFdIHz2rSAliWQAefZVhTSBEv14jLV/7rZpM mWgYimfETbFWFJPpRojoflPVNI9XC0EMR0HQSKNx8zPmL7sX7YGUvSAQEmX4G9xp vAfQMvvavmJ1QgbCJsawSv/2YcO/jVBimKxy9ZvynIfj0lUYevl/Pm5iXXO4p0Qb +gf2jwAUuQlA91S+XMnf5C94ZXvdRPK4POACL9IbFxqWEhpqSUpgvHx167lVulFS D50lUdUR/0/jD+r1PPyRZWkoSXAB12PJO50XmCGV2l8elGOFQV51H51ny3bkMrEO ART8gk37b5TZw4Ppdh7XxtsLdN661/hrLByn9A5CaqKt5qd2kGLo4JFX1mPV23GM rOArouMFmOXnyGCB8dL/mVsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 312762083902881549801048646403798430405779 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-16 01:12:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-15 01:12:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'devservices.com.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 896752519064681434966417418018510613339675208832489330369123360132881370884042437278145213017579474512678986404059228299632773793654652934473225717768279794539526481900830082854702637369680868286994298992619718089762977539799505617222229281175148271469157498903945134192219937980303055831849638051295127429133192945624496317320661329669518688033445896755930078651584939959546924294983626524751617681357020542335241317432676252817251037846385189617480483200459108143639627396713944779170569979483995625070521115082284881875958412641630682021227661202317825388557673662602077506382529747305558406663105109710062179903238105989103025325774737076026442834865452927614391083449351041300983040618546835416918047082077113034416821120673259231364228229965096093754149666680924467045206419601378840634338041585978006993989563981034528690271856970636910589266404689242274075585670564172689470259867215858636963557048389204414191168230867157177208670681463204170818127281023281408937087859898412978906431989344919101945746197271954975592591600280732281798509655649275048940224579211131328726401231917114891442409189541844361880875694079857847173890307811344776737406422001827497243079101497460646948645996997447168580698464710712267641685252443 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f91f2fbe7dc578b6cf8e7fbc9400d576404e171c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.devservices.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devservices.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistemas.devservices.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devservices.com.br' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165e026576c000004030046304402202e78b4d8d4c33dd06ed585d855cad40d9f330a084fca1fcd45494aea677ac567022046b864622cb0ac2613064b35ccb43dbf80940564afbb61001844c4b861b3a4b30075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165e02658ac000004030046304402205df965369aaef5528eed72c937fb677188f90e6e116480afb832065f39d5ff8c0220042472929419d37845352b3e205f8b3bf1c69b957fd66c78ca7d40b7fc36a2f6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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