erxinfo.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:f0:f3:07:d4:8d:9a:43:bf:ce:a5:f6:8b:0f:78:e9:3a was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=erxinfo.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:f0:f3:07:d4:8d:9a:43:bf:ce:a5:f6:8b:0f:78:e9:3a
Serial Number (int): 288539441387976943885572474993992978196794
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:2e:dc:7b:5e:4b:9b:e3:cf:aa:03:54:3f:20:70:10:da:2c:08:ca
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b2:04:c0:63:75:89:92:bf:4c:59:92:57:92:5c:0c:9a:00:15:6e:d3
Fingerprint (sha256): ab:b9:c3:af:63:cd:75:b8:8d:ca:72:67:ec:2b:04:cf:0c:ec:8c:62:4c:2f:94:b8:4d:a5:4e:e1:7e:7c:78:ca

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate erxinfo.ca

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for erxinfo.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ampache.erxinfo.ca
dav.erxinfo.ca
erx21.erxinfo.ca
erx51.erxinfo.ca
erxinfo.ca
hg.erxinfo.ca
mail.erxinfo.ca
owncloud.erxinfo.ca
pfa.erxinfo.ca
wise.erxinfo.ca
www.erxinfo.ca

Other certificates including the domain name erxinfo.ca

(limited to 100 certificates)
*.erxinfo.ca
home-genie-cloud.erxinfo.ca
artisedastextiles.com
hg.erxinfo.ca
*.erxinfo.ca
www.piiq.app
www.erxinfo.ca
home-genie-cloud.erxinfo.ca
erxinfo.ca
home-genie-cloud.erxinfo.ca
www.vassmarinediveservice.com
chufsd.backpackfordrive.app
www.erxinfo.ca
www.erxinfo.ca
*.erxinfo.ca
erxinfo.ca
dav.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.bongdaphui.vn
www.erxinfo.ca
www.erxinfo.ca
www.findbond.in
erxinfo.ca
www.erxinfo.ca
flesoj.com
erxinfo.ca
googlehome.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
erxinfo.ca
*.erxinfo.ca
owncloud.erxinfo.ca
hg.erxinfo.ca
erxinfo.ca
flesoj.com
www.demoiterable.com
www.demoiterable.com
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
ampache.erxinfo.ca
erxinfo.ca
googlehome.erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
procyonforest.com
www.bongdaphui.vn
www.erxinfo.ca
www.erxinfo.ca
chufsd.backpackfordrive.app
erxinfo.ca
express.kiba-fashion.nl
www.erxinfo.ca
erxinfo.ca
erxinfo.ca
erxinfo.ca
www.erxinfo.ca
www.erxinfo.ca
erxinfo.ca
www.erxinfo.ca
dav.erxinfo.ca

Certificate

The complete raw certificate details for erxinfo.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISA0/w8wfUjZpDv86l9osPeOk6MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA3MDEwMzA2MDBaFw0x
NjA5MjkwMzA2MDBaMBUxEzARBgNVBAMTCmVyeGluZm8uY2EwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQC50YT+GfZqgIbg9HOY+S9EZO5XbBG9DfXIUMF0
DpirUUwd2UGPB2boXfdUpLy2lFdjR9sFLK6f7HMo2aanakEFZ3ZumSSuYkz3aGYD
RWopx9YFYLazZDhJTdA1oqqGl2dfeA2OO/xpb3aeyOSXL4wbiO59W9AJ9uwe8Ew1
r7VcUu7FxS+2PoVRs9mGD00f49HS7Ye8qieq41zErIYcb7Y6PRhYpkO4yMr3j5G+
TNABZTO287garmdtnbZQnsronxKW/GyWeFyWuErb1pVQHbm3zmOYt46wPXoSvv/J
KT10inwHOIHVMKUYAQFwVkvdMI2UWOx8puxBgK23d7hlxwURAgMBAAGjggK8MIIC
uDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHAu3HteS5vjz6oDVD8gcBDaLAjKMB8G
A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMHAGCCsGAQUFBwEBBGQwYjAv
BggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w
LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv
MIHFBgNVHREEgb0wgbqCEmFtcGFjaGUuZXJ4aW5mby5jYYIOZGF2LmVyeGluZm8u
Y2GCEGVyeDIxLmVyeGluZm8uY2GCEGVyeDUxLmVyeGluZm8uY2GCCmVyeGluZm8u
Y2GCDWhnLmVyeGluZm8uY2GCD21haWwuZXJ4aW5mby5jYYITb3duY2xvdWQuZXJ4
aW5mby5jYYIOcGZhLmVyeGluZm8uY2GCD3dpc2UuZXJ4aW5mby5jYYIOd3d3LmVy
eGluZm8uY2Ewgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEB
MIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYI
KwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGll
ZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNl
IHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xl
dHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAXXDc
B0nxn/sC8eU+YM2kpnvDtOUGf9OV1gLGtqpWH6JmC1xFonu+jCW4VLtXvvxqxpch
/WmriOJWVw7kj6ghH2nP9y1Tr7lsfZ7eNawVZRBPCHcTtorcx+AYrSkd7UvWpP5C
x89MIbPrqoUantuA7Bd/HFVHnWcYkSH1YEXlI6O2vwHgNKhCultoItW2GVp+1tWi
DsMena80ZUU3FRfnU8Fq6w9vvBLWYikDRn8fGLjpFfgIT1haChtcEVN36zsyun30
cEQo2ZJrdacd1HQom4zC/oypaUcVoeFYSl8//C8ee8VPSQjZVbwhIAJv4OSzDPEK
os5SYdqYHFN8V2hEWg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudGE/hn2aoCG4PRzmPkv
RGTuV2wRvQ31yFDBdA6Yq1FMHdlBjwdm6F33VKS8tpRXY0fbBSyun+xzKNmmp2pB
BWd2bpkkrmJM92hmA0VqKcfWBWC2s2Q4SU3QNaKqhpdnX3gNjjv8aW92nsjkly+M
G4jufVvQCfbsHvBMNa+1XFLuxcUvtj6FUbPZhg9NH+PR0u2HvKonquNcxKyGHG+2
Oj0YWKZDuMjK94+RvkzQAWUztvO4Gq5nbZ22UJ7K6J8SlvxslnhclrhK29aVUB25
t85jmLeOsD16Er7/ySk9dIp8BziB1TClGAEBcFZL3TCNlFjsfKbsQYCtt3e4ZccF
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288539441387976943885572474993992978196794
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-01 03:06:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-29 03:06:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'erxinfo.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23457404336006580449098340669277654407634653501138237560739132890865444139500220761298158546539269371940103478385790626813686010864128423126193224466408845299008473770474134076051078446531132693929227893642726043376641623579209789268258219126253443238596935917124694336478452546761222495386958341214457138372855879810368368497121968420439673882852336962948760709658331329414767413221376807546824395094365997102076299809401277415782081636304549434548753180636570448310504928871168378570364295050650627773130740917890871515125950174612733010585385752643757634032365555228998125290339797705533842386756672040222539056401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							702edc7b5e4b9be3cfaa03543f207010da2c08ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (189 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampache.erxinfo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.erxinfo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erx21.erxinfo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erx51.erxinfo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erxinfo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hg.erxinfo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.erxinfo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owncloud.erxinfo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfa.erxinfo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wise.erxinfo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erxinfo.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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