l4m.maenjuel.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:2d:fe:61:66:ea:22:be:3d:4c:9c:44:e8:21:34:b4:56:e2 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=l4m.maenjuel.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:2d:fe:61:66:ea:22:be:3d:4c:9c:44:e8:21:34:b4:56:e2Serial Number (int): 364099979889563786028870448932252045039330
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 00:f7:b8:6b:00:4f:51:ae:d7:bd:2b:98:f7:49:76:f4:01:12:5e:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6b:fe:06:1e:11:99:76:a7:14:a4:67:52:2e:3b:83:a2:cf:bb:8e:4f
Fingerprint (sha256): 95:3f:96:39:78:a6:0c:6c:ce:4f:88:07:4b:ce:de:bc:02:af:52:63:64:1c:fb:ba:9b:ab:d1:72:c7:c9:52:38
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate l4m.maenjuel.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for l4m.maenjuel.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
l4m.maenjuel.ch
www.l4m.maenjuel.ch
www.l4m.maenjuel.ch
Other certificates including the domain name maenjuel.ch
(limited to 100 certificates)
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
kimai.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
dl.maenjuel.ch
matomo.maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
matomo.maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
maenjuel.ch
wp.maenjuel.ch
matomo.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
maenjuel.ch
wp.maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
myt.maenjuel.ch
wp.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
kimai.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
dl.maenjuel.ch
matomo.maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
matomo.maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
maenjuel.ch
wp.maenjuel.ch
matomo.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
maenjuel.ch
wp.maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
myt.maenjuel.ch
wp.maenjuel.ch
matomo.maenjuel.ch
Certificate
The complete raw certificate details for l4m.maenjuel.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgISBC3+YWbqIr49TJxE6CE0tFbiMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA3MjAwNDQ1MDBaFw0x NzEwMTgwNDQ1MDBaMBoxGDAWBgNVBAMTD2w0bS5tYWVuanVlbC5jaDCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAOP4ky8QoaJuU7ILqS5Pg4Uttt27A+fm F5CIifzezxEDsKwR7GAAqbMcI9eo+3te9oSAN0hqgZsdzQvc1pzSyZ/gISNUXxDg rqbrnOUySsy98sP2oFdj998L6EduQAY8neeyWYut8H2WFxLyxB3hwpIR9mfbgjgt FGJTCiQbyxd5ZICcGKRxdk29q52UtHgwD4yTxgwcHM4pIxUu9LRWoI0M436bbkvV 2Tz5a/jxOMx+xCxvHKLEzEQhiHDYHohPeaCFXkFKafWlKz3EKeQCSkIbA+1IC7JB BHGCU/G1CsaCQXAVL58cRsQt2uolWEp6G4Os75hPzjFmYgF0K4Z19RabwakjXcES LBaP9MYxivxwz7kNkgtcfv3TRx9Vn9mkIEWpCtJ3eDq3Hf4E3DVdMJ0XX0aGCcVy 2YbP4qkUVal0NN+a1A0Pg/IjpuMSAl3/cYQPUwXUv9n6A5lZ3ACtkxFxwbrWxbLN SiH1li+toRhduSDQxAGIOBiSqKPRV1lOTlzQtLEPcpJI5feBWKWhFqTYZYP376h5 dsX7FgYdDhsQIbjrwXFAf8AsG1oAfTUauT6r1d+PHHfwPXylQTtZ+Xm4CNTFeFFW 7KQcgPtzqoEMRJzvlP0NKqqzOPrc6EkX2cUUQs/QTtj/muYHgg0hkIM7hit0Ir6Q 6aRjovgTYMABAgMBAAGjggIkMIICIDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAD3 uGsAT1Gu170rmPdJdvQBEl6oMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYDVR0RBCgwJoIPbDRtLm1hZW5qdWVsLmNo ghN3d3cubDRtLm1hZW5qdWVsLmNoMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHm BgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j cnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkg b25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkg aW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQg YXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcN AQELBQADggEBAGfWOJGRluAc+h9Xz/hV2fVaKpeWe5wpekAok7TEay/XhZNloECK rfY5bGoZfPUF9+6foR4zYvuWd0DsVTl48c/c7Qru6MnWJ6Z7CMtzbfGnS81M9biy fPVi+jI6/T9CJPmajYmYnELfr6IC/pnp0o/H46OhCFg+dBFqXtwri5yPKhXI0yMA 79RrvtAXNqbViE04ts+9USAIyE4eA/Aidk+YsvPQs9Bi/nJzYa+janu/I+WXZH2y 45bp6SUXVzV8ZHVCGiUC2HTN2ZOdY9nkKSt8ZJz5Yr8oaCsintY9PjIrlYzS5Vmm qKZks1P79vy4utU8+lnOAZgdaAtRbBTFzys= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4/iTLxChom5TsgupLk+D hS223bsD5+YXkIiJ/N7PEQOwrBHsYACpsxwj16j7e172hIA3SGqBmx3NC9zWnNLJ n+AhI1RfEOCupuuc5TJKzL3yw/agV2P33wvoR25ABjyd57JZi63wfZYXEvLEHeHC khH2Z9uCOC0UYlMKJBvLF3lkgJwYpHF2Tb2rnZS0eDAPjJPGDBwczikjFS70tFag jQzjfptuS9XZPPlr+PE4zH7ELG8cosTMRCGIcNgeiE95oIVeQUpp9aUrPcQp5AJK QhsD7UgLskEEcYJT8bUKxoJBcBUvnxxGxC3a6iVYSnobg6zvmE/OMWZiAXQrhnX1 FpvBqSNdwRIsFo/0xjGK/HDPuQ2SC1x+/dNHH1Wf2aQgRakK0nd4Orcd/gTcNV0w nRdfRoYJxXLZhs/iqRRVqXQ035rUDQ+D8iOm4xICXf9xhA9TBdS/2foDmVncAK2T EXHButbFss1KIfWWL62hGF25INDEAYg4GJKoo9FXWU5OXNC0sQ9ykkjl94FYpaEW pNhlg/fvqHl2xfsWBh0OGxAhuOvBcUB/wCwbWgB9NRq5PqvV348cd/A9fKVBO1n5 ebgI1MV4UVbspByA+3OqgQxEnO+U/Q0qqrM4+tzoSRfZxRRCz9BO2P+a5geCDSGQ gzuGK3QivpDppGOi+BNgwAECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 364099979889563786028870448932252045039330 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-20 04:45:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-18 04:45:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'l4m.maenjuel.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 930040520889008227323905229468588142152957987768463417771560162473663253373010791213002449767876754817707665261529330580127404578887217146246233065136154120588976072634423904021802543547689913833610516616015350103673162221905141543794290718411442615952223150488597982691964454382705690274343179229342433925935477565528878863779367364777789457044170564084053733517185885123027064143580312494430504285593764487013052614269362784986761222630716933249804893872070357412438242917251595839781693503761941031701182193493587852785344582376116391127950799756315490856705593024427784911187227087355964592002504699399963045127887841027488638710007422686790884761809875043925329798110157196504093548784033329968022450060084181737384551933406995936623350577040354235326127613733490220738472115985469878227247898168281155641598271024806733314535868818271294218006154732349701791505731356083246513851049166488478993634735348500052698213297355522205833436244214169146246592487771084553314326566748917444195253016658732563599068297610215929681043211165644704028173985777573841189631759801482361103556656119782165059484443212452506166302140747525751463781178755839449671444760600087444217533837278039367986076337423163419596438163010723301511384842241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 00f7b86b004f51aed7bd2b98f74976f401125ea8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l4m.maenjuel.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.l4m.maenjuel.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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