gonmedia.es
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:a4:0f:15:8c:84:4c:85:de:48:9a:1a:d7:0e:73:03:f2:be was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gonmedia.es
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:a4:0f:15:8c:84:4c:85:de:48:9a:1a:d7:0e:73:03:f2:beSerial Number (int): 404275502210264842224664601955790674457278
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6e:03:15:72:78:28:d5:5c:93:73:2a:f8:a7:5a:30:ab:ef:d3:5e:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bc:6a:3f:b1:f9:10:47:aa:44:31:83:4c:08:72:e4:fc:5a:4f:59:49
Fingerprint (sha256): 76:e4:0d:91:4c:c2:b2:e6:ad:19:a2:ec:d7:36:e3:21:bd:58:f4:d4:14:b7:3b:08:c4:28:a7:aa:e9:4c:2c:8a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate gonmedia.es
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gonmedia.es
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gonmedia.es
www.gonmedia.es
www.gonmedia.es
Other certificates including the domain name gonmedia.es
(limited to 100 certificates)
cdn.gonmedia.es
cdn1.gonmedia.es
gonmedia.es
gonmedia.es
gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
gonmedia.es
gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
gonmedia.es
gonmedia.es
gonmedia.es
cdn1.gonmedia.es
gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn.gonmedia.es
cdn1.gonmedia.es
gonmedia.es
gonmedia.es
cdn1.gonmedia.es
gonmedia.es
gonmedia.es
*.gonmedia.es
sni.cloudflaressl.com
cdn1.gonmedia.es
cdn1.gonmedia.es
sni.cloudflaressl.com
gonmedia.es
gonmedia.es
gonmedia.es
gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
*.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
gonmedia.es
cdn1.gonmedia.es
gonmedia.es
cdn1.gonmedia.es
gonmedia.es
gonmedia.es
gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
gonmedia.es
gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
gonmedia.es
gonmedia.es
gonmedia.es
cdn1.gonmedia.es
gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn.gonmedia.es
cdn1.gonmedia.es
gonmedia.es
gonmedia.es
cdn1.gonmedia.es
gonmedia.es
gonmedia.es
*.gonmedia.es
sni.cloudflaressl.com
cdn1.gonmedia.es
cdn1.gonmedia.es
sni.cloudflaressl.com
gonmedia.es
gonmedia.es
gonmedia.es
gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
*.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
cdn1.gonmedia.es
gonmedia.es
cdn1.gonmedia.es
gonmedia.es
Certificate
The complete raw certificate details for gonmedia.es in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGCzCCBPOgAwIBAgISBKQPFYyETIXeSJoa1w5zA/K+MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA1MjMxNjQ0MDBaFw0x NzA4MjExNjQ0MDBaMBYxFDASBgNVBAMTC2dvbm1lZGlhLmVzMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEArDgSb2/7Tz73Jhn8PpxExu1D47oMkKnzx8Ou pMAWSP10hDRFmkRQCCELr4MQ7sZYAniLnfY0vn+tYkNTR8Q4HAs2Qh3xrm1UbXDy jNjshD7L6f2MRbnoJqTftbnpHki72D0oiv/UIunLuSBPckz+ECRpsEsZm5uv+ElP tl8DOix9nyedJC9etv2BgqzvP3UXCEwSAn1fpkRfh4Ajh4ynLugz6OBG80yuUDRr XKR+wv0mwpaC4BESvAU9Ku9tn8t3O6XjvJX81nhpwtDUg1joxdmRIUY5O8dWv/YH SqQMbNVu7WLVXJAsh1MWfKUX1XJ96umZxJ7x2hYm+qjeJqChiJ2TgIR6FC1BOOZm KIvWasPrsnsJZEWSboeddc4eSj43TKOinD+i+AIu70rZvNoVZcWpVDn/L6O9IMBE OyFcekjb180MjfsXqdzJiCmJr2O5dyz1BOaEDHzIg6pxaBU6GTexdhUeJu228Y4H 5NHjSS37EttPqmdW3optd0Su7ohkJ3I1pUwUOS+9MEQsCy70MU0YZzxJ0UTKEi3p ra/XA0NG2pgqZC3G7iye/pJaGlQVdERyq81xh47RYCLN0Fz87ytJgQHYYkZpA3aY XtKrtKqeOZYw8SMM/eXxLt78lQMNAF7FZYFGKrpD7nGeb7FM+t+V7vdW84CmJFzq c87/MTUCAwEAAaOCAh0wggIZMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUbgMVcngo 1VyTcyr4p1owq+/TXsAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw cAYIKwYBBQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wJwYDVR0RBCAwHoILZ29ubWVkaWEuZXOCD3d3dy5n b25tZWRpYS5lczCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMB AQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGr BggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVs aWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFu Y2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8v bGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQCT sZqhzsfnDxplfFTH8tkVwL97I3zOQwaOWwvOgfTwMjsFmF75lVz47vU9qJrb7TJG eF+Zwm4Vl7m8OptvAeg0kkvQcrbhA9X0geG3kz9pI4xaEloOP62yZTdp7qGPbuO5 Ovrr4Wnn+MAIWFqnJtT/HyBI12+lmZ2JV8cssSd0N3V5i2Bo9yP62Y15yczSyCmp 7shK9wrgpqSHr+puZ21biXxr3gqWzB2PKMxOvKHnMFanbo2l3YeqjAuOKWHifD6G 7hLqUpjzYpeojQrGxQ7iSIzSpbJrIppzxKu8ALoJ+Z05d5gz0os1TYBbyNTexiiv 1dcVfgfK/hBaWC+Ubo4h -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArDgSb2/7Tz73Jhn8PpxE xu1D47oMkKnzx8OupMAWSP10hDRFmkRQCCELr4MQ7sZYAniLnfY0vn+tYkNTR8Q4 HAs2Qh3xrm1UbXDyjNjshD7L6f2MRbnoJqTftbnpHki72D0oiv/UIunLuSBPckz+ ECRpsEsZm5uv+ElPtl8DOix9nyedJC9etv2BgqzvP3UXCEwSAn1fpkRfh4Ajh4yn Lugz6OBG80yuUDRrXKR+wv0mwpaC4BESvAU9Ku9tn8t3O6XjvJX81nhpwtDUg1jo xdmRIUY5O8dWv/YHSqQMbNVu7WLVXJAsh1MWfKUX1XJ96umZxJ7x2hYm+qjeJqCh iJ2TgIR6FC1BOOZmKIvWasPrsnsJZEWSboeddc4eSj43TKOinD+i+AIu70rZvNoV ZcWpVDn/L6O9IMBEOyFcekjb180MjfsXqdzJiCmJr2O5dyz1BOaEDHzIg6pxaBU6 GTexdhUeJu228Y4H5NHjSS37EttPqmdW3optd0Su7ohkJ3I1pUwUOS+9MEQsCy70 MU0YZzxJ0UTKEi3pra/XA0NG2pgqZC3G7iye/pJaGlQVdERyq81xh47RYCLN0Fz8 7ytJgQHYYkZpA3aYXtKrtKqeOZYw8SMM/eXxLt78lQMNAF7FZYFGKrpD7nGeb7FM +t+V7vdW84CmJFzqc87/MTUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 404275502210264842224664601955790674457278 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-23 16:44:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-21 16:44:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gonmedia.es' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 702592349444814599725311072781609783255974078547077636900371305486913847863516428077019796559286859126231538023399982926333505818913255231225303692374733377142475019028956808102007039184252318505570563119171249583034587067850690908093596512183414198362404255779906221860918478269238989903953603527952310631389949825259364678884513919591064477317403764580637994442109774618458838980643833901900063861982583958458907596746939786533893993139753054996919345811548222972379645652103582870978460086361273406794342316616973088830182804542662893194129996967202044376740579636502969519093015276224933930569541964902131259123091803647345902030803133573157849098475647741841375823669230640042032593125368292276672610621402965816142421513438823763242375446217368245795222400685194449271542637950432729016244969392231290664318533556122770921817254314593393864432916889638082198920626193355964221226186739623768132609310683873277870644457616717405453836008801206823544962417634907426478400327855183528708392549708987532023504408187011420415670873399418314537761365571605415303132245106802907524204284377747272390856994062577573449752418203369518709118549053673207553315353176604847154518012298274488202767008281631161663002945565877025897522868533 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6e0315727828d55c93732af8a75a30abefd35ec0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonmedia.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gonmedia.es' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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