csstriumf.ro
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a1:94:ea:76:61:21:0a:1b:cb:e6:8f:fb:e7:b2:0f:38:e6 was issued on by Let's Encrypt.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=csstriumf.ro
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a1:94:ea:76:61:21:0a:1b:cb:e6:8f:fb:e7:b2:0f:38:e6Serial Number (int): 316320262011412587476958099050050672867558
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d3:63:1a:b4:61:7c:b1:10:47:e3:e3:96:cf:e5:ef:93:8a:fd:c1:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 3f:a2:69:e6:ab:5d:35:c6:46:d1:c7:37:48:88:24:2d:29:6c:c3:c8
Fingerprint (sha256): 9f:73:30:dd:54:1e:3f:b4:0d:4d:32:30:72:f1:1f:6f:ec:aa:17:bb:b5:42:87:57:55:eb:36:d1:8e:50:39:4a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate csstriumf.ro
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for csstriumf.ro
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cpanel.csstriumf.ro
cpanel.primariaciorogarla.ro
cpanel.romalarm.ro
csstriumf.online-asig.ro
csstriumf.ro
mail.csstriumf.ro
primariaciorogarla.online-asig.ro
primariaciorogarla.ro
romalarm.online-asig.ro
romalarm.ro
webdisk.csstriumf.ro
webdisk.primariaciorogarla.ro
webmail.csstriumf.ro
webmail.romalarm.ro
www.csstriumf.online-asig.ro
www.csstriumf.ro
www.primariaciorogarla.online-asig.ro
www.primariaciorogarla.ro
www.romalarm.online-asig.ro
www.romalarm.ro
cpanel.primariaciorogarla.ro
cpanel.romalarm.ro
csstriumf.online-asig.ro
csstriumf.ro
mail.csstriumf.ro
primariaciorogarla.online-asig.ro
primariaciorogarla.ro
romalarm.online-asig.ro
romalarm.ro
webdisk.csstriumf.ro
webdisk.primariaciorogarla.ro
webmail.csstriumf.ro
webmail.romalarm.ro
www.csstriumf.online-asig.ro
www.csstriumf.ro
www.primariaciorogarla.online-asig.ro
www.primariaciorogarla.ro
www.romalarm.online-asig.ro
www.romalarm.ro
Other certificates including the domain name csstriumf.ro
(limited to 100 certificates)
Certificate
The complete raw certificate details for csstriumf.ro in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG1TCCBb2gAwIBAgISA6GU6nZhIQoby+aP++eyDzjmMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAzMTIyMTE5MTdaFw0x ODA2MTAyMTE5MTdaMBcxFTATBgNVBAMTDGNzc3RyaXVtZi5ybzCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAJM6E2K9IkwGOHOpTVNgaCrW1At/p7OdmH1b rgcQR97Eun6ZBmlyKoSWuFCTZ2zK6iNRnfujC1tJkGbbRMW8YaK3mnOfFdfDG+hx 6nXBjzvQQDfXddUvh2MnVFxcs86OKubjg8bFMCv7n1tw/Uf3JeeQFBtKthCwyrty OVT6ueJoCcGmDOQa2mueBxuaWGYmoVqYL7qXLcm9KJLyu1CkN+rlvZrLsAkqSCfE xwu+ll9cihV/L8uw71OPbD0HHxo4HMHhFfWKuaCyT77bkzaicz+DkqEwDdXaFsh2 L6bqOs/dWBrWEareM4+t7CDiVkLDRclAXAhlR8OCceusUg4Fau0CAwEAAaOCA+Yw ggPiMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU02MatGF8sRBH4+OWz+Xvk4r9wS8w HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzCCAe8GA1UdEQSCAeYwggHighNjcGFuZWwuY3NzdHJpdW1mLnJvghxjcGFuZWwu cHJpbWFyaWFjaW9yb2dhcmxhLnJvghJjcGFuZWwucm9tYWxhcm0ucm+CGGNzc3Ry aXVtZi5vbmxpbmUtYXNpZy5yb4IMY3NzdHJpdW1mLnJvghFtYWlsLmNzc3RyaXVt Zi5yb4IhcHJpbWFyaWFjaW9yb2dhcmxhLm9ubGluZS1hc2lnLnJvghVwcmltYXJp YWNpb3JvZ2FybGEucm+CF3JvbWFsYXJtLm9ubGluZS1hc2lnLnJvggtyb21hbGFy bS5yb4IUd2ViZGlzay5jc3N0cml1bWYucm+CHXdlYmRpc2sucHJpbWFyaWFjaW9y b2dhcmxhLnJvghR3ZWJtYWlsLmNzc3RyaXVtZi5yb4ITd2VibWFpbC5yb21hbGFy bS5yb4Icd3d3LmNzc3RyaXVtZi5vbmxpbmUtYXNpZy5yb4IQd3d3LmNzc3RyaXVt Zi5yb4Ild3d3LnByaW1hcmlhY2lvcm9nYXJsYS5vbmxpbmUtYXNpZy5yb4IZd3d3 LnByaW1hcmlhY2lvcm9nYXJsYS5yb4Ibd3d3LnJvbWFsYXJtLm9ubGluZS1hc2ln LnJvgg93d3cucm9tYWxhcm0ucm8wgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYG CysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy eXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBv bmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBp biBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBh dCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0B AQsFAAOCAQEAFe/yz7zvcpO/YnowEcg43b4p1ARn/3ENMBvEi19p3vvN7IMnzWLw ldNsJQSHgSipSVlSd1j9806yJDjoAoQ8/6kNKN8mnFmVH/+/0v9uheG4YFPqBWmW lzRhH+v4CzDf5B489MsdNisaIouLToOjZ4k/adWEVKtYKsMdFa1CZVIG238oZ5Gf bh+7vuOlm47lVNVVIfsT6lDFWBn+unOSRIlSXmgSNnfNQblp5J0thnG35HM51H8o oymzHo0Go24dWv3SQpKcsO4Se8VmUlGwe95Z/zc7siF/sL8ubECBOyEyBVLrOUuq f/RjIH/OYH5eEoIk8PhWYgqB9P0A7uUpDg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzoTYr0iTAY4c6lNU2Bo KtbUC3+ns52YfVuuBxBH3sS6fpkGaXIqhJa4UJNnbMrqI1Gd+6MLW0mQZttExbxh oreac58V18Mb6HHqdcGPO9BAN9d11S+HYydUXFyzzo4q5uODxsUwK/ufW3D9R/cl 55AUG0q2ELDKu3I5VPq54mgJwaYM5Braa54HG5pYZiahWpgvupctyb0okvK7UKQ3 6uW9msuwCSpIJ8THC76WX1yKFX8vy7DvU49sPQcfGjgcweEV9Yq5oLJPvtuTNqJz P4OSoTAN1doWyHYvpuo6z91YGtYRqt4zj63sIOJWQsNFyUBcCGVHw4Jx66xSDgVq 7QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316320262011412587476958099050050672867558 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-12 21:19:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-10 21:19:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'csstriumf.ro' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18585669037558371840368513687106656895691879356365454111125109462898071675317214387494453500143970797164197972718687360970010516279647693702145987477452592339336490996474543535682585653893384964642540751003824784560906731751574252218850921015488350370811420587785129642203662856086654202538193380562942600699875425408804399783567056434579927462946987905243594836588584293574453444476257322219724768577502355961916126543378697991409008325128941229056957314410289423111582332810568131592293588838693147456035824123934883409596220997397196562827006972786455701206703670891908773733293376041772367945703345508562099333869 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d3631ab4617cb11047e3e396cfe5ef938afdc12f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.csstriumf.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.primariaciorogarla.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.romalarm.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csstriumf.online-asig.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csstriumf.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.csstriumf.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primariaciorogarla.online-asig.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primariaciorogarla.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romalarm.online-asig.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romalarm.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.csstriumf.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.primariaciorogarla.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.csstriumf.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.romalarm.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csstriumf.online-asig.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csstriumf.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primariaciorogarla.online-asig.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primariaciorogarla.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.romalarm.online-asig.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.romalarm.ro' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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