sauvonslesfruitsetlegumes.fr
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:52:fc:a0:11:ff:64:7c:c4:22:af:66:32:e6:ab:2f:24:ab was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sauvonslesfruitsetlegumes.fr
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:52:fc:a0:11:ff:64:7c:c4:22:af:66:32:e6:ab:2f:24:abSerial Number (int): 289575808470268102353483969376280567030955
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e8:15:7a:44:c7:a2:9a:71:d3:04:0b:2c:0a:29:32:e1:68:d1:02:55
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d9:26:c7:d4:3a:f6:44:27:3c:1b:23:42:25:4b:69:d2:25:4c:01:85
Fingerprint (sha256): 5d:5b:87:cc:2c:36:af:60:3c:67:8a:0d:f3:5d:e7:8a:0c:35:ca:06:7e:14:79:03:4e:25:cb:9a:f1:1c:6c:c9
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate sauvonslesfruitsetlegumes.fr
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sauvonslesfruitsetlegumes.fr
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sauvonslesfruitsetlegumes.fr
www.sauvonslesfruitsetlegumes.fr
www.sauvonslesfruitsetlegumes.fr
Other certificates including the domain name sauvonslesfruitsetlegumes.fr
(limited to 100 certificates)
www.sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
www.sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
sauvonslesfruitsetlegumes.fr
www.sauvonslesfruitsetlegumes.fr
Certificate
The complete raw certificate details for sauvonslesfruitsetlegumes.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgISA1L8oBH/ZHzEIq9mMuarLySrMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA1MDgwMTA3MDBaFw0x NjA4MDYwMTA3MDBaMCcxJTAjBgNVBAMTHHNhdXZvbnNsZXNmcnVpdHNldGxlZ3Vt ZXMuZnIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCaDViTGwHbGVTb W/z0SFI7k6p+QHt9BErLwGvQhBVm+49Fm0smhpMIN6wTaEGXMiFbNhBBo647pqBe 30PvTCBWPaj9EankaIDdQ4hXcceAO34g0MAUbouju0AEv//qUhQ8to74i7thy4XW j5wYUV35nA9dTHJE2abrj8J4TaATUp2gn2gnfc1moGOi00oVpOaX4eS+YvmMjNAV TVy8khz7yNUhdPZg4IkUahDDPAubVsomv8lFpNceH8vSlc/8cQXiC1KeSvv2To9N Cr/a7U+yQz2TicPqwwuvkhnpASMo1XKSNUvMnxDyW4DUJdN6WwWwN0wzOqN8Ko3G 07S6QMY4tbD/HFnOsCjpEJtIwKtRk2Ao65TAYePecie2XdaA6rLHH17u1mtrSeqy WaEhuWaKfbeuYbsqJT6su5cX9/yvR06vO/BRNkla7PH8eMes4aAl4sNX5uZ4EfUV MXl6sJKdlj19Gjexnumo8nUZlh+uqwFX1ndgl56avFfhAJdhMhgDAjZAvHsU2j7H JppSpmh4S5DBbJ+TySi4kyHuQl0mxqaak1FrfzWxJg1+LjwFfpN8vMbyIyZYMh/y ahWcvLgdnTmlivltoIIkV0Iv1dUANiUU/iWOIedsfoRDyrrKlIgq5UKo6/hso6Xr L2RiMnGiJanGR8wg25rijbLUx5LzWwIDAQABo4ICPzCCAjswDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBToFXpEx6KacdMECywKKTLhaNECVTAfBgNVHSMEGDAWgBSoSmpj BH3duubRObemRWXv86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0 dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNo dHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzBJBgNVHREEQjBAghxz YXV2b25zbGVzZnJ1aXRzZXRsZWd1bWVzLmZygiB3d3cuc2F1dm9uc2xlc2ZydWl0 c2V0bGVndW1lcy5mcjCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC 3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUg cmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29y ZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBz Oi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IB AQAZqCfwmNr7PT7XMa0cziqJJlpFQUKjxivnT/FRvGUoyCA/jPPXcO1M6gy57qS9 kiGLNOORYr53lJAnHJFjq6a/nP8ywXxs2E9RUT9y8Jhzc07w8SbNzd1hDzcEKfEK EJfDSX/ZHpowbIPcdK3mO/DHTP32hriLmPRvg7T2grTRSfs0hQIf3GSLqfvPhM7W 2m5KqVvzFUfTK8ASD04nPhCyfGJwbFCE1w/zSNfgKfcSCvZxtCptXLAnvqO4xUoS 7Pmg92w6xwMIUc+55hA45vLOVNbQsa8ILvieMMxRMWKWstJNcO7OcxwfQFWDOHtO YRjyxPosOUl9juQSXzsRbhvg -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmg1YkxsB2xlU21v89EhS O5OqfkB7fQRKy8Br0IQVZvuPRZtLJoaTCDesE2hBlzIhWzYQQaOuO6agXt9D70wg Vj2o/RGp5GiA3UOIV3HHgDt+INDAFG6Lo7tABL//6lIUPLaO+Iu7YcuF1o+cGFFd +ZwPXUxyRNmm64/CeE2gE1KdoJ9oJ33NZqBjotNKFaTml+HkvmL5jIzQFU1cvJIc +8jVIXT2YOCJFGoQwzwLm1bKJr/JRaTXHh/L0pXP/HEF4gtSnkr79k6PTQq/2u1P skM9k4nD6sMLr5IZ6QEjKNVykjVLzJ8Q8luA1CXTelsFsDdMMzqjfCqNxtO0ukDG OLWw/xxZzrAo6RCbSMCrUZNgKOuUwGHj3nIntl3WgOqyxx9e7tZra0nqslmhIblm in23rmG7KiU+rLuXF/f8r0dOrzvwUTZJWuzx/HjHrOGgJeLDV+bmeBH1FTF5erCS nZY9fRo3sZ7pqPJ1GZYfrqsBV9Z3YJeemrxX4QCXYTIYAwI2QLx7FNo+xyaaUqZo eEuQwWyfk8kouJMh7kJdJsammpNRa381sSYNfi48BX6TfLzG8iMmWDIf8moVnLy4 HZ05pYr5baCCJFdCL9XVADYlFP4ljiHnbH6EQ8q6ypSIKuVCqOv4bKOl6y9kYjJx oiWpxkfMINua4o2y1MeS81sCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 289575808470268102353483969376280567030955 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-08 01:07:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-06 01:07:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sauvonslesfruitsetlegumes.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 628477869709134082108926447123398008518375490265837377632396827243992425426536600057238591274643594697231129138517099007712755690187608952970198891148432168681698030719649011400560898378735545796972172761734548024049069260532049943372593455960183669453160122192716551945857448550630367240201409104673256631512019159928427676101813832571286684655405227650283672965927576502110925801638435840105290558856014895099350020972094284041449994920710531624860275623715988671242166639209918486758345879445356964148933195906865080711457564607042224415020706953069702070446958927861053304638730117025752526405597129680929587110531710691844280844984527146301290442890130430082836526261440761044417139405578784419778280543441271194759451166901559584541541858099648966887250124112693858780807577620368551167197436173956456750287633803787253741747038012983259110440744457099550008363925299704831901338524617370885741204742204828524581459777141586188353895666989224317591698910830439363212491509257733180458812820867150957662659275096502952853517603415633301613529122466123565076886362573397309234697248710063511032040825000155324522361620185962095334395928044059530914440069998428575515447158100569487475890978771339855923888227430119720274294403931 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e8157a44c7a29a71d3040b2c0a2932e168d10255 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sauvonslesfruitsetlegumes.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sauvonslesfruitsetlegumes.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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