sensity.se
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e8:c7:e2:92:0b:1e:e1:22:1d:5d:3b:44:d6:21:a6:eb:5b was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sensity.se
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e8:c7:e2:92:0b:1e:e1:22:1d:5d:3b:44:d6:21:a6:eb:5bSerial Number (int): 340548059713302559233633490217049273068379
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ee:4b:34:c2:4b:25:55:5c:8a:a1:f5:14:0b:0c:3e:2a:2f:96:05:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ac:06:c7:8d:19:c8:13:95:c7:1d:6c:99:5a:63:32:12:69:2f:e4:96
Fingerprint (sha256): 77:6a:60:89:36:90:7c:72:64:a6:d4:d8:38:32:1a:13:91:73:c8:ad:42:b5:12:80:8d:82:a0:af:e7:9a:e9:a1
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate sensity.se
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sensity.se
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sensity.se
www.sensity.se
www.sensity.se
Other certificates including the domain name sensity.se
(limited to 100 certificates)
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
sensity.se
Certificate
The complete raw certificate details for sensity.se in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgISA+jH4pILHuEiHV07RNYhputbMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MDIxOTAzMThaFw0x ODA5MzAxOTAzMThaMBUxEzARBgNVBAMTCnNlbnNpdHkuc2UwggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQDVAOiEDa0QsZ9pFQ9BUGql1mplWrv+ay7RVVfh EWU5Aro5SBo5I4ZD9lsbAoeq/6iKHrN0ikIEF6KE+PfVsizWzN4UPANfT60ejnuR 6kAAMtXVThCrriIvL9DDMMHNluYiz3sfJIuHPKHdf/ousT0+4oK2qCe5vEcjZo10 pfzoTFzmo6SYEVnsA2aY7fVo3uKeQglcvxjITUW8PoWWSZ4Wyu5GhAdTfT3dDu5V jFEJwaUO0lWQ10eChlW4+KQ8NmFAb/gUKhXVqC7k/HHmUIyn0PM2B2m87uY6+B0W DcPxWcY9t+3FVHeA+PBINa+GEFJ7M3K0bRyj9+xLghaZE0tnN0Br70regRYuCUIW P3vF4kdD+W4tTCdyysytGjvroVCYLmroKQmswhltG6wT+HC+BRiqTnzD77+DgUyp pyajQ9c2v6wroaPzXnLCDVT+h5Gw1H4J/VkRD8mMQ2CTi7FGpMYc0Mhvcw6InkJp gOQsJGcPQBBE52hUNNI9y3HNVNBZGO0rXHxPvV9XmxPIXJpwlAk9umWO3WgxEKMJ me+sJ2PzjnIAv9kt8EX+Pyt/Bx5KSc84TzD6WXpF68SgyA9hmYNShTsf+1kCR+y7 pvBVcdr5Zhkg6Uw6c0feT4H+KsQ1CD+K4qO7GjkaKcYLof58gTbhvSF/nLKdBUVk zLsN3QIDAQABo4IDIjCCAx4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTuSzTCSyVV XIqh9RQLDD4qL5YFzDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMCUGA1UdEQQeMByCCnNlbnNpdHkuc2WCDnd3dy5zZW5z aXR5LnNlMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB 1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsG AQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQg dXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3 aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRz ZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA dgDbdK/uyynssf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWRcl6JoAAAEAwBH MEUCIQCoPylYlbL+T184TrKpQTbcfGpBFj0JNDIEFNm2X1VYTgIgCRqZiYg3NVN0 zB77zfkQU6jyuXUDbye7Lg5nMatohAgAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily 3KTDDPTlRUf0eAAAAWRcl6J8AAAEAwBHMEUCIDbXc/feyhn8o/IwtkSFW3kEjetJ 7Ezvq+EGQfQjEtmwAiEA2+YbSj6XbVs3IjOtolNhriWKDfdUI0xx8zaQK1a6EGIw DQYJKoZIhvcNAQELBQADggEBAAjOO5A/osL0qorPQ35ja2qgR4J1Mw8rzK4vfqIp wkCCEdmFhSwalUg7ALrWK0+03ugUa4sR0CSGG+oFw+cZRdl4Bd+L+M93QlWpy6OA 8KLRN732D/8X7Zk2Tl+BJkooXMXlyV/8WFtfQJ8qEc7CdzR7/pSmRKyHk46jrTEo euA92U8odML17AuUvryqVNJWnImw2vxVnhx83aVlhd0jmTejjPkAi4lxty5++mvN MQCNJCm8wkJaulJLP0h/H5txE1eG5dXEybOkTLF++c+3zRNOnYvw6cWCYTzLvB3i R3qLUKOyKHx7jh352uq4gVbiOaGx7njlKb8459R++Fh+zBg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1QDohA2tELGfaRUPQVBq pdZqZVq7/msu0VVX4RFlOQK6OUgaOSOGQ/ZbGwKHqv+oih6zdIpCBBeihPj31bIs 1szeFDwDX0+tHo57kepAADLV1U4Qq64iLy/QwzDBzZbmIs97HySLhzyh3X/6LrE9 PuKCtqgnubxHI2aNdKX86Exc5qOkmBFZ7ANmmO31aN7inkIJXL8YyE1FvD6Flkme FsruRoQHU3093Q7uVYxRCcGlDtJVkNdHgoZVuPikPDZhQG/4FCoV1agu5Pxx5lCM p9DzNgdpvO7mOvgdFg3D8VnGPbftxVR3gPjwSDWvhhBSezNytG0co/fsS4IWmRNL ZzdAa+9K3oEWLglCFj97xeJHQ/luLUwncsrMrRo766FQmC5q6CkJrMIZbRusE/hw vgUYqk58w++/g4FMqacmo0PXNr+sK6Gj815ywg1U/oeRsNR+Cf1ZEQ/JjENgk4ux RqTGHNDIb3MOiJ5CaYDkLCRnD0AQROdoVDTSPctxzVTQWRjtK1x8T71fV5sTyFya cJQJPbpljt1oMRCjCZnvrCdj845yAL/ZLfBF/j8rfwceSknPOE8w+ll6RevEoMgP YZmDUoU7H/tZAkfsu6bwVXHa+WYZIOlMOnNH3k+B/irENQg/iuKjuxo5GinGC6H+ fIE24b0hf5yynQVFZMy7Dd0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 340548059713302559233633490217049273068379 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-02 19:03:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-30 19:03:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sensity.se' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 868978660698516421876040035094579043146254175497796257206052451343951002435154231029962988647575849165553870370824318435544137942343972707567850376716178318536315343517981686033515825584158032837509042702810233195924788315028763639965520463201671134366413747141477878270827674951530733949045676607434320894460256435030268297425755594400978293426665932358066693052857467786387838960898701347067535330873636963474649544527578976081851761337327093047875073341567664721754865447416289382515617201358240712633196979492323793320977311310747623980519931803350740273995904928613329825636986680199701802027652282961607385552369858751337166354680964979304865421816207323536050877986732930804548635047435579087394604844788515785518564487360499261239515611908940805745902229873638247187073394413143845534977076537267226616253710145236539254986406874323264252110839423253524546117289813771159011326907425686928784766917594272068955294873985170297151842044411908034616532613552491915448184764531830830585048681175383339401813211111181789878708291033834220380381474747038930022578174111961245833373097345199776735149666598385708928395978608954003256514214525117382150566129467671336946566255975781243508041019876457875385642640392258918867208441309 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ee4b34c24b25555c8aa1f5140b0c3e2a2f9605cc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sensity.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sensity.se' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001645c97a2680000040300473045022100a83f295895b2fe4f5f384eb2a94136dc7c6a41163d0934320414d9b65f55584e0220091a99898837355374cc1efbcdf91053a8f2b975036f27bb2e0e6731ab688408007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001645c97a27c0000040300473045022036d773f7deca19fca3f230b644855b79048deb49ec4cefabe10641f42312d9b0022100dbe61b4a3e976d5b372233ada25361ae258a0df754234c71f336902b56ba1062 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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