www.uponyajiwingu.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:77:1d:cd:33:57:82:ec:77:55:2e:ff:89:96:b8:13:1b:ca was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.uponyajiwingu.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:77:1d:cd:33:57:82:ec:77:55:2e:ff:89:96:b8:13:1b:caSerial Number (int): 301870072532942438138270700136319939713994
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4d:80:a0:80:83:bb:12:ec:86:4b:e7:59:9b:ef:84:13:38:f1:9f:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5c:a8:35:e8:ff:06:0e:cf:54:da:17:9b:4b:ad:ab:4b:f7:d5:c3:fd
Fingerprint (sha256): 6b:35:c2:89:08:2d:bb:8c:8b:71:ca:25:f3:3c:c9:f6:fa:87:89:93:63:16:7d:e9:f3:f9:14:8b:9b:ce:15:7d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.uponyajiwingu.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.uponyajiwingu.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
Other certificates including the domain name uponyajiwingu.de
(limited to 100 certificates)
www.uponyajiwingu.de
www.uponyajiwingu.de
mawingu.uponyajiwingu.de
www.uponyajiwingu.de
mawingu.uponyajiwingu.de
mawingu.uponyajiwingu.de
www.uponyajiwingu.de
uponyajiwingu.de
mawingu.uponyajiwingu.de
uponyajiwingu.de
www.uponyajiwingu.de
mawingu.uponyajiwingu.de
www.uponyajiwingu.de
mawingu.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
mawingu.uponyajiwingu.de
mawingu.uponyajiwingu.de
uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
mawingu.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
suesue.uponyajiwingu.de
mawingu.uponyajiwingu.de
www.uponyajiwingu.de
mawingu.uponyajiwingu.de
www.uponyajiwingu.de
mawingu.uponyajiwingu.de
mawingu.uponyajiwingu.de
www.uponyajiwingu.de
uponyajiwingu.de
mawingu.uponyajiwingu.de
uponyajiwingu.de
www.uponyajiwingu.de
mawingu.uponyajiwingu.de
www.uponyajiwingu.de
mawingu.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
mawingu.uponyajiwingu.de
mawingu.uponyajiwingu.de
uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
mawingu.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
www.uponyajiwingu.de
suesue.uponyajiwingu.de
mawingu.uponyajiwingu.de
Certificate
The complete raw certificate details for www.uponyajiwingu.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgISA3cdzTNXgux3VS7/iZa4ExvKMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA2MDcxNTI5MDBaFw0x NzA5MDUxNTI5MDBaMB8xHTAbBgNVBAMTFHd3dy51cG9ueWFqaXdpbmd1LmRlMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvvd3QAojl63DwJVDUuO8njJ4 G9U43fA0+vEy3QuWNTvkD2nQ3v9sIE9/MErGvPLuNM0YzOICq1g5416j6dbfzC4B N0eZeL0rLBIFKbIXvRpgkRhcrEVCfBUvbNBnbS9rfTFanSevTh89f4KFLd7M4jQg mgtGAESBHQxc5zg5cjszj5aTWZ3WdQKKC2eoZZn6ERlrD1SuRKD4i1zx0s99Rxtc vIzQocwihawGEz8mR/48utlhaLVtH8XyI1qfAaCGlP4JLCPIWHqh8t/WlCiECuyk guoSOntG3jjLztrcHFJ5vttqEYLK+BTR+qtcJDfPvxEd+rynatSSz8cVRXQTRtv4 Oc6mYfJvS2I5APCSpxM7HNwglRtYdMwb1hpfaokhqC5Jci6gRbmv5mQTVKswPARx /k+XMrh3L1lD0e++JKWOQjCsDH6xkiq2x62pxUWas9s/VNnBb2vrwGtDml0ra2cg XgIv+1feIg92dn2H26Kj7bTEMwREYLuO5AGsZklErvqxFO2vN9cKdpW0jVvx14X6 iZmwXzVzalWJ8nZjmFDtPCv/fPRuBraPw7raMfPXLyav99tiCNvk8E8WCKFsYukn XO6GJtcuEzgZpVvnZD3zS5rSgLjL/3SavcKrttjVEyKk98XC6TgsJWzSqPlFDc+s 7QR2lBu0vWHLQYeHDPsCAwEAAaOCAiYwggIiMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUTYCggIO7EuyGS+dZm++EEzjxn0gwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3 pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAxBgNVHREEKjAoghB1cG9ueWFqaXdp bmd1LmRlghR3d3cudXBvbnlhaml3aW5ndS5kZTCB/gYDVR0gBIH2MIHzMAgGBmeB DAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu bGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNh dGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFu ZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5 IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0G CSqGSIb3DQEBCwUAA4IBAQBK4mT49Jsl1OXlLQsmFfaKFheYAjvL1b8tEblfHk5m zCfTmjIWe41kcHlD4cTVLd9+F/jP15cn1x00Rg+w5dbvzx5O4XsSVgEj5LYQjgOq zYebiAnUIcoVoZJQdYF+IkvXqr0Ax6+mVC5ill6EBgH9T3RlKeDvR/Gxf0RT+0Al /PLwr2LYQA7IUddb17rtRj/jr7LU/qhrbY9TGxAYZ6Ng8mwGolx+YwuyM22xgGp2 +LWtaaYtuQAsybeRGCakeiSxlsKLGYV1SWwQH27oQ+sJ9l04A2LIzd+c07pb8y5r 3H9Abebf/SFIuIanAStFI4iun5A8zX1dQVfe/ZXu9kMf -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvvd3QAojl63DwJVDUuO8 njJ4G9U43fA0+vEy3QuWNTvkD2nQ3v9sIE9/MErGvPLuNM0YzOICq1g5416j6dbf zC4BN0eZeL0rLBIFKbIXvRpgkRhcrEVCfBUvbNBnbS9rfTFanSevTh89f4KFLd7M 4jQgmgtGAESBHQxc5zg5cjszj5aTWZ3WdQKKC2eoZZn6ERlrD1SuRKD4i1zx0s99 RxtcvIzQocwihawGEz8mR/48utlhaLVtH8XyI1qfAaCGlP4JLCPIWHqh8t/WlCiE CuykguoSOntG3jjLztrcHFJ5vttqEYLK+BTR+qtcJDfPvxEd+rynatSSz8cVRXQT Rtv4Oc6mYfJvS2I5APCSpxM7HNwglRtYdMwb1hpfaokhqC5Jci6gRbmv5mQTVKsw PARx/k+XMrh3L1lD0e++JKWOQjCsDH6xkiq2x62pxUWas9s/VNnBb2vrwGtDml0r a2cgXgIv+1feIg92dn2H26Kj7bTEMwREYLuO5AGsZklErvqxFO2vN9cKdpW0jVvx 14X6iZmwXzVzalWJ8nZjmFDtPCv/fPRuBraPw7raMfPXLyav99tiCNvk8E8WCKFs YuknXO6GJtcuEzgZpVvnZD3zS5rSgLjL/3SavcKrttjVEyKk98XC6TgsJWzSqPlF Dc+s7QR2lBu0vWHLQYeHDPsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 301870072532942438138270700136319939713994 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-07 15:29:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-05 15:29:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.uponyajiwingu.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779076015378281511732363168871046580479929015284008706711342859347406437747253874634407373502597180322322289599571527308675402468286099900498692853968813132123114442205593085089667855582899423245332946563464561347744400736478387905730119642437801191691587201200764680144437029439587031919883989071925656270506366360606399097258151907814144537019935279905015315276195672924387991715331689181749199949119108926459871406180729342155413454633927972005921106615317031011879831591179344339820450226823003300240617584472193224372104169453308599484132146630855667773001280474306097939085627217816577160963414980049707162300982309249235192910732739227746798736718690172447799353694458405601338858802073807361071112877055020128067587451513857127166813846563702945675565725330907099048242611570960605362393357964718733393239429275923711401211449441543642820431299581390593880315031791285591885234704033132993043760979155108109440536477351845166500998575725203613321707130182128937677411558517753193365044595113477450141167599424204383598959149732665612554910589510646681811236120321126297634362536693654944309366985398071323720515789287508366967566423138642679339588798143632547332883392285261790567032542970527292114796488711083968278489926907 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4d80a08083bb12ec864be7599bef841338f19f48 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uponyajiwingu.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uponyajiwingu.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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