pspassociation.org.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ff:fc:a5:ce:9f:de:e4:db:c3:9f:88:11:bf:69:bd:e2:5f was issued on by Let's Encrypt.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pspassociation.org.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ff:fc:a5:ce:9f:de:e4:db:c3:9f:88:11:bf:69:bd:e2:5fSerial Number (int): 348444687734882143706648908365388173927007
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f8:66:b4:cd:29:a0:56:ba:3d:e6:9a:f8:95:ab:0e:65:d1:02:4e:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a8:95:31:48:fc:77:db:4d:bc:79:50:9e:0a:64:c8:6e:53:ef:88:9b
Fingerprint (sha256): 7f:69:0d:e9:79:fd:b8:43:41:a5:41:d6:de:e7:5d:28:82:96:2e:9d:83:de:5c:6e:58:5a:5c:a4:c8:23:5c:ff
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate pspassociation.org.uk
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pspassociation.org.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dev.pspassociation.org.uk
pspassociation.org.uk
pspeur.org
pspeur.pspassociation.org.uk
www.dev.pspassociation.org.uk
www.pspassociation.org.uk
www.pspeur.org
www.pspeur.pspassociation.org.uk
www.tributefunds.pspassociation.org.uk
pspassociation.org.uk
pspeur.org
pspeur.pspassociation.org.uk
www.dev.pspassociation.org.uk
www.pspassociation.org.uk
www.pspeur.org
www.pspeur.pspassociation.org.uk
www.tributefunds.pspassociation.org.uk
Other certificates including the domain name pspassociation.org.uk
(limited to 100 certificates)
pspassociation.org.uk
dev.pspassociation.org.uk
webmail.pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
dev.pspassociation.org.uk
dev.pspassociation.org.uk
dev.pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.pspassociationorguk.lightningbasehosted.com
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.pspassociationorguk.lightningbasehosted.com
pspassociation.org.uk
pspassociation.org.uk
webmail.pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
dev.pspassociation.org.uk
webmail.pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
dev.pspassociation.org.uk
dev.pspassociation.org.uk
dev.pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.pspassociationorguk.lightningbasehosted.com
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.pspassociationorguk.lightningbasehosted.com
pspassociation.org.uk
pspassociation.org.uk
webmail.pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
pspassociation.org.uk
Certificate
The complete raw certificate details for pspassociation.org.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgISA//8pc6f3uTbw5+IEb9pveJfMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjEwMTUyMDA1MDBaFw0x NzAxMTMyMDA1MDBaMCAxHjAcBgNVBAMTFXBzcGFzc29jaWF0aW9uLm9yZy51azCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN9GZzEDjtH022FnniktuBNx 4J0uGa/DjOvcfyZlN74t7yyCo06bj9C49a9lMg7I+VYsrEMqtc1YQ635Xw1FhnwF biR6NOwTC1AIG+eOHYR0wB/OdgFYUzftDiIe7QHKkhbhOivJ0JXRWfyjCHUF+zJ5 5xsFW8UrB52y1l0fCx0r1VMAHNPWk1VEWzbuymIzBn0FBDF6NV7Lxp53qpliFZgu 4hMjivIHXqaZspQAvmpRHy7n62ozeZ8rJ8tu0ZcR5UKqaEBcUi1RoDJgLwHVLaby w4SWQY0bo0OpTFw6WKgh+nvnPZxWzwiWi0ZsSAiIni5GYSyXjsjytQivceoDPx0C AwEAAaOCAvIwggLuMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU+Ga0zSmgVro95pr4 lasOZdECTjMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYB BQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wgfsGA1UdEQSB8zCB8IIZZGV2LnBzcGFzc29jaWF0aW9uLm9y Zy51a4IVcHNwYXNzb2NpYXRpb24ub3JnLnVrggpwc3BldXIub3Jnghxwc3BldXIu cHNwYXNzb2NpYXRpb24ub3JnLnVrgh13d3cuZGV2LnBzcGFzc29jaWF0aW9uLm9y Zy51a4IZd3d3LnBzcGFzc29jaWF0aW9uLm9yZy51a4IOd3d3LnBzcGV1ci5vcmeC IHd3dy5wc3BldXIucHNwYXNzb2NpYXRpb24ub3JnLnVrgiZ3d3cudHJpYnV0ZWZ1 bmRzLnBzcGFzc29jaWF0aW9uLm9yZy51azCB/gYDVR0gBIH2MIHzMAgGBmeBDAEC ATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUg bWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBv bmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZv dW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqG SIb3DQEBCwUAA4IBAQA4iKKKOEB7rd5o2cViOa0bzU3rEogofY6uOxMiwu6cPX2z CJNEXhnPiuPjPy6ThzigzT6U5Jf8vCq+eNkiHqOEdlkpx5EzqDl+tJ6JR+Z/9SAu dSlac/Htl0itBjKFDcqtTuWBrNffNEkRCPUPM2xzZOgGP3bDhk4kyA8u3Sh3ZDy+ nGKyVPjP/huj3e8qbK7LnG5Gz0lCBF3dUERRDNdWw3NGD7Haqe/rcBLZ1BJr4Lgo /BKAqNag8ORRCJG5VANQMAbo+lr1yM/myGyLTWxpFkaicQCbGykQj2RaTazZMrR6 LcnsympuyITHnPR0hzCpvtyUoglyx7QjpefZOSxL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30ZnMQOO0fTbYWeeKS24 E3HgnS4Zr8OM69x/JmU3vi3vLIKjTpuP0Lj1r2UyDsj5ViysQyq1zVhDrflfDUWG fAVuJHo07BMLUAgb544dhHTAH852AVhTN+0OIh7tAcqSFuE6K8nQldFZ/KMIdQX7 MnnnGwVbxSsHnbLWXR8LHSvVUwAc09aTVURbNu7KYjMGfQUEMXo1XsvGnneqmWIV mC7iEyOK8gdeppmylAC+alEfLufrajN5nysny27RlxHlQqpoQFxSLVGgMmAvAdUt pvLDhJZBjRujQ6lMXDpYqCH6e+c9nFbPCJaLRmxICIieLkZhLJeOyPK1CK9x6gM/ HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 348444687734882143706648908365388173927007 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-15 20:05:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-13 20:05:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pspassociation.org.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28185859065842590097024585681679497815811370780008303537693408338440585732607621882048488018837852584257764483840364949281072764489328386781582464334052945523187735515147479703951882357622130101353623736871536077921908126987753679586453296642018446202841872263601927377454449154917850915318121374671895583483162185661098221804993585197520767038728055213177594934410494279761608870447502354436870558747741138870924909671118801355197324943585234440892649119403974496792363054209557571862614310764917235747388106828907056932733354084959178542676744938208072566169873415767005376425877204669218097307332295463865740902173 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f866b4cd29a056ba3de69af895ab0e65d1024e33 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.pspassociation.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pspassociation.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pspeur.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pspeur.pspassociation.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.pspassociation.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pspassociation.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pspeur.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pspeur.pspassociation.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tributefunds.pspassociation.org.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003888a28a38407badde68d9c56239ad1bcd4deb1288287d8eae3b1322c2ee9c3d7db30893445e19cf8ae3e33f2e938738a0cd3e94e497fcbc2abe78d9221ea384765929c79133a8397eb49e8947e67ff5202e75295a73f1ed9748ad0632850dcaad4ee581acd7df34491108f50f336c7364e8063f76c3864e24c80f2edd2877643cbe9c62b254f8cffe1ba3ddef2a6caecb9c6e46cf4942045ddd5044510cd756c373460fb1daa9efeb7012d9d4126be0b828fc1280a8d6a0f0e4510891b95403503006e8fa5af5c8cfe6c86c8b4d6c691646a271009b1b29108f645a4dacd932b47a2dc9ecca6a6ec884c79cf4748730a9bedc94a20972c7b423a5e7d9392c4b