bc.kadek.genx.sk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:9c:c7:01:aa:23:d0:24:ba:85:03:65:2e:dd:19:d8:7d:ca was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bc.kadek.genx.sk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9c:c7:01:aa:23:d0:24:ba:85:03:65:2e:dd:19:d8:7d:caSerial Number (int): 314685432049252232626663020619037043883466
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 64:30:8a:ee:1f:6d:60:27:37:c6:f9:66:d8:ae:2a:22:b3:e8:2e:ee
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ce:b4:6f:8a:45:ee:16:c0:dc:1b:5f:c3:0a:2b:5c:b6:28:e0:d7:48
Fingerprint (sha256): 71:97:cf:2d:05:1d:78:60:2d:15:6c:31:6a:d8:d3:8f:0b:e6:18:5a:81:37:88:c3:53:eb:87:97:f1:2d:e1:d7
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate bc.kadek.genx.sk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bc.kadek.genx.sk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bc.kadek.genx.sk
www.bc.kadek.genx.sk
www.bc.kadek.genx.sk
Other certificates including the domain name genx.sk
(limited to 100 certificates)
bc.jana.genx.sk
www.thepage.genx.sk
bc.kadek.genx.sk
adbee.genx.sk
kadekm.genx.sk
stravnik.android.genx.sk
moja-zlava.logamic.genx.sk
evkabc.genx.sk
pammm.genx.sk
www.aikidonz.genx.sk
kubo.genx.sk
aikido.genx.sk
moja-zlava.logamic.genx.sk
moja-zlava.logamic.genx.sk
www.aikidonz.genx.sk
adbee.genx.sk
moja-zlava.logamic.genx.sk
bc.kadekm.genx.sk
ucebnice.genx.sk
android.genx.sk
thepage.genx.sk
kadekm.genx.sk
bc.kadekm.genx.sk
adbee.genx.sk
genx.sk
bakalarka.jana.genx.sk
aikido.genx.sk
download.jana.genx.sk
www.thepage.genx.sk
courses.genx.sk
model.jana.genx.sk
eshop.genx.sk
www.thepage.genx.sk
archiv.genx.sk
three.kadekm.genx.sk
genx.sk
aikidonz.genx.sk
download.jana.genx.sk
evkabc.genx.sk
www.aikido.genx.sk
www.thepage.genx.sk
thegame.kadekm.genx.sk
ucebnica.genx.sk
model.jana.genx.sk
stravnik.android.genx.sk
api.bc.jana.genx.sk
three.kadekm.genx.sk
thepage.genx.sk
bakalarka.jana.genx.sk
www.aikidonz.genx.sk
download.genx.sk
genx.sk
thepage.genx.sk
genx.sk
eshop.genx.sk
genx.sk
kubo.genx.sk
cv.kadekm.genx.sk
evkabc.genx.sk
cv.kadekm.genx.sk
www.genx.sk
ucebnice.genx.sk
rockshop.genx.sk
download.jana.genx.sk
eshop.genx.sk
pammm.genx.sk
cv.kadekm.genx.sk
quizes.kmsoft.genx.sk
model.jana.genx.sk
eshop.genx.sk
download.genx.sk
courses.genx.sk
adbee.genx.sk
php.genx.sk
thepage.genx.sk
rockshop.genx.sk
pammm.genx.sk
download.jana.genx.sk
download.genx.sk
model.jana.genx.sk
android.genx.sk
www.genx.sk
aikido.genx.sk
android.genx.sk
php.genx.sk
archiv.genx.sk
ucebnica.genx.sk
quizes.kmsoft.genx.sk
php.genx.sk
bc.kadek.genx.sk
three.kadekm.genx.sk
thegame.kadekm.genx.sk
moja-zlava.logamic.genx.sk
kadekm.genx.sk
kadekm.genx.sk
bc.kadek.genx.sk
aikidonz.genx.sk
three.kadekm.genx.sk
archiv.genx.sk
www.thepage.genx.sk
www.thepage.genx.sk
bc.kadek.genx.sk
adbee.genx.sk
kadekm.genx.sk
stravnik.android.genx.sk
moja-zlava.logamic.genx.sk
evkabc.genx.sk
pammm.genx.sk
www.aikidonz.genx.sk
kubo.genx.sk
aikido.genx.sk
moja-zlava.logamic.genx.sk
moja-zlava.logamic.genx.sk
www.aikidonz.genx.sk
adbee.genx.sk
moja-zlava.logamic.genx.sk
bc.kadekm.genx.sk
ucebnice.genx.sk
android.genx.sk
thepage.genx.sk
kadekm.genx.sk
bc.kadekm.genx.sk
adbee.genx.sk
genx.sk
bakalarka.jana.genx.sk
aikido.genx.sk
download.jana.genx.sk
www.thepage.genx.sk
courses.genx.sk
model.jana.genx.sk
eshop.genx.sk
www.thepage.genx.sk
archiv.genx.sk
three.kadekm.genx.sk
genx.sk
aikidonz.genx.sk
download.jana.genx.sk
evkabc.genx.sk
www.aikido.genx.sk
www.thepage.genx.sk
thegame.kadekm.genx.sk
ucebnica.genx.sk
model.jana.genx.sk
stravnik.android.genx.sk
api.bc.jana.genx.sk
three.kadekm.genx.sk
thepage.genx.sk
bakalarka.jana.genx.sk
www.aikidonz.genx.sk
download.genx.sk
genx.sk
thepage.genx.sk
genx.sk
eshop.genx.sk
genx.sk
kubo.genx.sk
cv.kadekm.genx.sk
evkabc.genx.sk
cv.kadekm.genx.sk
www.genx.sk
ucebnice.genx.sk
rockshop.genx.sk
download.jana.genx.sk
eshop.genx.sk
pammm.genx.sk
cv.kadekm.genx.sk
quizes.kmsoft.genx.sk
model.jana.genx.sk
eshop.genx.sk
download.genx.sk
courses.genx.sk
adbee.genx.sk
php.genx.sk
thepage.genx.sk
rockshop.genx.sk
pammm.genx.sk
download.jana.genx.sk
download.genx.sk
model.jana.genx.sk
android.genx.sk
www.genx.sk
aikido.genx.sk
android.genx.sk
php.genx.sk
archiv.genx.sk
ucebnica.genx.sk
quizes.kmsoft.genx.sk
php.genx.sk
bc.kadek.genx.sk
three.kadekm.genx.sk
thegame.kadekm.genx.sk
moja-zlava.logamic.genx.sk
kadekm.genx.sk
kadekm.genx.sk
bc.kadek.genx.sk
aikidonz.genx.sk
three.kadekm.genx.sk
archiv.genx.sk
www.thepage.genx.sk
Certificate
The complete raw certificate details for bc.kadek.genx.sk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISA5zHAaoj0CS6hQNlLt0Z2H3KMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA3MDgyMTAzMDBaFw0x NjEwMDYyMTAzMDBaMBsxGTAXBgNVBAMTEGJjLmthZGVrLmdlbnguc2swggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KkWIBJzSWE7Y9T9LwrpPpMdbXHaC /sGAoyZ+YhRYj28TjYxvuDmFdaALvcQE4Edhn9VTcGB/jITsVoyIop0YuB6XTraW lnH2XadTX+uvLbXNhsW6oqviIMIC+Ep28oRd+PrP/f0bfX2MMfCJS7C+Rc4OiWoT FNEGMpMV8FnSSMj5RVVxEAu/DLer8PV875VSxnmLDQGWXqABu+dlugpljAgGpOfR XEJ++zz4m3J3t41Yljg4R3JytYc0EbxUQTvsRpAZXMoPVKxHU5wQ6yDyrGt0rBSv OOIwgB4j4pCuZv/vzVIjwQw7WJamn+fnrw1GmgjJq3yiPp4ENLw3IhSZAgMBAAGj ggInMIICIzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGQwiu4fbWAnN8b5ZtiuKiKz 6C7uMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMHAGCCsGAQUFBwEB BGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw dC5vcmcvMDEGA1UdEQQqMCiCEGJjLmthZGVrLmdlbnguc2uCFHd3dy5iYy5rYWRl ay5nZW54LnNrMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEB ATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasG CCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxp ZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5j ZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9s ZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAH2o wI2vcx9rMfRFRhGyUwWaHNg4ZNnwHXh8oXbvgHyjIOcrAIgn4fpkHVkWDmDdllqy krUBcaMEHE7gawtmYY8MIZMyzOn9WwpP3utPdWAqbvHB+lu98SLId0C4PUqm6viv RN9gYiRJ+R9+Ai56ZN2/STQHeF3HJglQXKVxsrlr/5gyxIyN0oB68UvLguHEzFFF PbX4ypPjORtNgeic+T8wYAAQZRFpJTsnR9qPO6Tts9aodFGD5nu7XyGNBtxM37jo ZgaZfzaoAJYGEnQPPou/BXZ8cfDO6e6vkz8sUMG4KFFxjl58hnwWb5AWkq96KlP8 b7zesvxZWNyrVT/B/jE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSpFiASc0lhO2PU/S8K6 T6THW1x2gv7BgKMmfmIUWI9vE42Mb7g5hXWgC73EBOBHYZ/VU3Bgf4yE7FaMiKKd GLgel062lpZx9l2nU1/rry21zYbFuqKr4iDCAvhKdvKEXfj6z/39G319jDHwiUuw vkXODolqExTRBjKTFfBZ0kjI+UVVcRALvwy3q/D1fO+VUsZ5iw0Bll6gAbvnZboK ZYwIBqTn0VxCfvs8+Jtyd7eNWJY4OEdycrWHNBG8VEE77EaQGVzKD1SsR1OcEOsg 8qxrdKwUrzjiMIAeI+KQrmb/781SI8EMO1iWpp/n568NRpoIyat8oj6eBDS8NyIU mQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 314685432049252232626663020619037043883466 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-08 21:03:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-06 21:03:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bc.kadek.genx.sk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22869978105030655361154670725838146657139500947210232363607291851822670120647245846024321340677998164659627028080922245058261411396936685368510280803307053067250406269847287054115972120985222382614972031020924985746592324648590794875266630621408826078136346643576498845016781529875486333240036784393769297954144071985486254164126624308842978781719337384398803810199609016820456547979221759301792687570001650405745389460774238765024590200629941732298669479953276797268767362271379603901111000375404009401550761698151425006839873627814328718919694743259105006715687015791669821160016879424864410046674444725775902053529 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 64308aee1f6d602737c6f966d8ae2a22b3e82eee . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bc.kadek.genx.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bc.kadek.genx.sk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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