erxinfo.ca
Issued by Let's Encrypt Authority X1
About this certificate
This digital certificate with serial number 01:1f:11:e9:bc:0c:0a:d5:fb:84:09:0b:20:22:4a:28:50:64 was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=erxinfo.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:1f:11:e9:bc:0c:0a:d5:fb:84:09:0b:20:22:4a:28:50:64Serial Number (int): 97684849801452818174397936846407519981668
Serial Number lenght: 137 bits, 18 octets
SubjectKeyId: 74:7c:3c:34:9d:c3:18:78:0e:50:07:2b:06:d6:09:e6:bc:a0:07:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 07:2f:f9:f8:43:cc:19:89:78:fb:39:42:56:e9:55:00:e8:b4:60:ef
Fingerprint (sha256): 93:6d:b5:85:61:41:c7:bb:44:98:0f:30:85:51:41:e7:db:2b:5f:0c:9b:d3:b6:34:d3:ef:0d:a3:d4:03:be:94
Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x1.letsencrypt.org/Check the revocation status for certificate erxinfo.ca
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for erxinfo.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
erxinfo.ca
www.erxinfo.ca
hg.erxinfo.ca
owncloud.erxinfo.ca
ampache.erxinfo.ca
wise.erxinfo.ca
www.erxinfo.ca
hg.erxinfo.ca
owncloud.erxinfo.ca
ampache.erxinfo.ca
wise.erxinfo.ca
Other certificates including the domain name erxinfo.ca
(limited to 100 certificates)
*.erxinfo.ca
home-genie-cloud.erxinfo.ca
artisedastextiles.com
hg.erxinfo.ca
*.erxinfo.ca
www.piiq.app
www.erxinfo.ca
home-genie-cloud.erxinfo.ca
erxinfo.ca
home-genie-cloud.erxinfo.ca
www.vassmarinediveservice.com
chufsd.backpackfordrive.app
www.erxinfo.ca
www.erxinfo.ca
*.erxinfo.ca
erxinfo.ca
dav.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.bongdaphui.vn
www.erxinfo.ca
www.erxinfo.ca
www.findbond.in
erxinfo.ca
www.erxinfo.ca
flesoj.com
erxinfo.ca
googlehome.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
erxinfo.ca
*.erxinfo.ca
owncloud.erxinfo.ca
hg.erxinfo.ca
erxinfo.ca
flesoj.com
www.demoiterable.com
www.demoiterable.com
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
ampache.erxinfo.ca
erxinfo.ca
googlehome.erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
procyonforest.com
www.bongdaphui.vn
www.erxinfo.ca
www.erxinfo.ca
chufsd.backpackfordrive.app
erxinfo.ca
express.kiba-fashion.nl
www.erxinfo.ca
erxinfo.ca
erxinfo.ca
erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
dav.erxinfo.ca
home-genie-cloud.erxinfo.ca
artisedastextiles.com
hg.erxinfo.ca
*.erxinfo.ca
www.piiq.app
www.erxinfo.ca
home-genie-cloud.erxinfo.ca
erxinfo.ca
home-genie-cloud.erxinfo.ca
www.vassmarinediveservice.com
chufsd.backpackfordrive.app
www.erxinfo.ca
www.erxinfo.ca
*.erxinfo.ca
erxinfo.ca
dav.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.bongdaphui.vn
www.erxinfo.ca
www.erxinfo.ca
www.findbond.in
erxinfo.ca
www.erxinfo.ca
flesoj.com
erxinfo.ca
googlehome.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
erxinfo.ca
*.erxinfo.ca
owncloud.erxinfo.ca
hg.erxinfo.ca
erxinfo.ca
flesoj.com
www.demoiterable.com
www.demoiterable.com
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
ampache.erxinfo.ca
erxinfo.ca
googlehome.erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
procyonforest.com
www.bongdaphui.vn
www.erxinfo.ca
www.erxinfo.ca
chufsd.backpackfordrive.app
erxinfo.ca
express.kiba-fashion.nl
www.erxinfo.ca
erxinfo.ca
erxinfo.ca
erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
dav.erxinfo.ca
Certificate
The complete raw certificate details for erxinfo.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAR8R6bwMCtX7hAkLICJKKFBkMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNjAxMDMwMjU2MDBaFw0x NjA0MDIwMjU2MDBaMBUxEzARBgNVBAMTCmVyeGluZm8uY2EwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDDsDGUKcTJjHdlGo3Eub8Nr/9lwhbQ1hyXSL/r EwMjSbNjqoDtiyf7/Y50ECpcYHhIYYkrv6y41FucsgZBn7hpuTHD8rgb+NABIjsG ac2U1qGX2y6k7ViyKZmM2O28LLQrBY/vKzhcUt0CqScv1+pd+2iE9+BDR2Xtw7yz QjoAIbsDIFkZuoeEpeBoh0KMD81kVu+lsRN9WTrQJxfdEgNiBtqxINUOP126qhFY cnefwHvAQrXLFWQA4gfdUnzWqu0sLidR1YUG9b/RgNTHAm8iK/N7CyxS0WRHOPfi ySTHgolsxhwjJEx3OBbarF3WP9j6YldLyoMTPyqVSexQhYnBAgMBAAGjggJkMIIC YDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHR8PDSdwxh4DlAHKwbWCea8oAcmMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMHAGCCsGAQUFBwEBBGQwYjAv BggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgxLmxldHNlbmNyeXB0Lm9yZy8w LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14MS5sZXRzZW5jcnlwdC5vcmcv MG4GA1UdEQRnMGWCCmVyeGluZm8uY2GCDnd3dy5lcnhpbmZvLmNhgg1oZy5lcnhp bmZvLmNhghNvd25jbG91ZC5lcnhpbmZvLmNhghJhbXBhY2hlLmVyeGluZm8uY2GC D3dpc2UuZXJ4aW5mby5jYTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYB BAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu b3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkg YmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFj Y29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0 dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUA A4IBAQAF7Uw4clH+pkUHIqZBLc+uQgAOGaviEZEuat8tdI3rQZvdyMgxervtuiOa jMy9tEtC53ZaQghNuAE81ht0l5rzTcpHfv6AEkouGrNobkV3DCd21bKSPoUR+zXi N8ZY6Mlwy5ounHdd4LsHZjdEJZhJ4dxGoUqh2juwvf4WGgPTHQbiDJOVqeAH30j6 /9G40rkiSeViB868EEE18W7EJG77oZU5ZYRfigyj528fQnUpDHb+Pf9PNeqjpkeo jtzYSRp3VDnfdA8xEcouIkzggrUvCd/FwmjqP3uzVvc80IbUvKfhOm9KNKn7gXPL PwAsNvZWRlRdPuGKwJ9mynjcNmF7 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7AxlCnEyYx3ZRqNxLm/ Da//ZcIW0NYcl0i/6xMDI0mzY6qA7Ysn+/2OdBAqXGB4SGGJK7+suNRbnLIGQZ+4 abkxw/K4G/jQASI7BmnNlNahl9supO1YsimZjNjtvCy0KwWP7ys4XFLdAqknL9fq XftohPfgQ0dl7cO8s0I6ACG7AyBZGbqHhKXgaIdCjA/NZFbvpbETfVk60CcX3RID YgbasSDVDj9duqoRWHJ3n8B7wEK1yxVkAOIH3VJ81qrtLC4nUdWFBvW/0YDUxwJv IivzewssUtFkRzj34skkx4KJbMYcIyRMdzgW2qxd1j/Y+mJXS8qDEz8qlUnsUIWJ wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 97684849801452818174397936846407519981668 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-03 02:56:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-02 02:56:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'erxinfo.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24703353803822575557228224350890584674310618717990739522034809119191627170911080353583257502373063210543092888970089557820625681460883242893627235025507647326763612085621778011328181376008984991325477034679960667667273498285633177120508210369288235710702192418244041813445034238185494236957489209904361009433762283139087484259681507529296271310091994220315094753658878676663272612300313780607918251371328377315582245834668099890743430756756033978285941086161970737038340853328644036773871169868380673324129994686750947903805299272057480721210436171022600706809817395618641247326281503205657558724246702766739366971841 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 747c3c349dc318780e50072b06d609e6bca00726 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erxinfo.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erxinfo.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hg.erxinfo.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owncloud.erxinfo.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampache.erxinfo.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wise.erxinfo.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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