ovh.ns1.name
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f8:fa:ab:39:b0:33:24:06:5e:e8:a0:c8:49:c9:52:2d:ea was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ovh.ns1.name
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f8:fa:ab:39:b0:33:24:06:5e:e8:a0:c8:49:c9:52:2d:eaSerial Number (int): 346060080843439848600110119395410075332074
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d4:70:f1:74:c8:bd:8c:5a:42:f5:b2:c2:05:fe:39:85:c3:98:3c:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f8:d8:41:0d:f8:5c:bf:01:44:ad:ef:a2:b9:f4:e0:d6:15:ef:51:6a
Fingerprint (sha256): 7d:41:18:f0:7a:78:b7:f1:58:6e:fd:1c:f7:cd:c7:d6:b1:57:a3:94:d5:7e:c3:1e:6e:8c:53:a8:55:f8:db:fc
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate ovh.ns1.name
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ovh.ns1.name
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ovh.ns1.name
Other certificates including the domain name ns1.name
(limited to 100 certificates)
mamatt.ns1.name
wyless.ns1.name
wyless.ns1.name
00.ns1.name
yudi.ns1.name
info.ns1.name
rd.ns1.name
andreafoschiano.ns1.name
homecloud.ns1.name
zimmer.ns1.name
secur3.ns1.name
kl.ns1.name
verdaechtig-gute-jobs-fm.thenexuscommunity.de
ovh.ns1.name
mamatt.ns1.name
wyless.ns1.name
pma.kevinkoziol.com
steamtec.lima-city.de
zimmer.ns1.name
wine.ns1.name
basstr.12hp.ch
homecloud.ns1.name
wine.ns1.name
kl.ns1.name
premiumskins.de
fuckthisshit.lima-city.de
admin.kontec.eu
wyless.ns1.name
00.ns1.name
www.rangefinder35mm.lima-city.de
wyless.ns1.name
mamatt.ns1.name
mikelmyers.lima-city.de
ngage.work
mamatt.ns1.name
wyless.ns1.name
wine.ns1.name
schultafel24.lima-city.de
ovh.ns1.name
andreafoschiano.ns1.name
powderski.eu
ovh.ns1.name
anarki.lima-city.de
hello.ns1.name
kore.ns1.name
homecloud.ns1.name
ovh.ns1.name
lenadorn.lima-city.de
mamatt.ns1.name
wine.ns1.name
wine.ns1.name
freegams77.ns1.name
schultafel24.lima-city.de
www.checkmategaming.com.4lima.at
ngage.work
mamatt.ns1.name
mamatt.ns1.name
mamatt.ns1.name
ovh.ns1.name
basstr.12hp.ch
kl.ns1.name
zimmer.ns1.name
lucozade0.ns1.name
zimmer.ns1.name
mamatt.ns1.name
karsch.lima-city.de
minis-laaber.lima-city.de
albertoborsetta.ns1.name
libero-sever.ns1.name
zimmer.ns1.name
wine.ns1.name
sofcloud.ns1.name
*.thc-rp.de
eftos.lima-city.de
www.shop.ju-schnee.com
zimmer.ns1.name
ovh.ns1.name
freegams77.ns1.name
sofcloud.ns1.name
mamatt.ns1.name
secur3.ns1.name
foschi.ns1.name
ngage.work
mamatt.ns1.name
ame.ns1.name
ovh.ns1.name
www.schudnat.lima-city.de
00.ns1.name
www.00.ns1.name
libero-sever.ns1.name
zimmer.ns1.name
secur3.ns1.name
yudi.ns1.name
mamatt.ns1.name
quickmailscan.ns1.name
ame.ns1.name
wyless.ns1.name
wyless.ns1.name
00.ns1.name
yudi.ns1.name
info.ns1.name
rd.ns1.name
andreafoschiano.ns1.name
homecloud.ns1.name
zimmer.ns1.name
secur3.ns1.name
kl.ns1.name
verdaechtig-gute-jobs-fm.thenexuscommunity.de
ovh.ns1.name
mamatt.ns1.name
wyless.ns1.name
pma.kevinkoziol.com
steamtec.lima-city.de
zimmer.ns1.name
wine.ns1.name
basstr.12hp.ch
homecloud.ns1.name
wine.ns1.name
kl.ns1.name
premiumskins.de
fuckthisshit.lima-city.de
admin.kontec.eu
wyless.ns1.name
00.ns1.name
www.rangefinder35mm.lima-city.de
wyless.ns1.name
mamatt.ns1.name
mikelmyers.lima-city.de
ngage.work
mamatt.ns1.name
wyless.ns1.name
wine.ns1.name
schultafel24.lima-city.de
ovh.ns1.name
andreafoschiano.ns1.name
powderski.eu
ovh.ns1.name
anarki.lima-city.de
hello.ns1.name
kore.ns1.name
homecloud.ns1.name
ovh.ns1.name
lenadorn.lima-city.de
mamatt.ns1.name
wine.ns1.name
wine.ns1.name
freegams77.ns1.name
schultafel24.lima-city.de
www.checkmategaming.com.4lima.at
ngage.work
mamatt.ns1.name
mamatt.ns1.name
mamatt.ns1.name
ovh.ns1.name
basstr.12hp.ch
kl.ns1.name
zimmer.ns1.name
lucozade0.ns1.name
zimmer.ns1.name
mamatt.ns1.name
karsch.lima-city.de
minis-laaber.lima-city.de
albertoborsetta.ns1.name
libero-sever.ns1.name
zimmer.ns1.name
wine.ns1.name
sofcloud.ns1.name
*.thc-rp.de
eftos.lima-city.de
www.shop.ju-schnee.com
zimmer.ns1.name
ovh.ns1.name
freegams77.ns1.name
sofcloud.ns1.name
mamatt.ns1.name
secur3.ns1.name
foschi.ns1.name
ngage.work
mamatt.ns1.name
ame.ns1.name
ovh.ns1.name
www.schudnat.lima-city.de
00.ns1.name
www.00.ns1.name
libero-sever.ns1.name
zimmer.ns1.name
secur3.ns1.name
yudi.ns1.name
mamatt.ns1.name
quickmailscan.ns1.name
ame.ns1.name
Certificate
The complete raw certificate details for ovh.ns1.name in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISA/j6qzmwMyQGXuigyEnJUi3qMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA5MTUxMzIzMDBaFw0x NjEyMTQxMzIzMDBaMBcxFTATBgNVBAMTDG92aC5uczEubmFtZTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAPJq1gwrpkAau2A9nVn1/0gs+AOc2BVEoa03 TWqhpgTHX+V7o30Ib2vWC7WklvipmjG7OS8KtX1UWOqgrhB75X2fBAg/e2IlZpL4 gIiF4NTkyN5dTdRvDffjwFH7cbJxyyVrCvVpxt6manc6ldL1i0pGXV2MBng0iYlU W4VaQY3bXxCPN5fpOESpDu/JG7LkffagYSCOynKEOiGCwPNUy9GFvXxRd48M9m2f Au0Fa0kQLeKiUzTRtY2mi/OyZ+a0FUuJjHCa6zP+lde5EjbLd2GTMT28HR3dugFN V/QO8dtwSNosdskcl/aqsn0ksZDyfPCwQZehWiwJjpGFo9rx7csCAwEAAaOCAg0w ggIJMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU1HDxdMi9jFpC9bLCBf45hcOYPAkw HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUHAQEEZDBi MC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wFwYDVR0RBBAwDoIMb3ZoLm5zMS5uYW1lMIH+BgNVHSAEgfYwgfMwCAYGZ4EM AQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0 ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5k IG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kg Zm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJ KoZIhvcNAQELBQADggEBAGGw9Y823hfec14uP7Ewc4R1hU2s32UZJliDkErJRPym UdTVYejfs3+emqcms/ee83mk5MbodSem4hULINbRozKIygzDFIiJA9u0f1sbbVkS RtFKmP/KHKm76f4ZF7lR5XYpx7gQsf3iNO1MT6z5h1Mka5Jp20ZYmH+ta3vMfWUC 095USzBMBGulYeyYwFHgjr3C6laljuj8yya03jCoIM0yo1SUZ8D+nK2aGz3NRZrQ QRQpMvIyomgy3eXa4IacvQE8TJGhtoCtXkNL9asLtL1rL1PKXEqmsKF8IwN/goc2 +Y+Bgki5pSKATjq6D9MxhKQm5lerZ/zFJl+R12n+HgU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mrWDCumQBq7YD2dWfX/ SCz4A5zYFUShrTdNaqGmBMdf5XujfQhva9YLtaSW+KmaMbs5Lwq1fVRY6qCuEHvl fZ8ECD97YiVmkviAiIXg1OTI3l1N1G8N9+PAUftxsnHLJWsK9WnG3qZqdzqV0vWL SkZdXYwGeDSJiVRbhVpBjdtfEI83l+k4RKkO78kbsuR99qBhII7KcoQ6IYLA81TL 0YW9fFF3jwz2bZ8C7QVrSRAt4qJTNNG1jaaL87Jn5rQVS4mMcJrrM/6V17kSNst3 YZMxPbwdHd26AU1X9A7x23BI2ix2yRyX9qqyfSSxkPJ88LBBl6FaLAmOkYWj2vHt ywIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 346060080843439848600110119395410075332074 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-15 13:23:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-14 13:23:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ovh.ns1.name' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30602352657656573232665230920987152713182920032387217512466716924191444480758802670478983706076420550716655301044733755720852248971894928365590591549887633160917151954512535125965102098692258285741497275521614787863747156804872347572861268408617245828313809660360520637466910942956291400459791922027014371594535123971807802388595716302078033312671714708851507270409083041038228435778547665011500779465268829780057829020323346079303633065783410818703928265358375475294041496452514841414751041417189452146559297117590925268182582909883045886109978116775122290878411175002774932745591915857683038641852858836388848725451 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d470f174c8bd8c5a42f5b2c205fe3985c3983c09 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovh.ns1.name' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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