couchdb.sippsack.de

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:84:88:6f:48:c6:48:96:45:b4:aa:7c:25:02:2d:47:df:88 was issued on by Let's Encrypt .

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

couchdb.sippsack.de

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:84:88:6f:48:c6:48:96:45:b4:aa:7c:25:02:2d:47:df:88
Serial Number (int): 132210911193745301977871706721713000013704
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 08:a3:9d:a3:c2:61:60:f2:3b:0a:29:0e:a0:8a:ca:3f:e8:8a:2a:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 83:ea:3d:f9:fd:e7:8a:0f:be:b9:d3:eb:8d:b4:09:51:d8:97:3b:5d
Fingerprint (sha256): 18:0c:74:0c:be:7f:b5:47:f7:6b:9f:61:11:8f:be:c5:30:99:89:39:66:9f:3b:76:32:51:b5:4d:0e:5a:7d:0b

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on couchdb.sippsack.de
17
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.sippach.de
sippach.de
sippsack.de
blog.pos55.de
www.pos55.de
falk.sippach.de
couchdb.sippach.de
sippach.net
www.sippsack.de
sippach.com
mail.sippach.de
pos55.sippach.de
www.sippach.net
couchdb.sippsack.de
pos55.de
mail.sippach.com
pos55.sippsack.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgISAYSIb0jGSJZFtKp8JQItR9+IMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMDgxOTE0MDBaFw0x NjAzMDcxOTE0MDBaMB4xHDAaBgNVBAMTE2NvdWNoZGIuc2lwcHNhY2suZGUwggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDY4UPsu+oDyqbBdjE1UGnnHE1G Kx39Xzh/avGMkjqa03fVxJN4z+2qs0ipBqNxj/sO2ak4TQrhtU+fq27ijLXj+Lib j1+Orhcpkreh653EfMIfwwDby07l+OwNOTibfow7OPIl7jlf+OVJTU3+dbSuf8+Z Ns2j8kPfwUQfBXpoD0tOrqPgEpZbX3yZAxOQIdZOriAxTKBkxFriCzU6K7sx5w1f x2kq4QJmZKaMS6FH+tc3NYweOShZHnoMqXj3oGbJUNO+/ETqbDd8oJzydzNoD2I6 2likajB/H8Gc+82DqqBKSw1E64NxDVbbLTbeqLRoxcHuGnVa0IQUFW3f9u+jdH6B pzxRck4rwk+m8WCiqHEdU7M9dicN1XOtporwjxAuKPSipcuQwIfRVm4fuZaau19U VhSZs8WpE48p71unh94Wz5kYt4/h3URthHZ4NNVtkMwyUTHhHtioj1byin2WaxWZ tRp86YxMmCowwPKn0EtNJIm0RqZXc5yMTxRtc8oLhVnkRRu793O5rlHXlfJEcUmI n13euEfh9atYbdXYyfFxsY7QZfRyl8M2ohw+y4EQhb4HpyB86OURWovwnNaUNCuw 4Sn2hl/KeUv9oqJW2ZCpQpi+Kig18wvNvVMLWRNMPtBeKd+V5555QgDO1JWsRXT2 HDQOIV06zHBhCDry6wIDAQABo4IDFDCCAxAwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBQIo52jwmFg8jsKKQ6giso/6IoqmzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3Nw LmludC14MS5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy dC5pbnQteDEubGV0c2VuY3J5cHQub3JnLzCCARwGA1UdEQSCARMwggEPgg9ibG9n LnNpcHBhY2guZGWCCnNpcHBhY2guZGWCC3NpcHBzYWNrLmRlgg1ibG9nLnBvczU1 LmRlggx3d3cucG9zNTUuZGWCD2ZhbGsuc2lwcGFjaC5kZYISY291Y2hkYi5zaXBw YWNoLmRlggtzaXBwYWNoLm5ldIIPd3d3LnNpcHBzYWNrLmRlggtzaXBwYWNoLmNv bYIPbWFpbC5zaXBwYWNoLmRlghBwb3M1NS5zaXBwYWNoLmRlgg93d3cuc2lwcGFj aC5uZXSCE2NvdWNoZGIuc2lwcHNhY2suZGWCCHBvczU1LmRlghBtYWlsLnNpcHBh Y2guY29tghFwb3M1NS5zaXBwc2Fjay5kZTCB/gYDVR0gBIH2MIHzMAgGBmeBDAEC ATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUg bWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBv bmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZv dW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqG SIb3DQEBCwUAA4IBAQBdj+Spp6OGKukL8jjNyc5NvRkndLP6xaLM6uSIvj63QyrW 47xUv+TDoFP0iKUavk0P1Q7omFNy3SeOJKVU1R8AX9D2+SZB9auU5r/c3cjEs4gi DyWs/YL8GdTSLqht2t9TXczFuBRUvdrd2ahKSY1ibur1Qkx01yaLBAX8wfMTiCmk YdRQkv7CGHykkLMOWXvFOXvSSatUE9F4Eu6S+u2AcNv5G/2P1Q0q1306xiHWI1xB SzM1SVxvYFYSHev7Y9O8qk3wa+YiVSH1h3bm0IZ/Nu7kx0R/ZvhN7kzXy8GFzBBv vrNhdz36Gj1M53BAsIbEUBxf4vd21LnELBc/Z3ui -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2OFD7LvqA8qmwXYxNVBp 5xxNRisd/V84f2rxjJI6mtN31cSTeM/tqrNIqQajcY/7DtmpOE0K4bVPn6tu4oy1 4/i4m49fjq4XKZK3oeudxHzCH8MA28tO5fjsDTk4m36MOzjyJe45X/jlSU1N/nW0 rn/PmTbNo/JD38FEHwV6aA9LTq6j4BKWW198mQMTkCHWTq4gMUygZMRa4gs1Oiu7 MecNX8dpKuECZmSmjEuhR/rXNzWMHjkoWR56DKl496BmyVDTvvxE6mw3fKCc8ncz aA9iOtpYpGowfx/BnPvNg6qgSksNROuDcQ1W2y023qi0aMXB7hp1WtCEFBVt3/bv o3R+gac8UXJOK8JPpvFgoqhxHVOzPXYnDdVzraaK8I8QLij0oqXLkMCH0VZuH7mW mrtfVFYUmbPFqROPKe9bp4feFs+ZGLeP4d1EbYR2eDTVbZDMMlEx4R7YqI9W8op9 lmsVmbUafOmMTJgqMMDyp9BLTSSJtEamV3OcjE8UbXPKC4VZ5EUbu/dzua5R15Xy RHFJiJ9d3rhH4fWrWG3V2MnxcbGO0GX0cpfDNqIcPsuBEIW+B6cgfOjlEVqL8JzW lDQrsOEp9oZfynlL/aKiVtmQqUKYviooNfMLzb1TC1kTTD7QXinfleeeeUIAztSV rEV09hw0DiFdOsxwYQg68usCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 132210911193745301977871706721713000013704 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-08 19:14:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-07 19:14:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'couchdb.sippsack.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 884792971705807607289507869055903003287010313408226943489001415418345828168170731731918749394234056133518982261752930735229440494941309797367314656098972343772441370058614796987911298010395523004333851386012303157519592530560902798752620971358604967197182019891183920033100621847956736851751086368276298714536642783338999947089872915385222405586817430992025991661057500975618863867680282326786637748583723277788665055662245185970366401993842860685031539113590575938825998591583248228686935189439280486864102279864047935158072025726470520429381406960078958630608545112143965328825514927293190303502713916993527504340313652311168940541200373454341981442963067929390931323786318959336583613972035994285017532146745521793118357517001933797564667783682672763619864018240089291019670525997254221552345622324367486700965400511980738288028401503985596503708020629541128483670532077617922340030395633411735745169246202722942151122356335188136217415398942398882200826607162698516408629135560236975255775772342532043735831813199292418104574487879552716454641407714857082470553878352496605109910475925129860267804471840331654059166242629608523824479267829462789432196521069669711561454746195503424227062068248099338332668368549785680186590294763 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 08a39da3c26160f23b0a290ea08aca3fe88a2a9b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (275 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.sippach.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sippach.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sippsack.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.pos55.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pos55.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falk.sippach.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'couchdb.sippach.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sippach.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sippsack.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sippach.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sippach.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pos55.sippach.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sippach.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'couchdb.sippsack.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pos55.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sippach.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pos55.sippsack.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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