ruizlab.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:c0:22:f4:d9:aa:3c:f3:b0:26:aa:ab:b1:19:ba:ef:a2:9e was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ruizlab.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c0:22:f4:d9:aa:3c:f3:b0:26:aa:ab:b1:19:ba:ef:a2:9eSerial Number (int): 326717537331161629883710355839910339912350
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2d:1d:47:f1:1e:89:f6:48:05:35:ad:4b:af:2f:b3:39:a4:e9:c3:23
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f2:da:ee:ca:cf:dd:8b:f0:8d:5a:d0:73:9a:b8:bc:95:ba:53:07:21
Fingerprint (sha256): cd:fc:7f:30:be:8b:11:3d:06:dc:f6:a0:54:de:12:38:35:a1:0b:46:c0:ef:3a:83:ce:7e:3c:1a:27:73:0a:e5
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ruizlab.org
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ruizlab.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
oc.ruizlab.org
patty.cise.ufl.edu
ruizlab.org
www.ruizlab.org
patty.cise.ufl.edu
ruizlab.org
www.ruizlab.org
Other certificates including the domain name ruizlab.org
(limited to 100 certificates)
gitlab.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
ai.ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ai.ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
ai.ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ai.ruizlab.org
ai.ruizlab.org
Certificate
The complete raw certificate details for ruizlab.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgISA8Ai9NmqPPOwJqqrsRm676KeMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEwMDEwOTQ3MDhaFw0x NzEyMzAwOTQ3MDhaMBYxFDASBgNVBAMTC3J1aXpsYWIub3JnMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEAq1+7Si/FH1Z8WHPG9dwAIvSj9ufs+Rnf4lcj +nREohUJTWm3y0YusJDG0MsdLElmQJhk7hamvYHeeQUl6c777lm8LuTufGBqERLd hFEcFF+kx3Iuk8Gtyxokt1Ms1LT1OZkR2l1iM0r19aMBViPdWHRGyQGGg90Q8CCs zgNyL3SLAyDiOt6ZbDO8jZWHUbMs1KVyOK+YaiAGiM5hWnTFb09sqBl19Y5hSL/N jFXdNWcNE9ll8t0x6lVPb3J6ebEeXmABCWFBidl8F3K1VhLg74q6Vu8TgtHpE3ns Lh0JL4Zr7LzJL7xakakylZ/97l2TthNm/KACn19n0oykeCIG/OWNM+q4k5vwZXh5 jFD7QTHZCZkZRu01poEjKd3gsJPfQweaTFJSJUxQthDFZv6NckaP8t0d1zcXIwk5 lmUuIZN9fwTib7Z5hhLaofP+4j7t4G7riy7jThj+RhNgfTzgyksh2i4Irzjy8Hqt TPFc72ADGNiXW94amD3o9q8Q+c+AxuVr24LO6VpCfD+eDvNpYsDuLMSO4HLMuqQY y1Wbc+C1zdFKAD4+zZmIAvH7L+jmvC3dYSFZ+dhl6UmZWwHUMcpj33eBl7HnWLYo mKpGJlTQYiXfKn5SFBQ4FmzeyqF93FQ6af8msQbzaosuz/n78zSWTRAq25P7C0Ro 5UcGFekCAwEAAaOCAkAwggI8MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQULR1H8R6J 9kgFNa1Lry+zOaTpwyMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzBLBgNVHREERDBCgg5vYy5ydWl6bGFiLm9yZ4IScGF0 dHkuY2lzZS51ZmwuZWR1ggtydWl6bGFiLm9yZ4IPd3d3LnJ1aXpsYWIub3JnMIH+ BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGe DIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBS ZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBD ZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5v cmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAJNB3TZJKQGll1Srb+eN jXYm8MQ0OSYnZ+DkrfwodeXJTnXrrVM9fgmCc33c8j8X50wNXhCGQ8EKKA0jBm10 hQh7Ub4ju8KZAHI1pg9ckhiprI3rUg+oWZCBoThn2bBNIBO3dnC2r3ivzGJIo0Nl 32w0FUHe3BJtubd2uNw0c+MB0/fAB/Ch7MKYmLT060A4HRXh+4c12ZNz8vTuM0PT fjA7YzsxUgF6MZ1HHlSDSgf8I41txoqWIgnHrx4MNH32OC1Y9RrF/jHfXNUEyyZz CiSuY3X1rZdPNEQ+5q058/89eCg+J6ml5hx5ipXjmbxoXXqUaDmYzYbKEYaMuDwp uyc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAq1+7Si/FH1Z8WHPG9dwA IvSj9ufs+Rnf4lcj+nREohUJTWm3y0YusJDG0MsdLElmQJhk7hamvYHeeQUl6c77 7lm8LuTufGBqERLdhFEcFF+kx3Iuk8Gtyxokt1Ms1LT1OZkR2l1iM0r19aMBViPd WHRGyQGGg90Q8CCszgNyL3SLAyDiOt6ZbDO8jZWHUbMs1KVyOK+YaiAGiM5hWnTF b09sqBl19Y5hSL/NjFXdNWcNE9ll8t0x6lVPb3J6ebEeXmABCWFBidl8F3K1VhLg 74q6Vu8TgtHpE3nsLh0JL4Zr7LzJL7xakakylZ/97l2TthNm/KACn19n0oykeCIG /OWNM+q4k5vwZXh5jFD7QTHZCZkZRu01poEjKd3gsJPfQweaTFJSJUxQthDFZv6N ckaP8t0d1zcXIwk5lmUuIZN9fwTib7Z5hhLaofP+4j7t4G7riy7jThj+RhNgfTzg yksh2i4Irzjy8HqtTPFc72ADGNiXW94amD3o9q8Q+c+AxuVr24LO6VpCfD+eDvNp YsDuLMSO4HLMuqQYy1Wbc+C1zdFKAD4+zZmIAvH7L+jmvC3dYSFZ+dhl6UmZWwHU Mcpj33eBl7HnWLYomKpGJlTQYiXfKn5SFBQ4FmzeyqF93FQ6af8msQbzaosuz/n7 8zSWTRAq25P7C0Ro5UcGFekCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 326717537331161629883710355839910339912350 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-01 09:47:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-30 09:47:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ruizlab.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 699144724917037206159576327765500724333221170765144392890021896956076100698363285301641291430445468869635701344539729236835809594146308061013799787061239919957507553240954726600306226830870291788681067396949624551588003667857225402564360242472530000973697347021978220936802977061945532096181183163889280546239227689860806632455648977569812938507370039544478906220570734071132221436763387085597022363037889607821076047489403074161701223058945642098279119719631844567643613541485863242019210180585807457774302014099182102349451224755807107501095288453683677725595346634154558404002231122110418223715181941330607751411030656686335355849426046113707502001920920740780883831961713134043431768058514221697377333674557802120290981228018732492078957617143992722404892543476250478636178858832767980729268516071002670127302233430740642087784343214678939726164878488362454431447087101767828789733301472381400441920219574766161784069669041608983048072601886038279906280681366034266497324641151478259807332305884764382463848456975552890229069989758795586394100681844291173274008627053339163474974742188543603179250691807737931324515060442187917338829582972716013591297881277155541347701213041032474487390674680619698440751840112197289627672253929 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2d1d47f11e89f6480535ad4baf2fb339a4e9c323 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.ruizlab.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patty.cise.ufl.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruizlab.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruizlab.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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