lj002.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:4b:0f:69:da:f1:99:d4:fc:9b:46:a3:01:41:f6:91:9b:11 was issued on by Let's Encrypt.
With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lj002.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4b:0f:69:da:f1:99:d4:fc:9b:46:a3:01:41:f6:91:9b:11Serial Number (int): 286878523366164934048298317678406431513361
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e0:ae:f5:82:f9:49:1d:63:5b:7b:4a:ca:53:d6:12:9b:c0:8c:f7:22
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ba:10:ad:14:dc:97:1e:5f:fb:6c:9b:ea:7f:e9:fa:b3:e5:88:f2:01
Fingerprint (sha256): ed:e2:ac:30:6f:77:a0:cf:29:13:b9:22:2c:1e:17:67:a0:b1:81:20:08:5a:8b:e2:58:f1:4c:04:85:aa:e4:0b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate lj002.net
24
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lj002.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cmbchinanh.com
cmbchinanh.hanfacar.com
cpanel.cmbchinanh.com
cpanel.ks07.com
cpanel.lj002.net
ks07.com
ks07.hanfacar.com
lj002.hanfacar.com
lj002.net
mail.cmbchinanh.com
mail.ks07.com
mail.lj002.net
webdisk.cmbchinanh.com
webdisk.ks07.com
webdisk.lj002.net
webmail.cmbchinanh.com
webmail.ks07.com
webmail.lj002.net
www.cmbchinanh.com
www.cmbchinanh.hanfacar.com
www.ks07.com
www.ks07.hanfacar.com
www.lj002.hanfacar.com
www.lj002.net
cmbchinanh.hanfacar.com
cpanel.cmbchinanh.com
cpanel.ks07.com
cpanel.lj002.net
ks07.com
ks07.hanfacar.com
lj002.hanfacar.com
lj002.net
mail.cmbchinanh.com
mail.ks07.com
mail.lj002.net
webdisk.cmbchinanh.com
webdisk.ks07.com
webdisk.lj002.net
webmail.cmbchinanh.com
webmail.ks07.com
webmail.lj002.net
www.cmbchinanh.com
www.cmbchinanh.hanfacar.com
www.ks07.com
www.ks07.hanfacar.com
www.lj002.hanfacar.com
www.lj002.net
Other certificates including the domain name lj002.net
(limited to 100 certificates)
Certificate
The complete raw certificate details for lj002.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGujCCBaKgAwIBAgISA0sPadrxmdT8m0ajAUH2kZsRMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA5MjUwMjI5MDBaFw0x NzEyMjQwMjI5MDBaMBQxEjAQBgNVBAMTCWxqMDAyLm5ldDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMPGG1kdt/n5slcoOpPd7oqwXBgjdf/BG4ZFoKVo VxzCxl//Lsml004v0KxnIoz7QDsSKePopcIlIoa1qdb6KOm2NrpPJGkx+VmwqYiy ybXulx8mq91OBAvR+mOPdYdJtwy8u/nMdTWaL/7mMl3pFRBcqzlh00eGDsBaXROh s+/46Gyb9FzrNbt24kDnjLgEF7ciCjatnjwKaXzNjMk2bLY+5HDkVwxyd2/8kX5K KCIRmlZP3SlAYprbh5L2sjybKMtYN2H6w2Eot5Ut7dEQYywpY9Ef3KNe3cnyHOpp +/RU68i4E86Cm7wDNtt7mM4pOupdVMfHq1QHezBSfpEB4q8CAwEAAaOCA84wggPK MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU4K71gvlJHWNbe0rKU9YSm8CM9yIwHwYD VR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4G CCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8G CCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCC AdcGA1UdEQSCAc4wggHKgg5jbWJjaGluYW5oLmNvbYIXY21iY2hpbmFuaC5oYW5m YWNhci5jb22CFWNwYW5lbC5jbWJjaGluYW5oLmNvbYIPY3BhbmVsLmtzMDcuY29t ghBjcGFuZWwubGowMDIubmV0gghrczA3LmNvbYIRa3MwNy5oYW5mYWNhci5jb22C EmxqMDAyLmhhbmZhY2FyLmNvbYIJbGowMDIubmV0ghNtYWlsLmNtYmNoaW5hbmgu Y29tgg1tYWlsLmtzMDcuY29tgg5tYWlsLmxqMDAyLm5ldIIWd2ViZGlzay5jbWJj aGluYW5oLmNvbYIQd2ViZGlzay5rczA3LmNvbYIRd2ViZGlzay5sajAwMi5uZXSC FndlYm1haWwuY21iY2hpbmFuaC5jb22CEHdlYm1haWwua3MwNy5jb22CEXdlYm1h aWwubGowMDIubmV0ghJ3d3cuY21iY2hpbmFuaC5jb22CG3d3dy5jbWJjaGluYW5o LmhhbmZhY2FyLmNvbYIMd3d3LmtzMDcuY29tghV3d3cua3MwNy5oYW5mYWNhci5j b22CFnd3dy5sajAwMi5oYW5mYWNhci5jb22CDXd3dy5sajAwMi5uZXQwgf4GA1Ud IASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtU aGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlp bmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRp ZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9y ZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAZZis3eaiAaEUy96DBIvtmTWq RyJLNcuLjMMsT150XOc79hs/yFd+iYOsNWmRXgdqP8N/xjdzySeumS/BL7FEoS6M cjZuKuxLmlfKyRuJ/KG3yrhGIzBO/YhO6N9mKaAPeRFj/0JBx75KwQcBLnZ31VfM yhzvrD3Kd077IcYlzOC2MFlzSMUbpwCZTmEouLonr3mV/iVEUF/FStONFdlKpiNB QFGWlpIp/vlexjny60Ad38TX1XSySt0liYsONkgR08EWxUMoYMTYV9BjIfY6OI3w EfXLuRXg+kwEl4ozr0ve74i/6pOybrZp25RsIIpi90QIJU/XcSpzeDcmBYIYeA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8YbWR23+fmyVyg6k93u irBcGCN1/8EbhkWgpWhXHMLGX/8uyaXTTi/QrGcijPtAOxIp4+ilwiUihrWp1voo 6bY2uk8kaTH5WbCpiLLJte6XHyar3U4EC9H6Y491h0m3DLy7+cx1NZov/uYyXekV EFyrOWHTR4YOwFpdE6Gz7/jobJv0XOs1u3biQOeMuAQXtyIKNq2ePAppfM2MyTZs tj7kcORXDHJ3b/yRfkooIhGaVk/dKUBimtuHkvayPJsoy1g3YfrDYSi3lS3t0RBj LClj0R/co17dyfIc6mn79FTryLgTzoKbvAM223uYzik66l1Ux8erVAd7MFJ+kQHi rwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 286878523366164934048298317678406431513361 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-25 02:29:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-24 02:29:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lj002.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24714159586501773609023074291025576437286992285310094979406519142250756998179835470988853606104360475551711515190205039194141445212210942420900670799604956058820436275321396470968229882803896599555518339581951185119963207163403420858208388858538737808408059279794545506154736553805833564996399382852254391933268374104195780377334381845679510490262790188857092906994189519652249359140270175560561013829049392291094533846410420516244580693447692069479327537948732198984209035299410856909912978219803583922705715081625903399838707095587192366920134124081647387909027237827733210426509000047860056977581863796352321970863 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e0aef582f9491d635b7b4aca53d6129bc08cf722 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (462 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmbchinanh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmbchinanh.hanfacar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.cmbchinanh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ks07.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.lj002.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ks07.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ks07.hanfacar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lj002.hanfacar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lj002.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cmbchinanh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ks07.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lj002.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.cmbchinanh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ks07.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.lj002.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.cmbchinanh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ks07.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lj002.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmbchinanh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmbchinanh.hanfacar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ks07.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ks07.hanfacar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lj002.hanfacar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lj002.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 006598acdde6a201a114cbde83048bed9935aa47224b35cb8b8cc32c4f5e745ce73bf61b3fc8577e8983ac3569915e076a3fc37fc63773c927ae992fc12fb144a12e8c72366e2aec4b9a57cac91b89fca1b7cab84623304efd884ee8df6629a00f791163ff4241c7be4ac107012e7677d557ccca1cefac3dca774efb21c625cce0b630597348c51ba700994e6128b8ba27af7995fe2544505fc54ad38d15d94aa62341405196969229fef95ec639f2eb401ddfc4d7d574b24add25898b0e364811d3c116c5432860c4d857d06321f63a388df011f5cbb915e0fa4c04978a33af4bdeef88bfea93b26eb669db946c208a62f74408254fd7712a7378372605821878