akendo.eu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:5a:c8:74:d3:64:9d:81:e6:e7:49:f9:71:18:e2:91:e2:10 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=akendo.eu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:5a:c8:74:d3:64:9d:81:e6:e7:49:f9:71:18:e2:91:e2:10Serial Number (int): 379341008943078010323097377660828759745040
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 4c:8a:38:8d:ca:d9:8a:49:f4:22:d4:8f:92:d4:32:3d:05:d8:76:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5a:07:6d:d5:78:73:04:e2:24:14:6a:3c:17:38:de:25:63:ca:77:12
Fingerprint (sha256): 7c:21:f3:e3:d9:40:2f:ac:43:7f:d1:3e:d7:10:02:a6:0a:dc:29:e1:9d:6f:58:d3:4f:11:11:2f:7e:49:ab:18
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate akendo.eu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for akendo.eu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
akendo.eu
www.akendo.eu
www.akendo.eu
Other certificates including the domain name akendo.eu
(limited to 100 certificates)
blog.akendo.eu
blog.akendo.eu
akendo.eu
akendo.eu
owncloud.akendo.eu
akendo.eu
owncloud.akendo.eu
rss.akendo.eu
rss.akendo.eu
blog.akendo.eu
blog.akendo.eu
mail.akendo.eu
rss.akendo.eu
mail.akendo.eu
owncloud.akendo.eu
blog.akendo.eu
blog.akendo.eu
blog.akendo.eu
mail.akendo.eu
mail.akendo.eu
owncloud.akendo.eu
mail.akendo.eu
blog.akendo.eu
mail.akendo.eu
blog.akendo.eu
mail.akendo.eu
mail.akendo.eu
akendo.eu
blog.akendo.eu
owncloud.akendo.eu
akendo.eu
blog.akendo.eu
blog.akendo.eu
owncloud.akendo.eu
blog.akendo.eu
akendo.eu
blog.akendo.eu
blog.akendo.eu
blog.akendo.eu
mail.akendo.eu
mail.akendo.eu
mail.akendo.eu
akendo.eu
rss.akendo.eu
akendo.eu
blog.akendo.eu
blog.akendo.eu
blog.akendo.eu
akendo.eu
rss.akendo.eu
mail.akendo.eu
owncloud.akendo.eu
blog.akendo.eu
blog.akendo.eu
mail.akendo.eu
blog.akendo.eu
owncloud.akendo.eu
mail.akendo.eu
mail.akendo.eu
rss.akendo.eu
blog.akendo.eu
akendo.eu
akendo.eu
owncloud.akendo.eu
akendo.eu
owncloud.akendo.eu
rss.akendo.eu
rss.akendo.eu
blog.akendo.eu
blog.akendo.eu
mail.akendo.eu
rss.akendo.eu
mail.akendo.eu
owncloud.akendo.eu
blog.akendo.eu
blog.akendo.eu
blog.akendo.eu
mail.akendo.eu
mail.akendo.eu
owncloud.akendo.eu
mail.akendo.eu
blog.akendo.eu
mail.akendo.eu
blog.akendo.eu
mail.akendo.eu
mail.akendo.eu
akendo.eu
blog.akendo.eu
owncloud.akendo.eu
akendo.eu
blog.akendo.eu
blog.akendo.eu
owncloud.akendo.eu
blog.akendo.eu
akendo.eu
blog.akendo.eu
blog.akendo.eu
blog.akendo.eu
mail.akendo.eu
mail.akendo.eu
mail.akendo.eu
akendo.eu
rss.akendo.eu
akendo.eu
blog.akendo.eu
blog.akendo.eu
blog.akendo.eu
akendo.eu
rss.akendo.eu
mail.akendo.eu
owncloud.akendo.eu
blog.akendo.eu
blog.akendo.eu
mail.akendo.eu
blog.akendo.eu
owncloud.akendo.eu
mail.akendo.eu
mail.akendo.eu
rss.akendo.eu
Certificate
The complete raw certificate details for akendo.eu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgISBFrIdNNknYHm50n5cRjikeIQMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA3MzEyMTAyMDBaFw0x NzEwMjkyMTAyMDBaMBQxEjAQBgNVBAMTCWFrZW5kby5ldTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAOk2mY38JzJYMjHR4vQ+2JlpmpgFM2RA9X6Oqlz3 PAqeOepYRMQuy2eCSZqXMXn8Z8QOce5dpxAS7ftAzeX+ysHF9Rh/MbbKojFDMBkr 8smqeCxUW7ZjmQXMaXVfUMQul5x87ONmQD+PS/tm6qWPiLcPlouet14Ku/SPILea MzT7j1+fz7nWRXrYEY8WokvhtRCidNH7DN5uv/+eq+PxW0dc8nFYJ/OAwTbPAk6w HDxdaSodQKJWmB25kUSBbvem1hSvLGRoTV5u0fqpFc9rTF4exa35RLcBIf4otGaa K2RsagGTYdCLiFNMcA+exmpIvE2CLEGs4s3d3wKeO7YWGxXhheTCVpJSCIwPENKD XT8JVovOBImK53nR0hn4bGxXCXCLQ4nntEjmK7HAxlAy7eGXCP01zhKZsjf3URdi nC2eeLneEszKknw6hmQDhEtdb+K1U/ItAbuy6zf4Ir4TGXBzKlBe/rQFycXi4Fs9 GfaCvkvfsoXUm29R+6Qp/VuzVlM55Q0zgJWvqFTAJQjMG9WrSrwM1f60qqd3AcPo iMGpWwHDhUBtOT/wSfB1HnCRKZpGNw79+xd6LGChe1ocJ3halp2qzOYDznH2Y4/O kp14L3djXcQTDcTTARxvorYoDr2hXqoyXTy9bdA+Mwabu07pJVLfvoZxtg6RRPjh EQqjAgMBAAGjggIYMIICFDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEyKOI3K2YpJ 9CLUj5LUMj0F2HaHMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIJYWtlbmRvLmV1gg13d3cuYWtlbmRv LmV1MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUF BwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBv biBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRo IHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5j cnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAJkw7YvzCJSU SawGnq6HTPzT9Wu2Vq7CfNvb1E1o5Xo29RKyqzBgYgb4q5ykD1Ngc7dMvBvck3sZ akWVWEMfxNl7iN5HalEeq5FiXGVCB/rpzI468AjnhQ1DzPDJTXc55haNux97edY8 T7D8c2dfM/1N3K9EkcUUJTOXGA5xMTHEDW5pdZTLklzxq1kr863dodwfXwSAHHXb +2elKzGg8DaGpIBGxr4sHluMVJA+GC055QQneES5rHv7juapsl/ITTfz8vHOe1s0 RhE8Ld/8fwo7/22MGRTsx7Av3YEOdRR3jXHEVYwlQsl7Q3joICgkdOJbz4uq04VE lvjMrqTJQvE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6TaZjfwnMlgyMdHi9D7Y mWmamAUzZED1fo6qXPc8Cp456lhExC7LZ4JJmpcxefxnxA5x7l2nEBLt+0DN5f7K wcX1GH8xtsqiMUMwGSvyyap4LFRbtmOZBcxpdV9QxC6XnHzs42ZAP49L+2bqpY+I tw+Wi563Xgq79I8gt5ozNPuPX5/PudZFetgRjxaiS+G1EKJ00fsM3m6//56r4/Fb R1zycVgn84DBNs8CTrAcPF1pKh1AolaYHbmRRIFu96bWFK8sZGhNXm7R+qkVz2tM Xh7FrflEtwEh/ii0ZporZGxqAZNh0IuIU0xwD57Gaki8TYIsQazizd3fAp47thYb FeGF5MJWklIIjA8Q0oNdPwlWi84EiYrnedHSGfhsbFcJcItDiee0SOYrscDGUDLt 4ZcI/TXOEpmyN/dRF2KcLZ54ud4SzMqSfDqGZAOES11v4rVT8i0Bu7LrN/givhMZ cHMqUF7+tAXJxeLgWz0Z9oK+S9+yhdSbb1H7pCn9W7NWUznlDTOAla+oVMAlCMwb 1atKvAzV/rSqp3cBw+iIwalbAcOFQG05P/BJ8HUecJEpmkY3Dv37F3osYKF7Whwn eFqWnarM5gPOcfZjj86SnXgvd2NdxBMNxNMBHG+itigOvaFeqjJdPL1t0D4zBpu7 TuklUt++hnG2DpFE+OERCqMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 379341008943078010323097377660828759745040 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-31 21:02:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-29 21:02:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'akendo.eu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 951427176610695443495981464494326906097347305195363998651923581136480151465007879268230058059948332682809403487784863571296411908423673399580024469295867842567158087187209213281763353420478142837966292517336370302399190456676163063009870124055508182822926171377982751108166306141020242326827494496163776016185580447787429838661323397671543345909896291406004538345685304007345165065719281179562447958031134309674147584190303392050295011347007189932623289748004951700535872099802418424552888215437311111631160280665024434226270232737512132016966855265190205258763210055930083607448558064798252871193827688910490220596090598838347689894355546146343879532468780521098237424467230883610718581487554074639590516797169142497746354255781588113044342989244646157846565201896138050296562288405590040950463531380837976053906727855756665701646944806312287936882272665006485997099082034804303179612931746882428992724497323291726404576927448989527463646559224159637345131074459348720239685910903933018330707834513638892975558724531222590070028416794455570181502600069009107746620494359457412801691972333857467821225670729266242719498620260630736011253844413937290766765752173708525085448932609176488420878279431723834614912220758616318630467537571 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4c8a388dcad98a49f422d48f92d4323d05d87687 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akendo.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akendo.eu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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