marneplaisance.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:1e:b3:8f:13:09:c4:2e:fc:e9:0a:14:f2:8c:2c:7f:bf:89 was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=marneplaisance.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1e:b3:8f:13:09:c4:2e:fc:e9:0a:14:f2:8c:2c:7f:bf:89Serial Number (int): 271784003498744716064231572579516745236361
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5f:c8:fc:89:26:f0:32:cd:19:e5:e0:d5:9a:ae:16:7b:c2:90:13:57
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 40:06:42:9f:bf:70:ad:f0:0d:b4:33:49:31:6b:3d:eb:d3:44:d0:7d
Fingerprint (sha256): 4b:87:c5:ab:ae:ba:b8:fe:41:58:28:a6:de:df:cf:d5:10:de:c4:35:48:1e:b9:48:bb:c4:47:2c:d5:c4:68:0e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate marneplaisance.net
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for marneplaisance.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
basketancerville.ovh
marneplaisance.net
wordpress.marneplaisance.net
www.basketancerville.ovh
www.marneplaisance.net
www.wordpress.marneplaisance.net
marneplaisance.net
wordpress.marneplaisance.net
www.basketancerville.ovh
www.marneplaisance.net
www.wordpress.marneplaisance.net
Other certificates including the domain name marneplaisance.net
(limited to 100 certificates)
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
www.wordpress.marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
www.marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
www.wordpress.marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
www.marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
marneplaisance.net
Certificate
The complete raw certificate details for marneplaisance.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGkzCCBXugAwIBAgISAx6zjxMJxC786QoU8owsf7+JMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA3MjcxMjI1MDBaFw0x NjEwMjUxMjI1MDBaMB0xGzAZBgNVBAMTEm1hcm5lcGxhaXNhbmNlLm5ldDCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANTGS5nVCQD5Rgd9oTDSgyHt+PIZ t4nrHRwCrfM+/w0SiHloyUmXrP/dNMcRkdRGct9LHexSz2hs/cJ7Xz/p9rNn2PMJ rdz5bIJ//gcLMKXxZXCCY5L716yeX7zWdYCHWB1yqxXYu+MndJO5k5qAi3UKST2h e7iSeiSALwOb2SROBtzX15+uA22wKhTk7QlWOB9P+9wkqaHM8Sdp4hlDoF2/Ucw4 4B8/cBF2svhG7hWHVNZhLeps8sMSpJLe/CLF95JVMAtuKjIU+nta5VlyXvYuT0Kq DBIxgZdRX8bq+GEg8uO91wptSLbtBVjJV/k4RdVkYatcCZU8kRRrp5XvzJMzgbfG Wlzx7fkEzSbosLbHkAqGXlBNXPkC9m5nqmaZx1ZIZobos3krBQrxYWzxqtQ5+bHD xHlY1ktnYytWZfOwlfm2T4W5N151c6BmTVhycMn9TXNeoVl80XYvY1gfLGtc5O72 8V2DPvMXjVC13MXPMFaYsFBSoLBi9zFyZ8l5STthKM5/7UFsfejreL72MkygdEtj C+TOXoMIsFIbLpw1BaB5yNI1gH0AmalzrIRfyhxrMHxpKz+xWAKsnBjxKx1TKzr5 vwODBvrInOZq1dQMUy9DA6ivxPYSWZ39ED8VPnzGx8Pw6IwMKdP30FRi/eXEF0nc PaLuvT4zYDgk7SgdAgMBAAGjggKeMIICmjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FF/I/Ikm8DLNGeXg1ZquFnvCkBNXMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIGnBgNVHREEgZ8wgZyCFGJhc2tldGFu Y2VydmlsbGUub3ZoghJtYXJuZXBsYWlzYW5jZS5uZXSCHHdvcmRwcmVzcy5tYXJu ZXBsYWlzYW5jZS5uZXSCGHd3dy5iYXNrZXRhbmNlcnZpbGxlLm92aIIWd3d3Lm1h cm5lcGxhaXNhbmNlLm5ldIIgd3d3LndvcmRwcmVzcy5tYXJuZXBsYWlzYW5jZS5u ZXQwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYG CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUH AgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9u IGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGgg dGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNy eXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAiRzC9t0j8nu7 lGp312WsSYL4jZH6eYqvyOQOF8TdcBZaTjE0jYP9evWO1KW1h2Ag15omMgR6RFWz 2fTT5L6a9Roi5Tgx+bkXkxS0PT8nHgJrywZMqqt8H2t7JcCjLV2AxzKWkU7lylK8 qMGm91qyKIwOFu0/r9+2DwVLJ1XtAaEUlwLvcML6bJ/lK32MWsfVp+LNkGJajTOy aEDTI5KENJJARoVf1z4cPKE8r6bks+yX/D9Sus84cFoKIAYOgq9ded2nxhquwROb gPmGFaDV71r8QHuVYDEi2IpgC9FxaAQMUpYKq9LRQYinqbb169CJf8yqmSGZerT3 WKfU0PgObQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1MZLmdUJAPlGB32hMNKD Ie348hm3iesdHAKt8z7/DRKIeWjJSZes/900xxGR1EZy30sd7FLPaGz9wntfP+n2 s2fY8wmt3Plsgn/+BwswpfFlcIJjkvvXrJ5fvNZ1gIdYHXKrFdi74yd0k7mTmoCL dQpJPaF7uJJ6JIAvA5vZJE4G3NfXn64DbbAqFOTtCVY4H0/73CSpoczxJ2niGUOg Xb9RzDjgHz9wEXay+EbuFYdU1mEt6mzywxKkkt78IsX3klUwC24qMhT6e1rlWXJe 9i5PQqoMEjGBl1Ffxur4YSDy473XCm1Itu0FWMlX+ThF1WRhq1wJlTyRFGunle/M kzOBt8ZaXPHt+QTNJuiwtseQCoZeUE1c+QL2bmeqZpnHVkhmhuizeSsFCvFhbPGq 1Dn5scPEeVjWS2djK1Zl87CV+bZPhbk3XnVzoGZNWHJwyf1Nc16hWXzRdi9jWB8s a1zk7vbxXYM+8xeNULXcxc8wVpiwUFKgsGL3MXJnyXlJO2Eozn/tQWx96Ot4vvYy TKB0S2ML5M5egwiwUhsunDUFoHnI0jWAfQCZqXOshF/KHGswfGkrP7FYAqycGPEr HVMrOvm/A4MG+sic5mrV1AxTL0MDqK/E9hJZnf0QPxU+fMbHw/DojAwp0/fQVGL9 5cQXSdw9ou69PjNgOCTtKB0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 271784003498744716064231572579516745236361 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-27 12:25:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-25 12:25:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marneplaisance.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 868044598317959964259285219374894870510196179445740818663574629202089400359647407210267780514058761644838780871337077618954538056768731420887154481416986718181633223772810540162873255274025497272474279028874834811063484001400384497276601571243231262232035550974365402188195310510188767403253316975116189426736457334149484899268800627611288535666814873954379646467903475614879110627178218157321845746251843174521816530275624299998509544253176227706040741876974569785136649977091752838535776668832118671553160722800535640162013378762538008957324781315524770653512334055328275896379206505598692385929037836792342911845664023365247886624090919125300019335535992024168874168365581175688648550521935733156863903168039905081794195832811691668602093544326319922532671928152771270992206989804704607680741738149863269199132312376490193577538938971905684479343285312470850571741861138660362634608340476526741873183379847061540095491922444509594667235110870263967787930514207741173708126808658646980878640821262510230679168055525229210524755699729318171042135127231100443820533724429812558209976251068563763792328893033463687269020466081765642886473050161926193572039002848745032099933657663181554467413300517434072619060906018557848441894807581 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5fc8fc8926f032cd19e5e0d59aae167bc2901357 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketancerville.ovh' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marneplaisance.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordpress.marneplaisance.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketancerville.ovh' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marneplaisance.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordpress.marneplaisance.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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