metrosamarinda.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:45:cf:51:7f:42:f2:fc:31:ff:41:ef:1b:7b:60:98:86:7a was issued on by Let's Encrypt.
With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=metrosamarinda.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:45:cf:51:7f:42:f2:fc:31:ff:41:ef:1b:7b:60:98:86:7aSerial Number (int): 285091914465168791473065072413486093993594
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 99:8a:db:ce:88:2a:a6:9f:c3:d3:4f:d0:2e:22:0d:07:2c:38:1b:24
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 2b:99:cc:f3:52:23:c6:43:97:6d:fa:eb:22:3b:8a:0e:a7:e1:19:ad
Fingerprint (sha256): 8f:f6:97:c3:0f:34:bb:95:4c:ac:b1:94:70:54:d0:7f:b7:21:21:76:7b:5e:6e:24:d8:af:e9:da:2e:c8:58:f6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate metrosamarinda.com
15
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for metrosamarinda.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dakwah.in
dakwah.na.am
dakwahnaam.sigit.co.uk
dakwahx.sigit.co.uk
mail.dakwah.in
mail.dakwah.na.am
mail.metrosamarinda.com
metrosamarinda.com
metrosamarinda.sigit.co.uk
www.dakwah.in
www.dakwah.na.am
www.dakwahnaam.sigit.co.uk
www.dakwahx.sigit.co.uk
www.metrosamarinda.com
www.metrosamarinda.sigit.co.uk
dakwah.na.am
dakwahnaam.sigit.co.uk
dakwahx.sigit.co.uk
mail.dakwah.in
mail.dakwah.na.am
mail.metrosamarinda.com
metrosamarinda.com
metrosamarinda.sigit.co.uk
www.dakwah.in
www.dakwah.na.am
www.dakwahnaam.sigit.co.uk
www.dakwahx.sigit.co.uk
www.metrosamarinda.com
www.metrosamarinda.sigit.co.uk
Other certificates including the domain name metrosamarinda.com
(limited to 100 certificates)
metrosamarinda.com
metrosamarinda.com
metrosamarinda.com
sigit.co.uk
metrosamarinda.com
sigit.co.uk
metrosamarinda.sigit.co.uk
berdakwah.net
sigit.co.uk
metrosamarinda.com
berdakwah.net
metrosamarinda.com
metrosamarinda.com
metrosamarinda.com
metrosamarinda.com
metrosamarinda.com
www.news.metrosamarinda.com
berdakwah.net
metrosamarinda.com
metrosamarinda.com
metrosamarinda.com
metrosamarinda.com
sigit.co.uk
metrosamarinda.com
sigit.co.uk
metrosamarinda.sigit.co.uk
berdakwah.net
sigit.co.uk
metrosamarinda.com
berdakwah.net
metrosamarinda.com
metrosamarinda.com
metrosamarinda.com
metrosamarinda.com
metrosamarinda.com
www.news.metrosamarinda.com
berdakwah.net
metrosamarinda.com
metrosamarinda.com
Certificate
The complete raw certificate details for metrosamarinda.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGOTCCBSGgAwIBAgISA0XPUX9C8vwx/0HvG3tgmIZ6MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEyMTEwNTQ1NTVaFw0x ODAzMTEwNTQ1NTVaMB0xGzAZBgNVBAMTEm1ldHJvc2FtYXJpbmRhLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMv10d2U1jrOKAHOe0nleo/jGSpG lqjh4xHduF/7+9H3CYv2IAlD50HIpwiXsz1Q8j3te0znQe2Q2CCpHPgubtLb9Di3 AGIlqgD/PCEbNInsc04U9yGrcPLuPG1Xf5mvtGV0/zVRO6nAhEjTAkPB5fRLtVM1 FDNKKHGSC06BI2rePLu+ShFQwP0VpUywGGUccw5q/1Ogd/kRy9GSaIKJAYQ6diC2 MCv9vkbe59bITztZ3D8HUNbFOvEnQsv5NkLcX/hha/skqAzZwsAF96Ho+QN5YuID I6izTxwqI7bcI4XkBket6R6sHtZTYAdt4FqW34sFpqq3BwWvrU0LY2AMT/MCAwEA AaOCA0QwggNAMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUmYrbzogqpp/D00/QLiIN Byw4GyQwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzCCAU0GA1UdEQSCAUQwggFAgglkYWt3YWguaW6CDGRha3dhaC5uYS5h bYIWZGFrd2FobmFhbS5zaWdpdC5jby51a4ITZGFrd2FoeC5zaWdpdC5jby51a4IO bWFpbC5kYWt3YWguaW6CEW1haWwuZGFrd2FoLm5hLmFtghdtYWlsLm1ldHJvc2Ft YXJpbmRhLmNvbYISbWV0cm9zYW1hcmluZGEuY29tghptZXRyb3NhbWFyaW5kYS5z aWdpdC5jby51a4INd3d3LmRha3dhaC5pboIQd3d3LmRha3dhaC5uYS5hbYIad3d3 LmRha3dhaG5hYW0uc2lnaXQuY28udWuCF3d3dy5kYWt3YWh4LnNpZ2l0LmNvLnVr ghZ3d3cubWV0cm9zYW1hcmluZGEuY29tgh53d3cubWV0cm9zYW1hcmluZGEuc2ln aXQuY28udWswgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEB MIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYI KwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGll ZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNl IHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xl dHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAJpci RqAHwttgKi2/FoXkIGwcEH4LK/NWtacKUTq7be+DgoumMZV/GkudNe/2jeLsygM+ wCsaEULon2W4szms3UxPK7Q+Yu2efTmDC+GrDghqjtvxHGED62mtVKU9IUHTFTYF GmZI2e6rWTdwAUtc8fyYGt/fAg+R3/Dh1TzwUV3Jr0BYkrokMxz+VbC8Y+n472fZ D17cik6/Ov5bzpj9p7cfmtGevPWOW5tIOzAYcFShkNUKeLiQEa6vzehDWKjbbrkF aDBrmPACDwlUcIpDPd8Lnbxd8546AlC375d+TzKaJip+VnPzvCNZdQ1IsfsmABD0 rwBfHpQGgZ0FcJGGkA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/XR3ZTWOs4oAc57SeV6 j+MZKkaWqOHjEd24X/v70fcJi/YgCUPnQcinCJezPVDyPe17TOdB7ZDYIKkc+C5u 0tv0OLcAYiWqAP88IRs0iexzThT3Iatw8u48bVd/ma+0ZXT/NVE7qcCESNMCQ8Hl 9Eu1UzUUM0oocZILToEjat48u75KEVDA/RWlTLAYZRxzDmr/U6B3+RHL0ZJogokB hDp2ILYwK/2+Rt7n1shPO1ncPwdQ1sU68SdCy/k2Qtxf+GFr+ySoDNnCwAX3oej5 A3li4gMjqLNPHCojttwjheQGR63pHqwe1lNgB23gWpbfiwWmqrcHBa+tTQtjYAxP 8wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 285091914465168791473065072413486093993594 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-11 05:45:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-11 05:45:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'metrosamarinda.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25747594163100543974036343950368567027752407059416884886425829320729664994499079629053813001174732584879679095707000235863504475502917463261573426071152638230441668409246043326189927021011232770652171091953353390719200683757481197365670162947980250178360582384887407128702993813773677541467518822794853858352334661389697457373248399890585328003548385562001972701286394393803176260904333097738502473474552737253617294771975402801039870633806785249162200045117100986146610803301153726580886899063446359612579650369596967197368717088347286993132757499736857888757364970413839807608786236954527658441231160346139687669747 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 998adbce882aa69fc3d34fd02e220d072c381b24 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (324 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakwah.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakwah.na.am' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakwahnaam.sigit.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakwahx.sigit.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.dakwah.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.dakwah.na.am' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.metrosamarinda.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrosamarinda.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrosamarinda.sigit.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dakwah.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dakwah.na.am' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dakwahnaam.sigit.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dakwahx.sigit.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metrosamarinda.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metrosamarinda.sigit.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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