hanshelgebuerger.de

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:9a:32:03:18:ab:7b:75:e1:38:10:72:e9:52:43:de:46:3c was issued on by Let's Encrypt .

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

hanshelgebuerger.de

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:9a:32:03:18:ab:7b:75:e1:38:10:72:e9:52:43:de:46:3c
Serial Number (int): 139582247914628646859786538829814001714748
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 78:b7:d8:6c:35:57:15:1d:79:14:8f:6c:c9:8b:8f:65:d7:f5:27:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:99:4e:97:f0:c2:4d:db:5e:c7:20:cc:69:0c:41:f0:e0:4f:11:2b
Fingerprint (sha256): 4b:b1:e0:b2:6f:85:af:bb:1a:e4:8f:d1:16:a9:0f:d8:4b:00:f1:93:9e:2e:40:2e:b6:7f:d8:1b:cd:49:f6:c3

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on hanshelgebuerger.de
15
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

webetizer.eu
hanshelgebuerger.de
buer.gr
translate.dicentis.io
www.hanshelgebuerger.de
hig-podcast.de
toolkit.hanshelgebuerger.de
blog.hanshelgebuerger.de
piwik.hanshelgebuerger.de
www.webetizer.eu
docs.dicentis.io
smd.hanshelgebuerger.de
www.dicentis.io
slack.dicentis.io
dicentis.io

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgISAZoyAxire3XhOBBy6VJD3kY8MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMTEwOTAxMDBaFw0x NjAzMTAwOTAxMDBaMB4xHDAaBgNVBAMTE2hhbnNoZWxnZWJ1ZXJnZXIuZGUwggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQD0drq1+889WQX6KtqsrJiM8pVe lR3NQa01cIqI6rroQyH0QPwp3Vl6EQy+eGwj5xvIp707uiayErQ0Y92IIVkzwN0S luZlO1+Mn4EK36C/mVf6ijsfNloeFOu1XkABm3odnV3qrIYoymqOXc9sQ1L7WTqs ylwlX5JU2vieYFVfe024r5n/l6mOPCJ39B8eJvDcI4oEBt5WtyKz60QWQT9Avs2K U802apAw+ii67A8yJWtkPnFh7CyMBPWAZq7DM+hH/4BWJ6LMvdRDaF9t08ra10Gd woPSMINZ8B8W2na2CQzc3/WuOKJhnnBiYuwHiFCNzf1Q4uFCGlZsUqLAFzdw3iQy ofPfz1Tw0+uLc1bCOP3F9xkPAsR+tLHUOT34U9SMsh4zB+uT06AKKVJ0gDIxoOZC 5m54kGdeizIyq9r69jWmXGO6Ftt56t5Q53xmp750vhI4+pmNv1WzJ0lM50o0n3a2 yeJz39pf5knR4H6CX7dXZMsM8M95NBfAxN5XMMGi+K/GdtzEpIRMsupWCKXhGpOh JRfXQri90AVBdr8u+5Kso0SgWES14/PRrRFvZxoll2WWmGzn2tqweqYUmv3vNtXP 8asGbnZdFuJ30wXZxPSvbzT57humLONt1K8x4d/Hj8mYiynnk2zAUoedtqrFM0ZE pO0e9RxxThAluKgFcQIDAQABo4IDMTCCAy0wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBR4t9hsNVcVHXkUj2zJi49l1/UnhDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3Nw LmludC14MS5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy dC5pbnQteDEubGV0c2VuY3J5cHQub3JnLzCCATkGA1UdEQSCATAwggEsggx3ZWJl dGl6ZXIuZXWCE2hhbnNoZWxnZWJ1ZXJnZXIuZGWCB2J1ZXIuZ3KCFXRyYW5zbGF0 ZS5kaWNlbnRpcy5pb4IXd3d3LmhhbnNoZWxnZWJ1ZXJnZXIuZGWCDmhpZy1wb2Rj YXN0LmRlght0b29sa2l0LmhhbnNoZWxnZWJ1ZXJnZXIuZGWCGGJsb2cuaGFuc2hl bGdlYnVlcmdlci5kZYIZcGl3aWsuaGFuc2hlbGdlYnVlcmdlci5kZYIQd3d3Lndl YmV0aXplci5ldYIQZG9jcy5kaWNlbnRpcy5pb4IXc21kLmhhbnNoZWxnZWJ1ZXJn ZXIuZGWCD3d3dy5kaWNlbnRpcy5pb4IRc2xhY2suZGljZW50aXMuaW+CC2RpY2Vu dGlzLmlvMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB 1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsG AQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQg dXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3 aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRz ZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBACli0Dok H3KnsYivP4l6bOZr5SGMTeOo0RDbOR9uO7QXExpQCQCfC6+HFAuUu9icXdhIrdMm ySEZVcXBZo5jB6LuWNmzWheLvqAt9kxA6wsPKutflqiZe3nAQlbpXvgp2uoPTFcE zLFUyoLRb313iFdel9Qpl5RF61Bh72HgvedPexhfUZh1WrSin/bCxYgI2ZbUiHje LZs1cs93v2IEho9yy088fbWPFenOPWw8P1Ywq/QHyrUDJbGdOWMLT2+ScsZlO0YE uhLPl9bRMtcY3vfJiD4WMaBSUzSjABZIl1X6UKjrMs/SicFlJQpZ2ajuyTU1smh5 hvq8vADAIU4PLio= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9Ha6tfvPPVkF+irarKyY jPKVXpUdzUGtNXCKiOq66EMh9ED8Kd1ZehEMvnhsI+cbyKe9O7omshK0NGPdiCFZ M8DdEpbmZTtfjJ+BCt+gv5lX+oo7HzZaHhTrtV5AAZt6HZ1d6qyGKMpqjl3PbENS +1k6rMpcJV+SVNr4nmBVX3tNuK+Z/5epjjwid/QfHibw3COKBAbeVrcis+tEFkE/ QL7NilPNNmqQMPoouuwPMiVrZD5xYewsjAT1gGauwzPoR/+AVieizL3UQ2hfbdPK 2tdBncKD0jCDWfAfFtp2tgkM3N/1rjiiYZ5wYmLsB4hQjc39UOLhQhpWbFKiwBc3 cN4kMqHz389U8NPri3NWwjj9xfcZDwLEfrSx1Dk9+FPUjLIeMwfrk9OgCilSdIAy MaDmQuZueJBnXosyMqva+vY1plxjuhbbeereUOd8Zqe+dL4SOPqZjb9VsydJTOdK NJ92tsnic9/aX+ZJ0eB+gl+3V2TLDPDPeTQXwMTeVzDBovivxnbcxKSETLLqVgil 4RqToSUX10K4vdAFQXa/LvuSrKNEoFhEtePz0a0Rb2caJZdllphs59rasHqmFJr9 7zbVz/GrBm52XRbid9MF2cT0r280+e4bpizjbdSvMeHfx4/JmIsp55NswFKHnbaq xTNGRKTtHvUccU4QJbioBXECAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 139582247914628646859786538829814001714748 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-11 09:01:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-10 09:01:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hanshelgebuerger.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 997325236366358306326822718974294746088925978516185664222101889395335859568284940764587658197565182965739786912737009791379856235762681805455007343355596402154617475360251940697804695955664825325947085217468419823773222861419539395043859209312701909089464825700988599824510645266525120266510970673286106404749986148887374207410807372520949805578374063176623658872299493380065657006367883192645476797625781808047301908614440504131994618339254061023885287131316657300271324671134452723545873460431463811423305226913135453497931546617961835781994317838925297812780225065414696387605029446810549487865611429059964469641114942526968245406240654057353609124361800943827512350964335452421994549910563995767890140083227480365292673412950296183589381320625883778642785881764582112977014428848900211442546179502602652327726379999859373723606886647632481984484730479014706970495029866193602387683657334095291842141827121305467457887491389893991083640399524653398840368300594548461993618961086967508018321657754331132808489972584263233999714261258050493520047665937743436076139991225240358875634057170691223051340906929830521470036371913850742702254668656485623278619229795484570215891672910860610959675688865179758649101464137581468535811999089 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 78b7d86c3557151d79148f6cc98b8f65d7f52784 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (304 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webetizer.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanshelgebuerger.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buer.gr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translate.dicentis.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanshelgebuerger.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hig-podcast.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toolkit.hanshelgebuerger.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.hanshelgebuerger.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piwik.hanshelgebuerger.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webetizer.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.dicentis.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smd.hanshelgebuerger.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dicentis.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slack.dicentis.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicentis.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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