michaelturner.us
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:9c:8c:f2:96:40:12:c2:86:25:2a:d0:d0:13:17:9b:e0:7e was issued on by Let's Encrypt.
With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=michaelturner.us
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9c:8c:f2:96:40:12:c2:86:25:2a:d0:d0:13:17:9b:e0:7eSerial Number (int): 314608258537634642734582768712661071552638
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 24:37:da:ea:67:22:fe:55:6b:22:80:42:5b:ec:c2:7b:a9:bb:30:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ae:85:78:4e:ba:3e:88:4c:80:0d:61:5d:f4:a5:60:87:3b:08:29:70
Fingerprint (sha256): 52:8b:62:2a:ff:8f:f5:c9:bb:50:53:fd:17:c9:1f:8a:ed:c0:9e:45:1b:5b:1e:23:72:eb:37:10:07:35:da:b0
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate michaelturner.us
24
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for michaelturner.us
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cloudroicalculator.flowersficus.net
cloudroicalculator.us
mail.cloudroicalculator.us
mail.michaelturner.us
mail.web-sy.net
mail.weipinghui8861.com
michaelturner.flowersficus.net
michaelturner.us
web-sy.flowersficus.net
web-sy.net
webdisk.cloudroicalculator.us
webdisk.michaelturner.us
webdisk.web-sy.net
webdisk.weipinghui8861.com
weipinghui8861.com
weipinghui8861.flowersficus.net
www.cloudroicalculator.flowersficus.net
www.cloudroicalculator.us
www.michaelturner.flowersficus.net
www.michaelturner.us
www.web-sy.flowersficus.net
www.web-sy.net
www.weipinghui8861.com
www.weipinghui8861.flowersficus.net
cloudroicalculator.us
mail.cloudroicalculator.us
mail.michaelturner.us
mail.web-sy.net
mail.weipinghui8861.com
michaelturner.flowersficus.net
michaelturner.us
web-sy.flowersficus.net
web-sy.net
webdisk.cloudroicalculator.us
webdisk.michaelturner.us
webdisk.web-sy.net
webdisk.weipinghui8861.com
weipinghui8861.com
weipinghui8861.flowersficus.net
www.cloudroicalculator.flowersficus.net
www.cloudroicalculator.us
www.michaelturner.flowersficus.net
www.michaelturner.us
www.web-sy.flowersficus.net
www.web-sy.net
www.weipinghui8861.com
www.weipinghui8861.flowersficus.net
Other certificates including the domain name michaelturner.us
(limited to 100 certificates)
Certificate
The complete raw certificate details for michaelturner.us in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHbjCCBlagAwIBAgISA5yM8pZAEsKGJSrQ0BMXm+B+MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA1MDkxOTQwMDBaFw0x NzA4MDcxOTQwMDBaMBsxGTAXBgNVBAMTEG1pY2hhZWx0dXJuZXIudXMwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFEhdXQl9JPd14SR1pgDzbH82PK98M vc4wdXcKnTC7PnukG/o/ZPbgTF9T9qJ1gw6GTyKZzRIWVttXHxK2JCvzu4/Z9gfK hTMrG33WKO02XOLWGEoX7EJT2GHXYVDFfGU/g4NC3I7+6Z6VCI722jvdBFPMDbAC uRcNlqqv8OkOKymnHxF0JOL9g8Hz+BAbnqlVjLTN/O8rEWqMU/b1VOOpXtgF0sRw /ou6JhYYMC4EMschezip3Z62dkux3gQqLP3Nz9LcK7LOUAgc4cmpGl4HEqBN1U9M dE/F+zT75Fu+lPIhNdx9wnBUgy89+7je63lMjBUmHWxn+vu8lx0fbhpdAgMBAAGj ggR7MIIEdzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCQ32upnIv5VayKAQlvswnup uzAPMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMHAGCCsGAQUFBwEB BGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw dC5vcmcvMIICgwYDVR0RBIICejCCAnaCI2Nsb3Vkcm9pY2FsY3VsYXRvci5mbG93 ZXJzZmljdXMubmV0ghVjbG91ZHJvaWNhbGN1bGF0b3IudXOCGm1haWwuY2xvdWRy b2ljYWxjdWxhdG9yLnVzghVtYWlsLm1pY2hhZWx0dXJuZXIudXOCD21haWwud2Vi LXN5Lm5ldIIXbWFpbC53ZWlwaW5naHVpODg2MS5jb22CHm1pY2hhZWx0dXJuZXIu Zmxvd2Vyc2ZpY3VzLm5ldIIQbWljaGFlbHR1cm5lci51c4IXd2ViLXN5LmZsb3dl cnNmaWN1cy5uZXSCCndlYi1zeS5uZXSCHXdlYmRpc2suY2xvdWRyb2ljYWxjdWxh dG9yLnVzghh3ZWJkaXNrLm1pY2hhZWx0dXJuZXIudXOCEndlYmRpc2sud2ViLXN5 Lm5ldIIad2ViZGlzay53ZWlwaW5naHVpODg2MS5jb22CEndlaXBpbmdodWk4ODYx LmNvbYIfd2VpcGluZ2h1aTg4NjEuZmxvd2Vyc2ZpY3VzLm5ldIInd3d3LmNsb3Vk cm9pY2FsY3VsYXRvci5mbG93ZXJzZmljdXMubmV0ghl3d3cuY2xvdWRyb2ljYWxj dWxhdG9yLnVzgiJ3d3cubWljaGFlbHR1cm5lci5mbG93ZXJzZmljdXMubmV0ghR3 d3cubWljaGFlbHR1cm5lci51c4Ibd3d3LndlYi1zeS5mbG93ZXJzZmljdXMubmV0 gg53d3cud2ViLXN5Lm5ldIIWd3d3LndlaXBpbmdodWk4ODYxLmNvbYIjd3d3Lndl aXBpbmdodWk4ODYxLmZsb3dlcnNmaWN1cy5uZXQwgf4GA1UdIASB9jCB8zAIBgZn gQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmlj YXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBh bmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGlj eSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzAN BgkqhkiG9w0BAQsFAAOCAQEASoPrtTMRFs2lYNPOysbNFjyC/9LKHcLF+DDl7I08 xHP8UR2ahWw+UG0UudS6L0jO4bfsr+4vXP8RIEMXxla37iewtsqidbOm61twNEej uoF+yQKSMa9O0KCUfd/7ik98CAjPmWpCIMbR7Muk0+Bp4tGj5wOFI58k4K2128iE f7DkPT8SSebyzUh56Bv2j9G2wU7mKxe3tj4pIbkHwgV5wNPbBb6ydOnkTsxZ0poD c1cy5qrFRQ1GoyALi+UcpX8fM3dnS0hIe4xRbHeim/faWRSDSyvyBwW+zixHNX9y NVrEVWYYrvBuYDk7RtpySAVSlgTdHpTh5U3tvk+9laP0/g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRIXV0JfST3deEkdaYA8 2x/NjyvfDL3OMHV3Cp0wuz57pBv6P2T24ExfU/aidYMOhk8imc0SFlbbVx8StiQr 87uP2fYHyoUzKxt91ijtNlzi1hhKF+xCU9hh12FQxXxlP4ODQtyO/umelQiO9to7 3QRTzA2wArkXDZaqr/DpDisppx8RdCTi/YPB8/gQG56pVYy0zfzvKxFqjFP29VTj qV7YBdLEcP6LuiYWGDAuBDLHIXs4qd2etnZLsd4EKiz9zc/S3CuyzlAIHOHJqRpe BxKgTdVPTHRPxfs0++RbvpTyITXcfcJwVIMvPfu43ut5TIwVJh1sZ/r7vJcdH24a XQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 314608258537634642734582768712661071552638 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-09 19:40:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-07 19:40:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'michaelturner.us' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24877867169308510478536193310227471786634503787641136206856132075936447479660265625046398788458036472711501533608700022151540447765998863833420664327169793143720903409754338593427154862631352063805710195117418767489990272589359503006594445198908304876236046904088880842912093061307782703910349163577202741099240341333081952798000320382376418709045890838178589925825379694104869840901229979582310155187551387386689446312387136188450284570133347217332099478522678914982582614731981736080225183411796671031630533869857689653945198032748946416438600481421052416742257076734113107384380389840237696150353781992934886742621 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2437daea6722fe556b2280425becc27ba9bb300f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (634 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudroicalculator.flowersficus.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudroicalculator.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cloudroicalculator.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.michaelturner.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.web-sy.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.weipinghui8861.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelturner.flowersficus.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelturner.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-sy.flowersficus.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-sy.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.cloudroicalculator.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.michaelturner.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.web-sy.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.weipinghui8861.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weipinghui8861.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weipinghui8861.flowersficus.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloudroicalculator.flowersficus.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloudroicalculator.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michaelturner.flowersficus.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michaelturner.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web-sy.flowersficus.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web-sy.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weipinghui8861.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weipinghui8861.flowersficus.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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