www.countax.co.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d8:4d:d9:27:1f:87:e0:ab:32:7a:b1:37:d9:bb:7e:e1:08 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.countax.co.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d8:4d:d9:27:1f:87:e0:ab:32:7a:b1:37:d9:bb:7e:e1:08Serial Number (int): 334941327127809288292292260918107196809480
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 98:cd:9a:f6:36:ba:38:22:60:a5:fb:47:bf:65:95:38:11:dd:f9:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 05:8b:c2:55:a7:fb:e0:bc:f0:1c:8e:5e:5c:88:a2:e8:87:85:a9:18
Fingerprint (sha256): 57:8a:3d:8e:ae:72:35:0b:48:53:93:d8:a2:8a:48:b9:f1:52:ed:dd:90:86:07:84:0a:23:ba:20:e8:a5:2c:27
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.countax.co.uk
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.countax.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
countax.co.uk
countax.com
www.countax.co.uk
www.countax.com
countax.com
www.countax.co.uk
www.countax.com
Other certificates including the domain name countax.co.uk
(limited to 100 certificates)
www.countax.co.uk
dealers.countax.co.uk
www.countax.co.uk
countax.co.uk
www.countax.co.uk
dealers.westwoodtractors.com
dealers.countax.co.uk
www.countax.co.uk
www.countax.com
www.countax.com
dealers.countax.co.uk
countax.co.uk
www.countax.com
dealers.westwoodtractors.co.uk
www.countax.com
www.countax.co.uk
dealers.westwoodtractors.com
www.countax.co.uk
dealers.westwoodtractors.co.uk
dealers.westwoodtractors.com
countaxdealers.pentangle.co.uk
countax.co.uk
dealers.countax.co.uk
dealers.westwoodtractors.co.uk
www.countax.com
dealers.westwoodtractors.co.uk
dealers.countax.co.uk
www.countax.com
dealers.countax.co.uk
dealers.westwoodtractors.com
www.countax.com
dealers.westwoodtractors.com
www.countax.co.uk
dealers.countax.co.uk
dealers.westwoodtractors.com
www.countax.co.uk
countax.com
dealers.westwoodtractors.com
www.countax.com
countax.co.uk
www.countax.com
countax.co.uk
www.countax.com
dealers.countax.co.uk
www.countax.co.uk
www.countax.com
www.countax.com
dealers.countax.co.uk
dealers.countax.co.uk
www.countax.com
www.countax.com
www.countax.co.uk
www.countax.co.uk
dealers.westwoodtractors.com
dealers.countax.co.uk
dealers.countax.co.uk
countax.co.uk
dealers.westwoodtractors.co.uk
www.countax.com
www.countax.com
www.countax.co.uk
dealers.westwoodtractors.com
www.countax.co.uk
countax.com
www.countax.com
www.countax.co.uk
www.countax.com
countax.com
dealers.countax.co.uk
www.countax.co.uk
countax.co.uk
www.countax.co.uk
dealers.westwoodtractors.com
dealers.countax.co.uk
www.countax.co.uk
www.countax.com
www.countax.com
dealers.countax.co.uk
countax.co.uk
www.countax.com
dealers.westwoodtractors.co.uk
www.countax.com
www.countax.co.uk
dealers.westwoodtractors.com
www.countax.co.uk
dealers.westwoodtractors.co.uk
dealers.westwoodtractors.com
countaxdealers.pentangle.co.uk
countax.co.uk
dealers.countax.co.uk
dealers.westwoodtractors.co.uk
www.countax.com
dealers.westwoodtractors.co.uk
dealers.countax.co.uk
www.countax.com
dealers.countax.co.uk
dealers.westwoodtractors.com
www.countax.com
dealers.westwoodtractors.com
www.countax.co.uk
dealers.countax.co.uk
dealers.westwoodtractors.com
www.countax.co.uk
countax.com
dealers.westwoodtractors.com
www.countax.com
countax.co.uk
www.countax.com
countax.co.uk
www.countax.com
dealers.countax.co.uk
www.countax.co.uk
www.countax.com
www.countax.com
dealers.countax.co.uk
dealers.countax.co.uk
www.countax.com
www.countax.com
www.countax.co.uk
www.countax.co.uk
dealers.westwoodtractors.com
dealers.countax.co.uk
dealers.countax.co.uk
countax.co.uk
dealers.westwoodtractors.co.uk
www.countax.com
www.countax.com
www.countax.co.uk
dealers.westwoodtractors.com
www.countax.co.uk
countax.com
www.countax.com
www.countax.co.uk
www.countax.com
countax.com
Certificate
The complete raw certificate details for www.countax.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGOTCCBSGgAwIBAgISA9hN2Scfh+CrMnqxN9m7fuEIMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MTUwNzU1MjBaFw0x ODEwMTMwNzU1MjBaMBwxGjAYBgNVBAMTEXd3dy5jb3VudGF4LmNvLnVrMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNDYxirSvBQZ9UwCqcgTYStcnxt/ nQzuUoq82OJ9u7VtgEDbIXGu32ihTNutY4b/gieqwTeA+zcWx9S/VaW4YwOCcL2G YdGOPxgEPseytxOQGl/D1pSfKLzH0N5CmoLh3VutvTIafXB3c6KVvRZ6CN7PQXVz C2TDfHC7oEYSPgOBSX9sj563INFfK6kX+cvAAB/NZMqeKhJ5g/sh1qXn2RMOVVmp +iQGo00Lj2LlxUq3G4Ylqlza0pczU0SZeg7gHsEsTSRBUdwPJdDiD7KF9MkWXOAL w00MjPUBTaeAzMjAwHwLwQ4p65LOWYvJpfk8SoREmaLt6U2/gocLCNB/4wIDAQAB o4IDRTCCA0EwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSYzZr2Nro4ImCl+0e/ZZU4 Ed35XzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw dC5vcmcvMEkGA1UdEQRCMECCDWNvdW50YXguY28udWuCC2NvdW50YXguY29tghF3 d3cuY291bnRheC5jby51a4IPd3d3LmNvdW50YXguY29tMIH+BgNVHSAEgfYwgfMw CAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0 aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRp ZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQ b2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9y eS8wggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQApPFGWVMg5ZbqqUPxYB9S3b79Y eily3KTDDPTlRUf0eAAAAWSdJsMgAAAEAwBGMEQCIAvPHzVEZWicfg94pG3aI8B2 gGu4Q9KFqKCftoixuc1NAiApozBxmymQAMtkD6Mb1IUhvAg/fy7p97O4lqvLQ8a8 YAB2ANt0r+7LKeyx/so+cW0s5bmquzb3hHGDx12dTze2H79kAAABZJ0mxvkAAAQD AEcwRQIhAPkpmQpiBepgvTZWjdxB0E//R1sOcVc+OSVMi3fr1NqLAiATcAC0LkC3 IoXviN/IgpTl39Mai079n4tUEyasvgslgjANBgkqhkiG9w0BAQsFAAOCAQEAOde9 2F8JL+fd1frjOtNlTqqeRXKIZSE3FyO6bBJnKwyNTawaC8SpVojZD007Jr7xWB08 5UNjVP6S/sRy/C74wKUN/nt/P2tZhpklVEpNyBL5rNYBdzPjF8rIfi23AxlW6Yg3 5+mrsNpQ6VWUXCtBpQrBr9Pho57oRGjvbSIPQGyT3dKr075J2uUa6wHv2lQbLnD0 D7hc7HC6B1EVVLEaqA6C3N3uRKpOcCcYXeRw0QGEZ/yojssp46T7ewgfCI0SGI+n sWfPb/+DFCNsmRBbVbtjJfquzH8FBkTjsX648Gr2dvYVDpzveVUYYs5v6PKv/EXW K1EeNxCkgqhw9j3Zxw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNDYxirSvBQZ9UwCqcgT YStcnxt/nQzuUoq82OJ9u7VtgEDbIXGu32ihTNutY4b/gieqwTeA+zcWx9S/VaW4 YwOCcL2GYdGOPxgEPseytxOQGl/D1pSfKLzH0N5CmoLh3VutvTIafXB3c6KVvRZ6 CN7PQXVzC2TDfHC7oEYSPgOBSX9sj563INFfK6kX+cvAAB/NZMqeKhJ5g/sh1qXn 2RMOVVmp+iQGo00Lj2LlxUq3G4Ylqlza0pczU0SZeg7gHsEsTSRBUdwPJdDiD7KF 9MkWXOALw00MjPUBTaeAzMjAwHwLwQ4p65LOWYvJpfk8SoREmaLt6U2/gocLCNB/ 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 334941327127809288292292260918107196809480 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-15 07:55:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-13 07:55:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.countax.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23330834296259550889081138096814014828227304883948094860158714332646926618455213951756342506718924588487655876529683787189782123121037736867866533375767863684567019780476399549250421737931542490228123186109331029096687513648707654385072435114113552646578338059748007865217330811630805475134067904158381389875490782860693281196014868606046348840715228456178550636838282342823958411359068650939680484100943749724518323527939284188858079370529364752956260223520511937797014226043428765775241363703312273977005828960907509013013043453262646857140157091765873416098515582027951524427070204608805458993241640967511827578851 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 98cd9af636ba382260a5fb47bf65953811ddf95f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countax.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countax.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countax.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countax.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001649d26c320000004030046304402200bcf1f354465689c7e0f78a46dda23c076806bb843d285a8a09fb688b1b9cd4d022029a330719b299000cb640fa31bd48521bc083f7f2ee9f7b3b896abcb43c6bc60007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001649d26c6f90000040300473045022100f929990a6205ea60bd36568ddc41d04fff475b0e71573e39254c8b77ebd4da8b0220137000b42e40b72285ef88dfc88294e5dfd31a8b4efd9f8b541326acbe0b2582 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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