flix.mk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:72:5c:84:93:0d:7d:0e:25:19:81:dc:54:8b:0e:cb:a9:23 was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=flix.mk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:72:5c:84:93:0d:7d:0e:25:19:81:dc:54:8b:0e:cb:a9:23Serial Number (int): 300252024965648144208118737392343471335715
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a1:e8:da:08:0b:b5:ae:b1:07:67:ee:15:3e:60:cc:df:f9:83:8e:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): db:dc:09:d5:a7:52:e5:9e:a7:f5:2b:e9:a9:c7:82:67:37:da:97:a2
Fingerprint (sha256): 78:8f:89:c2:50:14:75:98:29:e6:1d:0d:d0:01:a5:48:41:a5:89:75:02:3a:a0:2e:98:20:17:be:ad:35:f7:8f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate flix.mk
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for flix.mk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.flix.mk
autodiscover.friia.de
cpanel.flix.mk
cpanel.friia.de
flix-mk.radicalnames.com
flix.mk
friia-de.radicalnames.com
friia.de
mail.flix.mk
mail.friia.de
webdisk.flix.mk
webdisk.friia.de
webmail.flix.mk
webmail.friia.de
www.flix-mk.radicalnames.com
www.flix.mk
www.friia-de.radicalnames.com
www.friia.de
autodiscover.friia.de
cpanel.flix.mk
cpanel.friia.de
flix-mk.radicalnames.com
flix.mk
friia-de.radicalnames.com
friia.de
mail.flix.mk
mail.friia.de
webdisk.flix.mk
webdisk.friia.de
webmail.flix.mk
webmail.friia.de
www.flix-mk.radicalnames.com
www.flix.mk
www.friia-de.radicalnames.com
www.friia.de
Other certificates including the domain name flix.mk
(limited to 100 certificates)
Certificate
The complete raw certificate details for flix.mk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgISA3JchJMNfQ4lGYHcVIsOy6kjMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MjcxNDQ2MTFaFw0x ODEyMjYxNDQ2MTFaMBIxEDAOBgNVBAMTB2ZsaXgubWswggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDTLxliiXFfgrkTbZVmE2TOwJ6DtTp8PL9b2FTqn5YX sskGyLtsOADhcWRNlOuDUszKJXtf59BxxYKAHQBmcm2hCZBuwh7rAIcGak6deEz7 Tu6FsVu9dX4UVlRiZuGxXB5bxIdh+ELqK+wcfHE/YhRE/BY0ta3GbM3w3M6juLGq 3RHo54GN96HEAvimL8xH64B2JYjKCwL44fHjS5fhgwceg9ABAV86dwNla6luYIpH U4z59ji17v0D7IsG9hd936pk/q0jQMeJ5Jj1+K54v7IXnkQUXQ0lxe7n+dtwuSQ3 lYKQsdhnLBBTIY5SYqXCYpkj+lQ/+0iCKfk1vXSzQJLBAgMBAAGjggReMIIEWjAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFKHo2ggLta6xB2fuFT5gzN/5g44zMB8GA1Ud IwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggr BgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggr BgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wggFe BgNVHREEggFVMIIBUYIUYXV0b2Rpc2NvdmVyLmZsaXgubWuCFWF1dG9kaXNjb3Zl ci5mcmlpYS5kZYIOY3BhbmVsLmZsaXgubWuCD2NwYW5lbC5mcmlpYS5kZYIYZmxp eC1tay5yYWRpY2FsbmFtZXMuY29tggdmbGl4Lm1rghlmcmlpYS1kZS5yYWRpY2Fs bmFtZXMuY29tgghmcmlpYS5kZYIMbWFpbC5mbGl4Lm1rgg1tYWlsLmZyaWlhLmRl gg93ZWJkaXNrLmZsaXgubWuCEHdlYmRpc2suZnJpaWEuZGWCD3dlYm1haWwuZmxp eC5ta4IQd2VibWFpbC5mcmlpYS5kZYIcd3d3LmZsaXgtbWsucmFkaWNhbG5hbWVz LmNvbYILd3d3LmZsaXgubWuCHXd3dy5mcmlpYS1kZS5yYWRpY2FsbmFtZXMuY29t ggx3d3cuZnJpaWEuZGUwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQB gt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y ZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJl IHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2Nv cmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRw czovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQUGCisGAQQB1nkCBAIE gfYEgfMA8QB2AMEWSuCnctLUOS3ICsEHcNTwxJvemRpIQMH6B1Fk9jNgAAABZhu1 fmQAAAQDAEcwRQIhAJon28JFtHzT4stTOgrqawRFbv0hXvBJuWHwaCfGzicEAiAy LrWfy8ptmjJQjGc/9L0NSS9vRRs8x5UwhlSV89xdOQB3ACk8UZZUyDlluqpQ/FgH 1Ldvv1h6KXLcpMMM9OVFR/R4AAABZhu1fncAAAQDAEgwRgIhAPi/QaiveVtg3otw h3gydBJJjgDSCLenccwkpIVyHF4LAiEApOD1Yg2M0b4qxgg+xPz9qme+ViAGfzev Hez3Y4Hx3VUwDQYJKoZIhvcNAQELBQADggEBAB/W7+iC0YNbVw0fWVCSnzbuxR0f EH+qPfKHyeYziAX/P0GvNpfIX7Di6TzocMBbPMIaG26EKgPAwU0L8+hgdvKwfQYK G/nKZ5ihQ0oadJriFTlOAVJZDiep7v9xL0QYi4Jrtng4Q6jEigVz2L92czpPUnNB JpxxpdhtYw+eHrUR90841c+kZA9zVhoCWvc314B4rWQ3M1tEK0c2pdNa96YfvMHo XPvecnpg38JQwdk1bBUrznXJk6BQVsabsgfre8BM2U+fFw4zDRVNaf2xyYdVNZlP ad8g/DFi6SwHT2eSsiuMWn38Tnx5BEfp6+mqtvcpndher10oeLCK2WUkxD0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y8ZYolxX4K5E22VZhNk zsCeg7U6fDy/W9hU6p+WF7LJBsi7bDgA4XFkTZTrg1LMyiV7X+fQccWCgB0AZnJt oQmQbsIe6wCHBmpOnXhM+07uhbFbvXV+FFZUYmbhsVweW8SHYfhC6ivsHHxxP2IU RPwWNLWtxmzN8NzOo7ixqt0R6OeBjfehxAL4pi/MR+uAdiWIygsC+OHx40uX4YMH HoPQAQFfOncDZWupbmCKR1OM+fY4te79A+yLBvYXfd+qZP6tI0DHieSY9fiueL+y F55EFF0NJcXu5/nbcLkkN5WCkLHYZywQUyGOUmKlwmKZI/pUP/tIgin5Nb10s0CS wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 300252024965648144208118737392343471335715 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-27 14:46:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-26 14:46:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flix.mk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26659507809162303232273022862552539163779607344958891464646423737142909781844602923539086400281481826143646405176754552027154538124893799050744139046360338891752203320523456107844522880720226101711219603524500898450377137615549236064253192591327008584993140692325490770242615329631581386667749809695193567961707844566314584146261885242490800585548111207083135547379571492850798674796178997982132783989295924942171740380112704115708913916864524661793455648187498411184339270849798351085749739178959866739074089976562024451784898165359852074118180982277806212226703030136807420400052404121171689497135151939951425262273 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a1e8da080bb5aeb10767ee153e60ccdff9838e33 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (341 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.flix.mk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.friia.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.flix.mk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.friia.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flix-mk.radicalnames.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flix.mk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friia-de.radicalnames.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friia.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.flix.mk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.friia.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.flix.mk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.friia.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.flix.mk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.friia.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flix-mk.radicalnames.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flix.mk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friia-de.radicalnames.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friia.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f63360000001661bb57e6400000403004730450221009a27dbc245b47cd3e2cb533a0aea6b04456efd215ef049b961f06827c6ce27040220322eb59fcbca6d9a32508c673ff4bd0d492f6f451b3cc79530865495f3dc5d39007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001661bb57e770000040300483046022100f8bf41a8af795b60de8b708778327412498e00d208b7a771cc24a485721c5e0b022100a4e0f5620d8cd1be2ac6083ec4fcfdaa67be5620067f37af1decf76381f1dd55 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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