treefeller.servicesinjoburg.org.za
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f0:1e:9c:a7:ec:81:62:41:f2:55:e8:6a:91:94:cc:96:df was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=treefeller.servicesinjoburg.org.za
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f0:1e:9c:a7:ec:81:62:41:f2:55:e8:6a:91:94:cc:96:dfSerial Number (int): 343045316100389742595995513246476051191519
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f7:a9:02:43:03:62:1b:de:52:1a:e7:4a:e9:86:0d:34:c0:17:56:b1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 1e:6a:7c:74:bb:c9:3c:9b:8a:0c:44:62:18:f6:d4:84:f4:1d:bf:43
Fingerprint (sha256): b0:c4:d9:c2:c9:6f:df:27:c7:fc:5b:10:54:3f:7f:a8:2f:16:1f:6e:fb:aa:7b:4e:12:2c:48:02:92:5c:df:3a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate treefeller.servicesinjoburg.org.za
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for treefeller.servicesinjoburg.org.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
treefeller.servicesinjoburg.org.za
www.treefeller.servicesinjoburg.org.za
www.treefeller.servicesinjoburg.org.za
Other certificates including the domain name servicesinjoburg.org.za
(limited to 100 certificates)
treefeller.servicesinjoburg.org.za
buildingsandton.servicesinjoburg.org.za
gasinstaller.servicesinjoburg.org.za
pawncar.servicesinjoburg.org.za
gardeningservices.servicesinjoburg.org.za
personaltrainer.servicesinjoburg.org.za
roofrepairedenglen.servicesinjoburg.org.za
printingsa.servicesinjoburg.org.za
solargeysersrepairs.servicesinjoburg.org.za
roofrepairssandton.servicesinjoburg.org.za
plumberjohannesburg.servicesinjoburg.org.za
skylightsjohannesburg.servicesinjoburg.org.za
ploygraph.servicesinjoburg.org.za
furnitureremovalfourways.servicesinjoburg.org.za
servicesinjoburg.org.za
plumber.servicesinjoburg.org.za
furnitureremovalfourways.servicesinjoburg.org.za
printingsa.servicesinjoburg.org.za
gardeningservices.servicesinjoburg.org.za
moverssa.servicesinjoburg.org.za
polygraphjohannesburg.servicesinjoburg.org.za
moversjoburg.servicesinjoburg.org.za
printingsa.servicesinjoburg.org.za
moversjohannesburg.servicesinjoburg.org.za
gardeningservices.servicesinjoburg.org.za
pawnacar.servicesinjoburg.org.za
furnitureremovalfourways.servicesinjoburg.org.za
printing.servicesinjoburg.org.za
pawncarjohannesburg.servicesinjoburg.org.za
rubbleremovalsandton.servicesinjoburg.org.za
renovations.servicesinjoburg.org.za
treefeller.servicesinjoburg.org.za
dstvrepairjohannesburg.servicesinjoburg.org.za
furnitureremovalfourways.servicesinjoburg.org.za
furnitureremovalfourways.servicesinjoburg.org.za
servicesinjoburg.org.za
printingsa.servicesinjoburg.org.za
pawnacar.servicesinjoburg.org.za
gardeningservices.servicesinjoburg.org.za
gardeningservices.servicesinjoburg.org.za
dstvrepairjohannesburg.servicesinjoburg.org.za
buildingsandton.servicesinjoburg.org.za
gasinstaller.servicesinjoburg.org.za
printingsa.servicesinjoburg.org.za
buildingsandton.servicesinjoburg.org.za
gasinstaller.servicesinjoburg.org.za
pawncar.servicesinjoburg.org.za
gardeningservices.servicesinjoburg.org.za
personaltrainer.servicesinjoburg.org.za
roofrepairedenglen.servicesinjoburg.org.za
printingsa.servicesinjoburg.org.za
solargeysersrepairs.servicesinjoburg.org.za
roofrepairssandton.servicesinjoburg.org.za
plumberjohannesburg.servicesinjoburg.org.za
skylightsjohannesburg.servicesinjoburg.org.za
ploygraph.servicesinjoburg.org.za
furnitureremovalfourways.servicesinjoburg.org.za
servicesinjoburg.org.za
plumber.servicesinjoburg.org.za
furnitureremovalfourways.servicesinjoburg.org.za
printingsa.servicesinjoburg.org.za
gardeningservices.servicesinjoburg.org.za
moverssa.servicesinjoburg.org.za
polygraphjohannesburg.servicesinjoburg.org.za
moversjoburg.servicesinjoburg.org.za
printingsa.servicesinjoburg.org.za
moversjohannesburg.servicesinjoburg.org.za
gardeningservices.servicesinjoburg.org.za
pawnacar.servicesinjoburg.org.za
furnitureremovalfourways.servicesinjoburg.org.za
printing.servicesinjoburg.org.za
pawncarjohannesburg.servicesinjoburg.org.za
rubbleremovalsandton.servicesinjoburg.org.za
renovations.servicesinjoburg.org.za
treefeller.servicesinjoburg.org.za
dstvrepairjohannesburg.servicesinjoburg.org.za
furnitureremovalfourways.servicesinjoburg.org.za
furnitureremovalfourways.servicesinjoburg.org.za
servicesinjoburg.org.za
printingsa.servicesinjoburg.org.za
pawnacar.servicesinjoburg.org.za
gardeningservices.servicesinjoburg.org.za
gardeningservices.servicesinjoburg.org.za
dstvrepairjohannesburg.servicesinjoburg.org.za
buildingsandton.servicesinjoburg.org.za
gasinstaller.servicesinjoburg.org.za
printingsa.servicesinjoburg.org.za
Certificate
The complete raw certificate details for treefeller.servicesinjoburg.org.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISA/AenKfsgWJB8lXoapGUzJbfMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA2MTUxMjI0MDBaFw0x NzA5MTMxMjI0MDBaMC0xKzApBgNVBAMTInRyZWVmZWxsZXIuc2VydmljZXNpbmpv YnVyZy5vcmcuemEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr9TiN T10N/KCJpzlWOeGfccaxzxVkAt0aaMB0g2+WrXDk5EkZb/EJ2DHda6M715B+6h99 N/eTCj4jacfiGbhoiPYIJBJ/ipFKp2dkEpflWsJC+PJz1+Weig3Km3Pl0HhsTSGy dMWRzsqaO0JmbvKsdzX28qUsiVh0OpME8vaeB7akSLPjq22T6IxZqtBAdzzBGuon IxsO9vHiuxAgrDuHZ8LfB1bHIC1n8rluUVmY7msTa/1ZZ3zVJTL0xbxRCvnychtA PnksyRfAiktcyyUFgLd1AjcfKG94lqJtKpUXun0/W68EXp6/zwASN3oqQwFL/rv3 YvW6NPpCTGyMbJWpAgMBAAGjggJKMIICRjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FPepAkMDYhveUhrnSumGDTTAF1axMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wVQYDVR0RBE4wTIIidHJlZWZlbGxlci5z ZXJ2aWNlc2luam9idXJnLm9yZy56YYImd3d3LnRyZWVmZWxsZXIuc2VydmljZXNp bmpvYnVyZy5vcmcuemEwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQB gt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y ZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJl IHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2Nv cmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRw czovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOC AQEAmW5v0FaQcJUG11JgUaCcdn94q82DdM24JZ8AXvT6k75DnkMiSUv1C5GOrAnx M+CsSn4izu6ijJ+C6d4kDDVvPksR+rmY+BjXzDyIrDCfAbv/e1KOVzeJnEa43BI0 iOSRExKsIO0AKX3wzlQt5BjIZtXNWCtjBd2XgTtEa/KVJ7l0Y0yaLTxMWkNdFtpz P45/5X6OOad1BWZx+DJ9GaSbob1dqde2uiMbvEQ7h0cZih6P5eLQjhK53fDbxYuc Z8IWjebSGSoyJti3JOvvzy2R9gw3BMz+voaTOF+h2QejZWHAscAc6oO5LGPo6/Nw FkzHowZGbtW7Pp9U4dcWqM1nKQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/U4jU9dDfygiac5Vjnh n3HGsc8VZALdGmjAdINvlq1w5ORJGW/xCdgx3WujO9eQfuoffTf3kwo+I2nH4hm4 aIj2CCQSf4qRSqdnZBKX5VrCQvjyc9flnooNyptz5dB4bE0hsnTFkc7KmjtCZm7y rHc19vKlLIlYdDqTBPL2nge2pEiz46ttk+iMWarQQHc8wRrqJyMbDvbx4rsQIKw7 h2fC3wdWxyAtZ/K5blFZmO5rE2v9WWd81SUy9MW8UQr58nIbQD55LMkXwIpLXMsl BYC3dQI3HyhveJaibSqVF7p9P1uvBF6ev88AEjd6KkMBS/6792L1ujT6QkxsjGyV qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 343045316100389742595995513246476051191519 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-15 12:24:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-13 12:24:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'treefeller.servicesinjoburg.org.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21707673084912487606266016101044175809536348226852591480449146029621016990760525743065707013712049766126565008125423251456361902091031821335161162196244198167823148919914548207683724006114039041265737218115480337509355196231830955171343455699208315685395791133140037157708060695321872247590062460500729347531353585293747444599041440935708471467242241333765974251193795455492292053567435685210014789422278886722243342017184253971058531625384080161413598215336574506161614260910773886149695876184144632446993031097204591824269550446958872286000304493982424449551360602782169796396150226612397174905421869663455233742249 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f7a9024303621bde521ae74ae9860d34c01756b1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treefeller.servicesinjoburg.org.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.treefeller.servicesinjoburg.org.za' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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