batrick.de

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:88:6e:9f:74:b2:39:6a:13:bc:69:ac:d4:11:be:8f:d2:8c was issued on by Let's Encrypt .

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

batrick.de

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:88:6e:9f:74:b2:39:6a:13:bc:69:ac:d4:11:be:8f:d2:8c
Serial Number (int): 133537730854624621297285284082565434561164
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 51:7a:81:d8:42:50:2d:13:f9:b3:93:c2:d4:d6:7f:bf:25:d6:5d:d9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bf:db:90:06:65:8f:85:f2:62:21:f3:6f:fc:23:7b:ad:70:4c:9a:ed
Fingerprint (sha256): 0a:76:8a:1e:2f:79:3a:ad:80:9f:25:6b:c4:94:13:d3:da:57:09:5d:0f:ef:fe:b6:d1:c9:bb:82:54:c8:c2:c8

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on batrick.de
17
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

4.batrick.de
syncthing.batrick.de
pyload.batrick.de
b.batrick.de
d.batrick.de
g.batrick.de
2.batrick.de
3.batrick.de
5.batrick.de
batrick.de
piwik.batrick.de
6.batrick.de
a.batrick.de
c.batrick.de
1.batrick.de
pydio.batrick.de
f.batrick.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgISAYhun3SyOWoTvGms1BG+j9KMMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMDMxOTA5MDBaFw0x NjAzMDIxOTA5MDBaMBUxEzARBgNVBAMTCmJhdHJpY2suZGUwggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQDHeFsb248IXwqTbYa5sbpGJRLa/JzH3rRe7eOs ttu9Q4pwSQoePTRBUB1BjAw/Fz/rbQW5i867fn/nHJygCU8dx96aru+RctSNOJ3X 79/wGnhhwX2ntHuHRAygy9kGTmJ19a4n/a9TyOV5F3585Qf82CSaW0O9j+PSYjpN 29V3jwTDT5MXCYPEd7cApDiWV0wqqvd5f6CiqPvKH2UVobJRCReIhXvTsI85FCkk 6zJyFFlSPHe2tQydwoQ7lOyLPODB/gQlt9Z4NUC7a0t1+EZPMvy/0EPPsooE83SM +fPPuRCD9TJgInYk3CxoiUEfh5MtltLJhRPajjNLYszBAPpZ7FqpgKenQfqwVvbB t07a29L4iACpbW3m+S1iu5F9goqrBzb1dJG0pCesX/kmja/3H72mIyV4sxLt43xQ NzT6ozhD9cNC6p2JMY1GvMp+uYAf4C0ppRYl5IfhUDuP6BfbkkheZQvOd169CGUZ lO9GIDXy88jvRMDm7v8r/byNmFP17uvJkwWoSarpEK/sx0XYgoyGRX9EFkhVGOL2 SOy19Fqms1qOU47osLkFe/iQ3nYUkxo6sqs+TmvliiAvs3jtOQQJNZl9pkbi6YYR JMJOda5Jn68XQOz49LEnncM5QSoI4m2aoWl+iq0uqv4LyorgVDl/YpL0aLtmEkLK /3MddwIDAQABo4IDBjCCAwIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRReoHYQlAt E/mzk8LU1n+/JdZd2TAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBw BggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmludC14MS5s ZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDEu bGV0c2VuY3J5cHQub3JnLzCCAQ4GA1UdEQSCAQUwggEBggw0LmJhdHJpY2suZGWC FHN5bmN0aGluZy5iYXRyaWNrLmRlghFweWxvYWQuYmF0cmljay5kZYIMYi5iYXRy aWNrLmRlggxkLmJhdHJpY2suZGWCDGcuYmF0cmljay5kZYIMMi5iYXRyaWNrLmRl ggwzLmJhdHJpY2suZGWCDDUuYmF0cmljay5kZYIKYmF0cmljay5kZYIQcGl3aWsu YmF0cmljay5kZYIMNi5iYXRyaWNrLmRlggxhLmJhdHJpY2suZGWCDGMuYmF0cmlj ay5kZYIMMS5iYXRyaWNrLmRlghBweWRpby5iYXRyaWNrLmRlggxmLmJhdHJpY2su ZGUwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYG CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUH AgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9u IGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGgg dGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNy eXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAJtbuUfkQtKnV 6zAf6Pque9gjLYh9LrfkJLpZ9PTMWhIFEQFLBYk8O9pIx1j9p+abg0CazSWMtKKj hJDYIkQUPT7nt4+AquTv4wGdWYHlJ8AXgnirzJC5MoKYa/afadrFZHJl9D1b15kH dP1u1iSuLfbOsVq/3HhQD6EtRAimfWfoqWESkXZlWk5p7ZcPi5AUumjRWKdJNtlD +nvYWdn+lyaSvH56PBlMRF7Ch8o+maEWBslwY1svkkD0tBn5fcwCAWY8ZdnkKaJd svt/w3kbdOLrsTKv2AVFZ81jeQCsSLYjUPBsUyNNIBWRAYMxSFK9kgYPyYIYjHJq KIh/VxavjQ== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx3hbG9uPCF8Kk22GubG6 RiUS2vycx960Xu3jrLbbvUOKcEkKHj00QVAdQYwMPxc/620FuYvOu35/5xycoAlP Hcfemq7vkXLUjTid1+/f8Bp4YcF9p7R7h0QMoMvZBk5idfWuJ/2vU8jleRd+fOUH /NgkmltDvY/j0mI6TdvVd48Ew0+TFwmDxHe3AKQ4lldMKqr3eX+goqj7yh9lFaGy UQkXiIV707CPORQpJOsychRZUjx3trUMncKEO5Tsizzgwf4EJbfWeDVAu2tLdfhG TzL8v9BDz7KKBPN0jPnzz7kQg/UyYCJ2JNwsaIlBH4eTLZbSyYUT2o4zS2LMwQD6 WexaqYCnp0H6sFb2wbdO2tvS+IgAqW1t5vktYruRfYKKqwc29XSRtKQnrF/5Jo2v 9x+9piMleLMS7eN8UDc0+qM4Q/XDQuqdiTGNRrzKfrmAH+AtKaUWJeSH4VA7j+gX 25JIXmULzndevQhlGZTvRiA18vPI70TA5u7/K/28jZhT9e7ryZMFqEmq6RCv7MdF 2IKMhkV/RBZIVRji9kjstfRaprNajlOO6LC5BXv4kN52FJMaOrKrPk5r5YogL7N4 7TkECTWZfaZG4umGESTCTnWuSZ+vF0Ds+PSxJ53DOUEqCOJtmqFpfoqtLqr+C8qK 4FQ5f2KS9Gi7ZhJCyv9zHXcCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 133537730854624621297285284082565434561164 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-03 19:09:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-02 19:09:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'batrick.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 813767174255889803744543356414323712577328442998083199981119412743430118777129507805792046850283348126382629264345441024250817158926801547915224240783083039305622335446046773920255539833111216582041421945787499984024340316843647217132643639465579619439520549478569497501261488996781036818888703944784492859396199879078582856283101936363033711876865713270340551895030734496909157279773548575614506700292832853826487247720426508840724871658590130810762916899680887825105112464413233083185365333613664460414326137989872698891516112952305964166876526238514869252974407443665071955448685708636987603269959604767646098564780528427721199909206197550589814187174237858958888153387950768251616243123844605073796933588870611353407403956219792346776489472162151469556569968303476340375622712149052543565443400817515937411552803351161388773337527707899571398784556726772027165428575402567959329301602712740148547351065633144170483077032465640028129029944765472591420914066525757315146119916424104640270838271750139177154231282449140626322816361271150377817898886464698450225430501995455006301015546238641397405984957105766462335857617972764816203578159785253544077697399742092780406022064243710240911600741362468635919901210278683162795350105463 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 517a81d842502d13f9b393c2d4d67fbf25d65dd9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (261 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4.batrick.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syncthing.batrick.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyload.batrick.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b.batrick.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd.batrick.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g.batrick.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2.batrick.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3.batrick.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5.batrick.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batrick.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piwik.batrick.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6.batrick.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.batrick.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.batrick.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1.batrick.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pydio.batrick.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.batrick.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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