www.rajasoftware.munaslubgolkar2016.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f9:3e:bc:66:89:c6:9f:f1:6a:08:b5:8d:77:b4:12:2e:b4 was issued on by Let's Encrypt.
With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.rajasoftware.munaslubgolkar2016.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f9:3e:bc:66:89:c6:9f:f1:6a:08:b5:8d:77:b4:12:2e:b4Serial Number (int): 346150557525863995902087022878403041832628
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: aa:38:e1:8c:09:33:15:83:e8:66:d5:27:e8:84:e2:c1:d5:0a:e1:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 2d:30:2a:a9:2b:79:50:70:44:69:cd:63:56:ae:4c:a3:e6:1f:af:d6
Fingerprint (sha256): 7d:8b:08:80:da:38:03:0b:0f:47:11:05:c7:ee:1b:65:56:f8:cf:b9:bb:8b:9e:7b:41:e8:98:86:dc:77:cc:57
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate www.rajasoftware.munaslubgolkar2016.org
13
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.rajasoftware.munaslubgolkar2016.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.munaslubgolkar2016.org
mail.rajasoftware.co.id
mail.registrasi.info
munaslubgolkar2016.org
rajasoftware.co.id
rajasoftware.munaslubgolkar2016.org
registr.munaslubgolkar2016.org
registrasi.info
www.munaslubgolkar2016.org
www.rajasoftware.co.id
www.rajasoftware.munaslubgolkar2016.org
www.registr.munaslubgolkar2016.org
www.registrasi.info
mail.rajasoftware.co.id
mail.registrasi.info
munaslubgolkar2016.org
rajasoftware.co.id
rajasoftware.munaslubgolkar2016.org
registr.munaslubgolkar2016.org
registrasi.info
www.munaslubgolkar2016.org
www.rajasoftware.co.id
www.rajasoftware.munaslubgolkar2016.org
www.registr.munaslubgolkar2016.org
www.registrasi.info
Other certificates including the domain name munaslubgolkar2016.org
(limited to 100 certificates)
rajasoftware.co.id
munaslubgolkar2016.org
munaslubgolkar2016.org
munaslubgolkar2016.org
munaslubgolkar2016.org
registr.munaslubgolkar2016.org
www.rajasoftware.munaslubgolkar2016.org
rajasoftware.co.id
rajasoftware.co.id
www.gosuccess4u.munaslubgolkar2016.org
munaslubgolkar2016.org
registr.munaslubgolkar2016.org
munaslubgolkar2016.org
munaslubgolkar2016.org
www.registr.munaslubgolkar2016.org
munaslubgolkar2016.org
munaslubgolkar2016.org
munaslubgolkar2016.org
munaslubgolkar2016.org
registr.munaslubgolkar2016.org
www.rajasoftware.munaslubgolkar2016.org
rajasoftware.co.id
rajasoftware.co.id
www.gosuccess4u.munaslubgolkar2016.org
munaslubgolkar2016.org
registr.munaslubgolkar2016.org
munaslubgolkar2016.org
munaslubgolkar2016.org
www.registr.munaslubgolkar2016.org
Certificate
The complete raw certificate details for www.rajasoftware.munaslubgolkar2016.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgISA/k+vGaJxp/xagi1jXe0Ei60MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzAzMDkyMjEyMDBaFw0x NzA2MDcyMjEyMDBaMDIxMDAuBgNVBAMTJ3d3dy5yYWphc29mdHdhcmUubXVuYXNs dWJnb2xrYXIyMDE2Lm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANmyFZk0eL05Zp8IPiwsaX8MJY9PBJ9Yu0Ri0KOWPQaoJ8mqzGFVKEuohFfPWJvf 7uQyhRLuiW7hbvJhSGSWGYlwiutjgFg71zCV5T67Fm6dHkhghiWfkfEj+5qIsAu3 +hmr/zfGtwCSVXRYayhc2RqNhSqTjmd+dmVpffJ1hlBKtd1HyGrCKIbDjuVUavYh DzuWzJz+hFtwxv4iypyx8bD+g8Aju0/X++ENBQdnRR0qAM6ZknqdG6EMukZI6zAP 7NlOVA3S3JdF/efE7yVOpLXKKm448pI2nma7ZqTa7Riw5dGMcA24RdGzmYAAjtWn OiH+Fh6l4z7WlO+iDvMhowECAwEAAaOCA2kwggNlMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUqjjhjAkzFYPoZtUn6ITiwdUK4VAwHwYDVR0jBBgwFoAUqEpqYwR93brm 0Tm3pkVl7/Oo7KEwcAYIKwYBBQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8v b2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDov L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wggFxBgNVHREEggFoMIIBZIIb bWFpbC5tdW5hc2x1YmdvbGthcjIwMTYub3JnghdtYWlsLnJhamFzb2Z0d2FyZS5j by5pZIIUbWFpbC5yZWdpc3RyYXNpLmluZm+CFm11bmFzbHViZ29sa2FyMjAxNi5v cmeCEnJhamFzb2Z0d2FyZS5jby5pZIIjcmFqYXNvZnR3YXJlLm11bmFzbHViZ29s a2FyMjAxNi5vcmeCHnJlZ2lzdHIubXVuYXNsdWJnb2xrYXIyMDE2Lm9yZ4IPcmVn aXN0cmFzaS5pbmZvghp3d3cubXVuYXNsdWJnb2xrYXIyMDE2Lm9yZ4IWd3d3LnJh amFzb2Z0d2FyZS5jby5pZIInd3d3LnJhamFzb2Z0d2FyZS5tdW5hc2x1YmdvbGth cjIwMTYub3JngiJ3d3cucmVnaXN0ci5tdW5hc2x1YmdvbGthcjIwMTYub3JnghN3 d3cucmVnaXN0cmFzaS5pbmZvMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsr BgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw dC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25s eSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4g YWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQg aHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQEL BQADggEBAG6zeORL2zPizT6iH7TTGNVxRYJlPhBeaBuGF9nJEc0eTbXUDnpLBg29 fHND42RxOB2nkiqtKmVpQvlVsVckUAe2zBsMI663KlrNIg9KgfayrdaPayr0TEu9 WLOJmjd+C9eL3blQN+UsLySUWYLcRVRc6Az0ae4Cw9XWQqocG5kRXAHVahErs8mT cnx2T2jr90jc5QbKuAdzXylx8YhMHzEZUez/g/SavLXvu4JpSb7NiUiB2jMSpliC 8ci+2sLVfPCJ50i0jNHRrFyFDflGGgzU4mAAwocYPGgsQvdv4Epe14EhVgnsvuwQ XxTZJJ0gCG4rtp66Scnuq7DUyzd0frw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bIVmTR4vTlmnwg+LCxp fwwlj08En1i7RGLQo5Y9BqgnyarMYVUoS6iEV89Ym9/u5DKFEu6JbuFu8mFIZJYZ iXCK62OAWDvXMJXlPrsWbp0eSGCGJZ+R8SP7moiwC7f6Gav/N8a3AJJVdFhrKFzZ Go2FKpOOZ352ZWl98nWGUEq13UfIasIohsOO5VRq9iEPO5bMnP6EW3DG/iLKnLHx sP6DwCO7T9f74Q0FB2dFHSoAzpmSep0boQy6RkjrMA/s2U5UDdLcl0X958TvJU6k tcoqbjjykjaeZrtmpNrtGLDl0YxwDbhF0bOZgACO1ac6If4WHqXjPtaU76IO8yGj AQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 346150557525863995902087022878403041832628 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-09 22:12:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-07 22:12:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rajasoftware.munaslubgolkar2016.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27481528852947263116213280166026062759091484387341443955817924973513819318277603287864644035651750302015893776117061305035003080066998605765099040890796777606672438948795753237837636328181079122876521724056084432202498270191718456766375871601306950950337561125620782374358749642755978455868605419136717197653661090603146991690700329386154816833114031362426367321480619847868358832467246944422493044785032654794739926211776731981397211006647893582754607167514974212708639517267181601182195404148938638143518947174236860608643118708228145033114427641502558631789512865090473732416647190181507849231523314708052520837889 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) aa38e18c09331583e866d527e884e2c1d50ae150 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.munaslubgolkar2016.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.rajasoftware.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.registrasi.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'munaslubgolkar2016.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rajasoftware.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rajasoftware.munaslubgolkar2016.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registr.munaslubgolkar2016.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registrasi.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.munaslubgolkar2016.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rajasoftware.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rajasoftware.munaslubgolkar2016.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.registr.munaslubgolkar2016.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.registrasi.info' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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