unizdrav.sk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f7:88:c2:76:ea:71:65:54:75:79:a0:d6:d4:a2:0e:d1:50 was issued on by Let's Encrypt.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=unizdrav.sk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f7:88:c2:76:ea:71:65:54:75:79:a0:d6:d4:a2:0e:d1:50Serial Number (int): 345568387149668662296298455171466030666064
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 49:32:a2:fa:dd:fd:db:d0:57:86:04:0a:ac:b3:dc:12:fa:e6:91:2c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 57:2b:65:49:e3:96:5b:d8:8c:92:59:63:68:e6:9f:48:df:ce:e8:5e
Fingerprint (sha256): e2:7d:5a:2f:12:4f:5d:09:5b:1d:96:4f:ce:30:65:88:9f:e2:b6:c6:96:09:b1:a1:fc:6d:42:cf:94:f3:48:0e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate unizdrav.sk
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for unizdrav.sk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autoconfig.unizdrav.sk
cloud.unizdrav.sk
email-old.unizdrav.sk
email.unizdrav.sk
mysql.unizdrav.sk
proxy.unizdrav.sk
unizdrav.sk
www.unizdrav.sk
xml.unizdrav.sk
cloud.unizdrav.sk
email-old.unizdrav.sk
email.unizdrav.sk
mysql.unizdrav.sk
proxy.unizdrav.sk
unizdrav.sk
www.unizdrav.sk
xml.unizdrav.sk
Other certificates including the domain name unizdrav.sk
(limited to 100 certificates)
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
Certificate
The complete raw certificate details for unizdrav.sk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgISA/eIwnbqcWVUdXmg1tSiDtFQMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAzMjMyMjAyMThaFw0x ODA2MjEyMjAyMThaMBYxFDASBgNVBAMTC3VuaXpkcmF2LnNrMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEA0ydrhLdlMmPt6BTXqhuoQkMQx8oOdw1EqrcB LS7ozFDAIXDKXQLRSgySUyCmkZYlUd+b6TcKEXdukZiZLeP8NoXfCHvBHWBYPNxX Dm5stMYcvwzSSnvSZ1T6y4O8IND8fowkfR1WVkgOXNPAlmX76o+Bm5uLoKOASaXJ UnlCtFk0QPJfM2dg5XluTW3YEpTE75YTMUATOjOAtLBeNFr6Db+ydBW6ao9sABsZ 0kSaQbMs9eBCO30E1F5pNvbKKIHbfiQvg1sKg4hzfaSXrQi1AlvxczUcKDSICi3n 1dWtSrxO8apahwwbY43MRy0xEFrp89pV24FJtZD0dFryxQw+amC/BO/ceSdp85O4 Bui4ASmJ4HbZdqvNASTCrmFIs2m8kocMKtnXymaBjHtMYIoy2Tus5S614X7sZW4Q hwge3mUylCvK1UYEQfRg9iHmRBLKZLhsen0ihoz/a9HbllfozRXY81+P80vYURmF MS9/wsllJyT8qETgZqx9elk7k4FA0u0jI8F1Fdh+G2Lw1QofiY/19hTBiEakG+X9 JAF67C9659FZuSb1yVSSMWE5nyKArniVrusihWlJwUFDJOhuqLIK4h6zSVB2pRL+ x85oIJS2rDCwvI9cXSLDuC9xjIIqdJDJ49xsZ8Ct5dvuBrpeN7h20x6bm9kxjqqg B0V45VMCAwEAAaOCAqswggKnMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUSTKi+t39 29BXhgQKrLPcEvrmkSwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzCBtQYDVR0RBIGtMIGqghZhdXRvY29uZmlnLnVuaXpk cmF2LnNrghFjbG91ZC51bml6ZHJhdi5za4IVZW1haWwtb2xkLnVuaXpkcmF2LnNr ghFlbWFpbC51bml6ZHJhdi5za4IRbXlzcWwudW5pemRyYXYuc2uCEXByb3h5LnVu aXpkcmF2LnNrggt1bml6ZHJhdi5za4IPd3d3LnVuaXpkcmF2LnNrgg94bWwudW5p emRyYXYuc2swgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEB MIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYI KwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGll ZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNl IHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xl dHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAkcrr 3ftZDi5EzQVLElv4WjT42MQ0yvpbGMVpVCzmhQC3/gEWiGaQxv4TqFPp9NWXD2a2 TKTDkYbfWFKdgvqG0AZK+bKc+uunZE8uJLftLXgnYKgvSOEmVa6Q/YvxsyK3Rtk7 o6W9bXbrOLyRmRoheD5NMeAqGQL3wZIN9bPXL7DLgnpedLYhfuzG9EEq+whgp8ap 4xkm2w8JUVoDb42+cgo4vDYs5zY4fYfP8BvN2Cn0w2HKDNzPGF37wqabYXuTW1ky pPcUD4bQ4JISqwaQ88qBd69O+QJ3JMGqBALbNFDRwtzYpsmikwWAJyzF2wbZ8Vuw 9lvmsYIoHlQgBVPJVg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0ydrhLdlMmPt6BTXqhuo QkMQx8oOdw1EqrcBLS7ozFDAIXDKXQLRSgySUyCmkZYlUd+b6TcKEXdukZiZLeP8 NoXfCHvBHWBYPNxXDm5stMYcvwzSSnvSZ1T6y4O8IND8fowkfR1WVkgOXNPAlmX7 6o+Bm5uLoKOASaXJUnlCtFk0QPJfM2dg5XluTW3YEpTE75YTMUATOjOAtLBeNFr6 Db+ydBW6ao9sABsZ0kSaQbMs9eBCO30E1F5pNvbKKIHbfiQvg1sKg4hzfaSXrQi1 AlvxczUcKDSICi3n1dWtSrxO8apahwwbY43MRy0xEFrp89pV24FJtZD0dFryxQw+ amC/BO/ceSdp85O4Bui4ASmJ4HbZdqvNASTCrmFIs2m8kocMKtnXymaBjHtMYIoy 2Tus5S614X7sZW4Qhwge3mUylCvK1UYEQfRg9iHmRBLKZLhsen0ihoz/a9Hbllfo zRXY81+P80vYURmFMS9/wsllJyT8qETgZqx9elk7k4FA0u0jI8F1Fdh+G2Lw1Qof iY/19hTBiEakG+X9JAF67C9659FZuSb1yVSSMWE5nyKArniVrusihWlJwUFDJOhu qLIK4h6zSVB2pRL+x85oIJS2rDCwvI9cXSLDuC9xjIIqdJDJ49xsZ8Ct5dvuBrpe N7h20x6bm9kxjqqgB0V45VMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 345568387149668662296298455171466030666064 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-23 22:02:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-21 22:02:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'unizdrav.sk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861433099696138694076996364243185182039473191363433597801481683159085309563731958411403718018659285587279701595842553330432894907213820683610315047572022653059214551107680468984368230416451713754747553396952289837859672712614363280277689304698462504690541164620211372426740401516546945148535291791873755087190263040985464971549159014690339678533963515247412989965569020678187363868278437965294782551936811087989165728639435963148823657041593433488839979546848601475240156486001360044774042327856511150419733612062857399825406366038674283826455939258265766205118941657908608238475029743894955711828732291099185719932594768066813827094238105691857462296633773916088831098605089161884756017881058857337293553612213854317905393558948877789948305094403935698148183538135557275116612666329203209668830687345547694602890340616818560474716996181926890587500500253715156061073619006051478007787578790682410445116260016653585424162288354994739584642387575468463404405626435558388374131493094451611481130191069593770644192938975219969644950855834850194715573848066518680030310157812048968931267310337180588094295666577821368300548388577177812637389392184465607523512586557669827822460248948148068179369551980153217378792606377124463263968978259 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4932a2faddfddbd05786040aacb3dc12fae6912c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (173 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.unizdrav.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.unizdrav.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email-old.unizdrav.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.unizdrav.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysql.unizdrav.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxy.unizdrav.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unizdrav.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unizdrav.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xml.unizdrav.sk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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