mamatt.ns1.name
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:57:9a:49:c3:00:7a:5f:92:b3:44:9e:55:8f:75:48:33:c7 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mamatt.ns1.name
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:57:9a:49:c3:00:7a:5f:92:b3:44:9e:55:8f:75:48:33:c7Serial Number (int): 291146507821531681772028576697224794747847
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c5:26:1a:d3:19:5c:c3:61:75:37:e8:7a:3b:2e:e5:08:81:39:ee:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6d:9b:a9:72:69:63:a3:95:20:04:55:59:91:69:b4:aa:63:13:b1:a7
Fingerprint (sha256): 94:48:c6:02:30:5f:35:a2:b9:27:bc:96:d1:d4:1d:19:e0:6a:86:27:3e:b7:53:02:8f:b5:e5:bb:65:40:5a:28
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate mamatt.ns1.name
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mamatt.ns1.name
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mamatt.ns1.name
zikette.ns1.name
zikette.ns1.name
Other certificates including the domain name ns1.name
(limited to 100 certificates)
mamatt.ns1.name
wyless.ns1.name
wyless.ns1.name
00.ns1.name
yudi.ns1.name
info.ns1.name
rd.ns1.name
andreafoschiano.ns1.name
homecloud.ns1.name
zimmer.ns1.name
secur3.ns1.name
kl.ns1.name
ovh.ns1.name
mamatt.ns1.name
wyless.ns1.name
steamtec.lima-city.de
zimmer.ns1.name
wine.ns1.name
basstr.12hp.ch
homecloud.ns1.name
wine.ns1.name
kl.ns1.name
premiumskins.de
fuckthisshit.lima-city.de
admin.kontec.eu
wyless.ns1.name
00.ns1.name
www.rangefinder35mm.lima-city.de
wyless.ns1.name
mamatt.ns1.name
mikelmyers.lima-city.de
ngage.work
mamatt.ns1.name
wyless.ns1.name
wine.ns1.name
schultafel24.lima-city.de
ovh.ns1.name
andreafoschiano.ns1.name
powderski.eu
ovh.ns1.name
anarki.lima-city.de
hello.ns1.name
kore.ns1.name
homecloud.ns1.name
ovh.ns1.name
lenadorn.lima-city.de
mamatt.ns1.name
wine.ns1.name
wine.ns1.name
freegams77.ns1.name
schultafel24.lima-city.de
www.checkmategaming.com.4lima.at
ngage.work
mamatt.ns1.name
mamatt.ns1.name
mamatt.ns1.name
ovh.ns1.name
basstr.12hp.ch
kl.ns1.name
zimmer.ns1.name
lucozade0.ns1.name
zimmer.ns1.name
mamatt.ns1.name
karsch.lima-city.de
minis-laaber.lima-city.de
albertoborsetta.ns1.name
libero-sever.ns1.name
zimmer.ns1.name
wine.ns1.name
sofcloud.ns1.name
*.thc-rp.de
eftos.lima-city.de
www.shop.ju-schnee.com
zimmer.ns1.name
ovh.ns1.name
freegams77.ns1.name
sofcloud.ns1.name
mamatt.ns1.name
secur3.ns1.name
foschi.ns1.name
mamatt.ns1.name
ame.ns1.name
ovh.ns1.name
www.schudnat.lima-city.de
00.ns1.name
www.00.ns1.name
libero-sever.ns1.name
zimmer.ns1.name
secur3.ns1.name
yudi.ns1.name
mamatt.ns1.name
quickmailscan.ns1.name
ame.ns1.name
wyless.ns1.name
wyless.ns1.name
00.ns1.name
yudi.ns1.name
info.ns1.name
rd.ns1.name
andreafoschiano.ns1.name
homecloud.ns1.name
zimmer.ns1.name
secur3.ns1.name
kl.ns1.name
ovh.ns1.name
mamatt.ns1.name
wyless.ns1.name
steamtec.lima-city.de
zimmer.ns1.name
wine.ns1.name
basstr.12hp.ch
homecloud.ns1.name
wine.ns1.name
kl.ns1.name
premiumskins.de
fuckthisshit.lima-city.de
admin.kontec.eu
wyless.ns1.name
00.ns1.name
www.rangefinder35mm.lima-city.de
wyless.ns1.name
mamatt.ns1.name
mikelmyers.lima-city.de
ngage.work
mamatt.ns1.name
wyless.ns1.name
wine.ns1.name
schultafel24.lima-city.de
ovh.ns1.name
andreafoschiano.ns1.name
powderski.eu
ovh.ns1.name
anarki.lima-city.de
hello.ns1.name
kore.ns1.name
homecloud.ns1.name
ovh.ns1.name
lenadorn.lima-city.de
mamatt.ns1.name
wine.ns1.name
wine.ns1.name
freegams77.ns1.name
schultafel24.lima-city.de
www.checkmategaming.com.4lima.at
ngage.work
mamatt.ns1.name
mamatt.ns1.name
mamatt.ns1.name
ovh.ns1.name
basstr.12hp.ch
kl.ns1.name
zimmer.ns1.name
lucozade0.ns1.name
zimmer.ns1.name
mamatt.ns1.name
karsch.lima-city.de
minis-laaber.lima-city.de
albertoborsetta.ns1.name
libero-sever.ns1.name
zimmer.ns1.name
wine.ns1.name
sofcloud.ns1.name
*.thc-rp.de
eftos.lima-city.de
www.shop.ju-schnee.com
zimmer.ns1.name
ovh.ns1.name
freegams77.ns1.name
sofcloud.ns1.name
mamatt.ns1.name
secur3.ns1.name
foschi.ns1.name
mamatt.ns1.name
ame.ns1.name
ovh.ns1.name
www.schudnat.lima-city.de
00.ns1.name
www.00.ns1.name
libero-sever.ns1.name
zimmer.ns1.name
secur3.ns1.name
yudi.ns1.name
mamatt.ns1.name
quickmailscan.ns1.name
ame.ns1.name
Certificate
The complete raw certificate details for mamatt.ns1.name in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISA1eaScMAel+Ss0SeVY91SDPHMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjExMTYxNzQ0MDBaFw0x NzAyMTQxNzQ0MDBaMBoxGDAWBgNVBAMTD21hbWF0dC5uczEubmFtZTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAME+tba7a2yAOZBsYCNa3x7AHr+/1fZy K8wtLFczxhN615jG94TWnbjlR8wnsBNJ8QypC7OU7WoCHGB3LTq1375bYjDqM/fX ISlI6gQcsLg/U+pjhmBe+/Mx46Bv1JmXhFmdQhYZu5juW1J71OSRZeinVxP70MJF xO8eAT6tObncQSUFgABBrxWuu9lqxmuvWxIEJztNOJLCy+cWoRj+ElN3Q7eELuA5 0d11KxEzNNYqUx4YFdn2xwr0biC1OsfuwUmDOm0D+e5GpBZZxP82kWIA196LuGZB F4rOdBSvrZtX8Pyx2YsntrJYCfgQgZ1zX+PPK+Kb5FtIX3GxejRAo28CAwEAAaOC AiIwggIeMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUxSYa0xlcw2F1N+h6Oy7lCIE5 7rMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUHAQEE ZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wLAYDVR0RBCUwI4IPbWFtYXR0Lm5zMS5uYW1lghB6aWtldHRlLm5zMS5u YW1lMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUF BwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBv biBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRo IHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5j cnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAD1KHT5XWJwn vk+6RdyzCAG21dPfnytSXXWyPcxTF+tTlmH1AqnMlDS3OqRBHYdgo5Ih4gl66DNL WT1rsvFUhoVZoo5IMCZTtPn/3CHo/5KogVZ/Lzdf9xhFVI2gZdcYdnc8sG5hgCaQ KMM2AczTC01AZ60tkzDbS/zzAnUBUUJMF3pvywpeO5oG268ygYGDp+lcKcU2Wr07 LhK8goqCN2Qrga/loHG7m7uZuI55dqf4t2I59tfjUMPU1jiTXWZLlYq1oxd/TA/V XKLX97HkAnImiCmyY839F36wGQ4/s2WyePjM2P7tr3ORLHUq9C1Hiuz1m5okBiKy 6uyJ/Qj9ybM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT61trtrbIA5kGxgI1rf HsAev7/V9nIrzC0sVzPGE3rXmMb3hNaduOVHzCewE0nxDKkLs5TtagIcYHctOrXf vltiMOoz99chKUjqBBywuD9T6mOGYF778zHjoG/UmZeEWZ1CFhm7mO5bUnvU5JFl 6KdXE/vQwkXE7x4BPq05udxBJQWAAEGvFa672WrGa69bEgQnO004ksLL5xahGP4S U3dDt4Qu4DnR3XUrETM01ipTHhgV2fbHCvRuILU6x+7BSYM6bQP57kakFlnE/zaR YgDX3ou4ZkEXis50FK+tm1fw/LHZiye2slgJ+BCBnXNf488r4pvkW0hfcbF6NECj bwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 291146507821531681772028576697224794747847 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-16 17:44:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-14 17:44:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mamatt.ns1.name' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24394916222984545731513776202583134813169162872289617725427269213045895924612979944612182842699270813094881367670546243337884976234674862720636538550840566544521487148100621531229158231183220393940756823106992588025851955887157487531970217801705345863477403907085685829719641028306986230976648513143726156092405100292260368430240296739748983099462990126656601637718627805200705686641288166808480050624017346553501643258758225129783572102664861515788788546332733161852727965250584244888569933181379782204281436470694383943980233546869126986673939694582347763649735605677358594945786947656674964899518991232863523873647 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c5261ad3195cc3617537e87a3b2ee5088139eeb3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mamatt.ns1.name' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zikette.ns1.name' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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