www.xn----858am81dpvmcwginebooiivdsy.url.tw
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:e9:f9:86:30:4a:f4:1b:5a:42:4b:73:6c:e8:bb:79:dd:7e was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.xn----858am81dpvmcwginebooiivdsy.url.tw
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:e9:f9:86:30:4a:f4:1b:5a:42:4b:73:6c:e8:bb:79:dd:7eSerial Number (int): 428066609737843228703682337085452340288894
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 83:fc:5e:d3:32:a1:f1:c2:30:0d:5e:12:56:9a:11:1d:7e:81:45:f2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 9e:8a:37:da:6f:7d:45:6f:08:8e:de:0f:5f:4f:92:6d:fa:da:4c:29
Fingerprint (sha256): 50:73:c6:f1:b0:d5:e2:3b:07:cd:bf:fd:e0:59:59:08:d9:cf:d4:9e:d0:a1:d9:e4:b6:de:96:c1:cc:7b:7a:97
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.xn----858am81dpvmcwginebooiivdsy.url.tw
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.xn----858am81dpvmcwginebooiivdsy.url.tw
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.xn----858am81dpvmcwginebooiivdsy.url.tw
Other certificates including the domain name xn----858am81dpvmcwginebooiivdsy.url.tw
(limited to 100 certificates)
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
www.xn----858am81dpvmcwginebooiivdsy.url.tw
Certificate
The complete raw certificate details for www.xn----858am81dpvmcwginebooiivdsy.url.tw in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGOTCCBSGgAwIBAgISBOn5hjBK9BtaQktzbOi7ed1+MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA5MTgxMDIwMDBaFw0x NzEyMTcxMDIwMDBaMDYxNDAyBgNVBAMTK3d3dy54bi0tLS04NThhbTgxZHB2bWN3 Z2luZWJvb2lpdmRzeS51cmwudHcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQDWp7ZyyO+Ng4506QxjzGriKA4JNYQYE8qW9J4iSmAASLgAHaMospYKL71K 9YrgSf1RNoYrPvjrdM6r8/YQFihliIIU4cTmgw37fxfCRodipSpX23Sa4zC07CZi Nazp4uqSumJb16bA8Jaz5qVEwsaaOSm9FA4XDaT8GetYgWhlNt8va++/fCeTQyxN 5UQ405YaCEwin5YbvQn/Eb3gvZ0IQgzEOaqg01CMjygpnWIUHjKX0hlZjdB5UdR0 HpVluCIzLYj1grXr34QIC0Pny4HXUQWqa5eXnGQHYlR78oIAzRoUB1w2cPJEtFye 3WzJqjj79BjZoCI/DsB/8soB/991rxIMhSBpnWpdvkBRQaZTQ/XYbfSq1OLUgxzo NoLEhwePMAowx0l4UBm2hM68/MCWwvcgkhs48R//s5+vPZ70cIJyw7DYW+y6eQq+ yC0IdINsNPCUHDrFcn8PSO+czk6oCaCu0T5UdZJ8fI1hWePyaLoLhq/yYLVsPb0d 1g9+NJGt5viB5GRHfZv/5A90urYh9FJ73ZWnymI4UFKQLGNl/q5qiFIecesr8kPG bBaeFp22ynCB5IaemiWH5kCJu5pnLKQeCD+rk6bpFt+LQGM+0mFhIfds4e7eUWAL HZ2BT2IuxMOWXTqIpqFqB17qqZVxqP4bVtHsbIz/rxzXlJbt0QIDAQABo4ICKzCC AicwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSD/F7TMqHxwjANXhJWmhEdfoFF8jAf BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv MDYGA1UdEQQvMC2CK3d3dy54bi0tLS04NThhbTgxZHB2bWN3Z2luZWJvb2lpdmRz eS51cmwudHcwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEB MIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYI KwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGll ZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNl IHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xl dHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAE5AI 9PXYjr1N66l6XE4Z40CN7nRCwASca5DsxUkdpAAbT2cYXa/JLQNYUzWoObURpwb2 cxwhQHMBeHRqoE5VSovIiQabb7TBD0sQewgRGvJTg8Iu0Z7bnWn+ZnafOr1G0Mib iLbOi0UAfMrw+WsA0XKQ9P1DMBgC7bu6ttRXhtqvK+/YA2V03FY3ZC5lHzL4aDjT IPzPJyQIFvu8VzYIroLHdATRKN0nIDhMJPgsQWjgAHeVNHpGmeTLVvQsTdwhFYoZ 4r/Wceq+pQEO26lBLo3IhIs+IOK8oymRgNyBhyjcJaYdwr09BgSny01f9mBAAn6P 0icgUqJuUkKH/Uvizg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1qe2csjvjYOOdOkMY8xq 4igOCTWEGBPKlvSeIkpgAEi4AB2jKLKWCi+9SvWK4En9UTaGKz7463TOq/P2EBYo ZYiCFOHE5oMN+38XwkaHYqUqV9t0muMwtOwmYjWs6eLqkrpiW9emwPCWs+alRMLG mjkpvRQOFw2k/BnrWIFoZTbfL2vvv3wnk0MsTeVEONOWGghMIp+WG70J/xG94L2d CEIMxDmqoNNQjI8oKZ1iFB4yl9IZWY3QeVHUdB6VZbgiMy2I9YK169+ECAtD58uB 11EFqmuXl5xkB2JUe/KCAM0aFAdcNnDyRLRcnt1syao4+/QY2aAiPw7Af/LKAf/f da8SDIUgaZ1qXb5AUUGmU0P12G30qtTi1IMc6DaCxIcHjzAKMMdJeFAZtoTOvPzA lsL3IJIbOPEf/7Ofrz2e9HCCcsOw2FvsunkKvsgtCHSDbDTwlBw6xXJ/D0jvnM5O qAmgrtE+VHWSfHyNYVnj8mi6C4av8mC1bD29HdYPfjSRreb4geRkR32b/+QPdLq2 IfRSe92Vp8piOFBSkCxjZf6uaohSHnHrK/JDxmwWnhadtspwgeSGnpolh+ZAibua ZyykHgg/q5Om6Rbfi0BjPtJhYSH3bOHu3lFgCx2dgU9iLsTDll06iKahagde6qmV caj+G1bR7GyM/68c15SW7dECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 428066609737843228703682337085452340288894 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-18 10:20:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-17 10:20:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.xn----858am81dpvmcwginebooiivdsy.url.tw' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 875716518356008282247601334105463779585996999010197765541212328761816068137695958810063317158984145258845685773263734785226296199783040703271172468452126825559674399823981468053445339657940802697960208778452906944934057973730770300813544152198856806846896273939868544782201112773238309282703656216848445850506995267510780897753587200951350464479703986092509919252136968637271064500052289193633769394776358395669205272917891821379343392185609839919268845634691975252581374606288959262955817216160814680381366078515210335398840921230853727892975031203244109113894085435498044932447857986600256893866843487710474100134029953700748295485370412407584934386762994948296705832945015851307557103713784926257381759364054551244759333245476052784679963124406858062753746642276442090254611100028319088631668882893866203208563951034041794845178581890805542716760186520833923216337144260960806288268565125050277607123313548267787967411805226139266577964717226433120078822043417293082189016250759804089499480375514102585689816182041652918962494719525836697883605394778880334940120384219729238472706771768040690292824942435085139123262336498014871895248017282048708738641610164677219670356032132953689052444070797414770361172027551556306910282444241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 83fc5ed332a1f1c2300d5e12569a111d7e8145f2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn----858am81dpvmcwginebooiivdsy.url.tw' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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