lists.odem.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:50:3b:f8:21:db:17:27:2b:db:16:5d:95:fe:68:51:d6:4d was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lists.odem.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:50:3b:f8:21:db:17:27:2b:db:16:5d:95:fe:68:51:d6:4dSerial Number (int): 288639159977005693712259944436848240219725
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 69:3f:fe:db:c1:66:2e:4b:4c:cb:1e:ad:f4:f3:5c:10:7d:91:69:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ae:6f:77:1e:49:81:5d:b9:6d:05:c6:91:b6:4f:ee:06:76:54:09:e6
Fingerprint (sha256): 9a:77:fc:f4:db:4d:4d:ac:13:c7:e5:12:54:5d:af:ff:2c:ea:9b:f8:2f:7f:5b:9a:02:18:6a:18:85:8d:37:34
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate lists.odem.org
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lists.odem.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lists.itk-stuttgart.org
lists.odem.org
ml.wen-waehlen.de
lists.odem.org
ml.wen-waehlen.de
Other certificates including the domain name odem.org
(limited to 100 certificates)
saskia.odem.org
alvar.pad.odem.org
lists.odem.org
alvar.pad.odem.org
alvar.pad.odem.org
alvar.pad.odem.org
lists.odem.org
jabber.odem.org
alvar.pad.odem.org
team.saskia.odem.org
alvar.pad.odem.org
lists.odem.org
lists.odem.org
lists.odem.org
lists.odem.org
alvar.pad.odem.org
alvar.pad.odem.org
lists.odem.org
svn.odem.org
lists.odem.org
svn.odem.org
lists.odem.org
lists.odem.org
lists.odem.org
jabber.odem.org
alvar.pad.odem.org
alvar.pad.odem.org
jabber.odem.org
team.saskia.odem.org
svn.odem.org
lists.odem.org
lists.odem.org
lists.odem.org
lists.odem.org
lists.odem.org
alvar.pad.odem.org
alvar.pad.odem.org
lists.odem.org
svn.odem.org
akz-intern.pad.ak-zensur.de
alvar.pad.odem.org
svn.odem.org
alvar.pad.odem.org
jabber.odem.org
alvar.pad.odem.org
alvar.pad.odem.org
lists.odem.org
akz-intern.pad.ak-zensur.de
team.saskia.odem.org
lists.odem.org
alvar.pad.odem.org
alvar.pad.odem.org
lists.odem.org
alvar.pad.odem.org
lists.odem.org
jabber.odem.org
lists.odem.org
team.saskia.odem.org
team.saskia.odem.org
jabber.odem.org
pad.odem.org
alvar.pad.odem.org
lists.odem.org
alvar.pad.odem.org
alvar.pad.odem.org
alvar.pad.odem.org
lists.odem.org
jabber.odem.org
alvar.pad.odem.org
team.saskia.odem.org
alvar.pad.odem.org
lists.odem.org
lists.odem.org
lists.odem.org
lists.odem.org
alvar.pad.odem.org
alvar.pad.odem.org
lists.odem.org
svn.odem.org
lists.odem.org
svn.odem.org
lists.odem.org
lists.odem.org
lists.odem.org
jabber.odem.org
alvar.pad.odem.org
alvar.pad.odem.org
jabber.odem.org
team.saskia.odem.org
svn.odem.org
lists.odem.org
lists.odem.org
lists.odem.org
lists.odem.org
lists.odem.org
alvar.pad.odem.org
alvar.pad.odem.org
lists.odem.org
svn.odem.org
akz-intern.pad.ak-zensur.de
alvar.pad.odem.org
svn.odem.org
alvar.pad.odem.org
jabber.odem.org
alvar.pad.odem.org
alvar.pad.odem.org
lists.odem.org
akz-intern.pad.ak-zensur.de
team.saskia.odem.org
lists.odem.org
alvar.pad.odem.org
alvar.pad.odem.org
lists.odem.org
alvar.pad.odem.org
lists.odem.org
jabber.odem.org
lists.odem.org
team.saskia.odem.org
team.saskia.odem.org
jabber.odem.org
pad.odem.org
Certificate
The complete raw certificate details for lists.odem.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgISA1A7+CHbFycr2xZdlf5oUdZNMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzExMjgxMjMyMDdaFw0x ODAyMjYxMjMyMDdaMBkxFzAVBgNVBAMTDmxpc3RzLm9kZW0ub3JnMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnfy1Vy6ihphnnbAAFdWjzBXcAK1Dk05t Bo4N3BA4D9GBeuQirrdFTVSGkBh4RyCJui0k1pW96BZQ6AfZnNpcUkqeFLb+XYa3 Rylqy38qd7+shD9aM4ETmc4I20XM19phkd5Yiy5Ic49xIIP9Dk6DxBRPqqfHzxQ8 twyczr+zwkZiAuVQiHST5uh7JqjLkYXyKWDLGlOaNIFZrWUZhiBtAFPNRK6DUD6X v8ILy/jbaCTsIVA2x9coSBaFR+SNL21mv4/LN+iq38+4+VsHnObf+CJwEOyAkf6q a9VeovXc/eznqGM6gZK+97S06qTH3cs59h22KKL8TXrE70OwW1m8+h2eVt66IV/S FC7Uf2J5w5NEpS0BoU9nSBCjYH33M9vmstvL8YjhpSfdVCnDMhDF3gqchPPwxjwH Vgbp+elHvRW2GBNMaBagFNMxTDYCx4LigFf1d65m6aN36TUt2iYIyW1HJyBGFYcK cg63J7I2a/7+t/JlsyP3z9Vs2C9dm037+CMQ1K5QyejJgmYekwh43Y0iA3mY2sTU 6gDzrG/XkvsQ3+3sMGzFOzmMv4htTyfDTAzdjNiCcIAPpVa/khoQJrlcrdpD9GZV M2sdCbZMCnsHAL0CNhYanYGm3Mdwo1vBtp5Ok2XODGVBWfTRWc5Xi7kj3fWL4Ds6 YNikTypkj7sCAwEAAaOCAjowggI2MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUaT/+ 28FmLktMyx6t9PNcEH2RaQYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzBFBgNVHREEPjA8ghdsaXN0cy5pdGstc3R1dHRn YXJ0Lm9yZ4IObGlzdHMub2RlbS5vcmeCEW1sLndlbi13YWVobGVuLmRlMIH+BgNV HSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcC ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGb VGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5 aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0 aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcv cmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAHuvJv0M2kE2xAuNK+q7yMlP oFMzXZhWfT4oLN7KLbh7zHRwe6S8MbjvvotQSxduMQghI1FaiMUeRsK9WMWxs046 2sKihR24ucVI47f9tKxJ+I+lHgx9nMCBZpEw1jKg/YYDPMLJRjCrFSgVeHqna0u3 P9Zu4XnQRAhg1wgSHu85dn85JwQx5WOqdelQCzTnbcTXbylVtVwGtSqZX21uFiM+ qUlB2W0Cp6AFySjrwEFwLe4ELwMf+UuINJ/2PG9NcSjaKn+/JeWLb50F2f7LKMyS 3CkCElklx2y9SelLk86c1Mn8bZbK6XcVcPyESr0kdk60N00bzoxqt1TQkDoOjvs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnfy1Vy6ihphnnbAAFdWj zBXcAK1Dk05tBo4N3BA4D9GBeuQirrdFTVSGkBh4RyCJui0k1pW96BZQ6AfZnNpc UkqeFLb+XYa3Rylqy38qd7+shD9aM4ETmc4I20XM19phkd5Yiy5Ic49xIIP9Dk6D xBRPqqfHzxQ8twyczr+zwkZiAuVQiHST5uh7JqjLkYXyKWDLGlOaNIFZrWUZhiBt AFPNRK6DUD6Xv8ILy/jbaCTsIVA2x9coSBaFR+SNL21mv4/LN+iq38+4+VsHnObf +CJwEOyAkf6qa9VeovXc/eznqGM6gZK+97S06qTH3cs59h22KKL8TXrE70OwW1m8 +h2eVt66IV/SFC7Uf2J5w5NEpS0BoU9nSBCjYH33M9vmstvL8YjhpSfdVCnDMhDF 3gqchPPwxjwHVgbp+elHvRW2GBNMaBagFNMxTDYCx4LigFf1d65m6aN36TUt2iYI yW1HJyBGFYcKcg63J7I2a/7+t/JlsyP3z9Vs2C9dm037+CMQ1K5QyejJgmYekwh4 3Y0iA3mY2sTU6gDzrG/XkvsQ3+3sMGzFOzmMv4htTyfDTAzdjNiCcIAPpVa/khoQ JrlcrdpD9GZVM2sdCbZMCnsHAL0CNhYanYGm3Mdwo1vBtp5Ok2XODGVBWfTRWc5X i7kj3fWL4Ds6YNikTypkj7sCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 288639159977005693712259944436848240219725 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-28 12:32:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-26 12:32:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lists.odem.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 644531306835852520181295896765090094081085917681449802050235063464531046333851537648685126412783421474750883124328624798261675700277645559499369674765472295331494879927223093548592132516004894486716212103354519862612385950629769438451498450923972219779850025130288789589217126061931363757031116513247324765003350445950018970886739853641469557719636794852931413948487614786136232224652591262371978212314071510494334837318987410443032321964690813067764405620830484651073462189034838034645091194905583059554183925362558252385762014479422465263504045119730375163740229660109696767485512935928825133289808477327654073481430921503751025545647976721488879023969633166614873644438268676134640595155316589430496094505930480814047867238878557935312444974160648661704953893878457969828366692938036582975919355770182024137252607048901210638095068909639354365876930159235118652971687373006896155264876930043030931275759143083369837598682036098614136056856926613259086655648449224807846432877165410770065177322301426786514268149345682932912723306395569211130048494946716619868332446398771714926397741526109480893191444508676947422043898121466788444731019901621285408194712678225606532729091784322185171990690830445444871712601062334064183447162811 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 693ffedbc1662e4b4ccb1eadf4f35c107d916906 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.itk-stuttgart.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.odem.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ml.wen-waehlen.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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