www.bergmannstr71.berlin
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:4b:95:4f:b0:67:dd:9d:d4:27:a7:89:ee:d8:1e:e2:81:d5 was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.bergmannstr71.berlin
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:4b:95:4f:b0:67:dd:9d:d4:27:a7:89:ee:d8:1e:e2:81:d5Serial Number (int): 374168789986868326034754622702652502475221
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: de:9a:7e:49:56:7c:e3:e8:81:ae:d7:73:af:7e:db:d7:d2:78:da:d8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 33:33:1a:7b:4a:92:e3:58:d6:31:2c:df:df:fd:bd:81:df:25:bf:a4
Fingerprint (sha256): da:29:0e:80:db:13:7a:33:a3:55:a4:7d:32:60:20:8e:97:75:7c:14:53:4e:27:e0:a8:68:55:ed:f4:c3:f7:a2
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.bergmannstr71.berlin
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.bergmannstr71.berlin
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bergmannstr71.berlin
elstercube.de
greifswalderstr212.berlin
www.bergmannstr71.berlin
www.elstercube.de
www.greifswalderstr212.berlin
elstercube.de
greifswalderstr212.berlin
www.bergmannstr71.berlin
www.elstercube.de
www.greifswalderstr212.berlin
Other certificates including the domain name bergmannstr71.berlin
(limited to 100 certificates)
www.bergmannstr71.berlin
sicproperties.de
www.bergmannstr71.berlin
sicproperties.de
sicproperties.de
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
*.m44.berlin
www.www.birdstop.eu
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
sicproperties.de
po.dt80.net
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
sicproperties.de
*.paidediting.de
sicproperties.de
sicproperties.de
www.bergmannstr71.berlin
sicproperties.de
sicproperties.de
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
*.m44.berlin
www.www.birdstop.eu
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
sicproperties.de
po.dt80.net
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
sicproperties.de
*.paidediting.de
sicproperties.de
Certificate
The complete raw certificate details for www.bergmannstr71.berlin in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGiDCCBXCgAwIBAgISBEuVT7Bn3Z3UJ6eJ7tge4oHVMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA3MDIyMTEwMDBaFw0x NzA5MzAyMTEwMDBaMCMxITAfBgNVBAMTGHd3dy5iZXJnbWFubnN0cjcxLmJlcmxp bjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAPakoAW13GLd0bsD2Mty 17OT6gVfNC+6bTcLVZYj9aPePeCq4LYJKDhNiTtVmTEjgpTynB7vNwfXtDQfq0r9 DSJfsz+qFJ1vwtqdsFGZVGpmP3YAS7sKSIsaOWPpNehfiEByhR50jVTMFzN2qVaM uEaScRq+wb081A4/TkkguWIksYt5hA21jwxXW6lgooDFu6zmb3PZidfgE9DgC48m 3tG2D/N7awRrKouzqkg1yU62QEZXfe4uP474ednpvpjZnIwzHbEoXNFh+Iz4VEy6 Vrhv9Oy2u/iiuz8ruYJcigtojVkHgfXW7ebTWHL3IF9LJAacCcGevWUO/pr5kln+ 02sypAGH0i/dh92QK4yTkHcz9o1dGK2neF+X/F9HsT4Qu0EQOFVoU+5C2hvX7ILb +TmqzRPiHJ2mOUcI4gJ7dIvgFHf2/F353Nolusr7dtJpGhI6SD+ilQKlw2IkZNN9 /rCRs09oxcBoCENWHZbuzlw4H57JOos0tBI9xfwniItBerS/OJ9YU78cl416EGF+ Lwr/ZoFpQJDWK6j4loPI9L1e+2z30IgsFmF7Lbp/9Cxyfdd+i5RZ202GibfkpauY ImnuZWTRK73vQA2AAFbSkiwfVpgSbL8BB3FinfRQerrHZmNPghFXmh481tTl0KKh CZ7Th/36n4msPObZ2PzvB31xAgMBAAGjggKNMIICiTAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFN6afklWfOPoga7Xc69+29fSeNrYMB8GA1UdIwQYMBaAFKhKamMEfd26 5tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDov L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDov L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wgZcGA1UdEQSBjzCBjIIUYmVy Z21hbm5zdHI3MS5iZXJsaW6CDWVsc3RlcmN1YmUuZGWCGWdyZWlmc3dhbGRlcnN0 cjIxMi5iZXJsaW6CGHd3dy5iZXJnbWFubnN0cjcxLmJlcmxpboIRd3d3LmVsc3Rl cmN1YmUuZGWCHXd3dy5ncmVpZnN3YWxkZXJzdHIyMTIuYmVybGluMIH+BgNVHSAE gfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhp cyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5n IFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZp Y2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVw b3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAHszjTdHdz03IA/jFGaaVVTj39Mf ORviqX76YMyVWAwG99AIRCLDvDazxSw0HDhEl16lTFu17DZ1gNYNPnXRyPn9c70f objVOCZ640MWAMdIjWWgQ8z7dC5uOb9potl2abelFe8Cyal3uGR29NIhI02nFnUV A0AAjz7D6kZhvJoocORyOCAHg7e0PZ0LWQPjxm/Mbuq19qf/vdd81Ceo8Ln/lcMK b+iwsbWilugzuztt+9TnjxIr38mbha53bvwh2bUcYx6N/S8z+Q60m5wyISigiPQM EEfHColSobxNbOQWKewlqjEn+jbqJx8fsJfmY8KK+ZkfW1gUIu2Xpje9BfM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9qSgBbXcYt3RuwPYy3LX s5PqBV80L7ptNwtVliP1o9494KrgtgkoOE2JO1WZMSOClPKcHu83B9e0NB+rSv0N Il+zP6oUnW/C2p2wUZlUamY/dgBLuwpIixo5Y+k16F+IQHKFHnSNVMwXM3apVoy4 RpJxGr7BvTzUDj9OSSC5YiSxi3mEDbWPDFdbqWCigMW7rOZvc9mJ1+AT0OALjybe 0bYP83trBGsqi7OqSDXJTrZARld97i4/jvh52em+mNmcjDMdsShc0WH4jPhUTLpW uG/07La7+KK7Pyu5glyKC2iNWQeB9dbt5tNYcvcgX0skBpwJwZ69ZQ7+mvmSWf7T azKkAYfSL92H3ZArjJOQdzP2jV0Yrad4X5f8X0exPhC7QRA4VWhT7kLaG9fsgtv5 OarNE+IcnaY5RwjiAnt0i+AUd/b8Xfnc2iW6yvt20mkaEjpIP6KVAqXDYiRk033+ sJGzT2jFwGgIQ1Ydlu7OXDgfnsk6izS0Ej3F/CeIi0F6tL84n1hTvxyXjXoQYX4v Cv9mgWlAkNYrqPiWg8j0vV77bPfQiCwWYXstun/0LHJ9136LlFnbTYaJt+Slq5gi ae5lZNErve9ADYAAVtKSLB9WmBJsvwEHcWKd9FB6usdmY0+CEVeaHjzW1OXQoqEJ ntOH/fqfiaw85tnY/O8HfXECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 374168789986868326034754622702652502475221 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-02 21:10:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-30 21:10:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bergmannstr71.berlin' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1006215924171124246024885509550620880415039562768264919532361615453165123437513450899315779956820496946825253470577960373916290827040254257974413776664859019647008355879767211731481262291717361884265779083990902850270712558789899065720973111779919681405042704854057625929014923751663532904550410276577634351402973537539695048423905136517214669798015336385829726227772871687743103754011960595398137736901413906471108449701763667672636308876195938316849689505418771485725294313766947724420763418889582664197560398578406784221780595680021935799381742169041161426648592449349132762079881266034967311584538680953628307316604934670773601498705337139470608849149891202669179662867131913003649446704106081054634542113476560262256053173986868149881900368029001241159724301167980872712730217798604511419897958330908143804948047502076245552793126044898874624630631501614237535593096067748851850760861785132464055475188272147240707230385350656793734682112698596723895383014575492932892010643623593392518174943406960470803717734902871079314536645444187509815103250780024403047669692720107182409169074647302549955738003772495177537875420534070126508391593338317009112607459311353480145209399484734715050176513515251431559768317375023670340939644273 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) de9a7e49567ce3e881aed773af7edbd7d278dad8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bergmannstr71.berlin' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elstercube.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greifswalderstr212.berlin' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bergmannstr71.berlin' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elstercube.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greifswalderstr212.berlin' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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