www.chute-saint-philippe.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:d1:cc:4e:f1:e9:94:f9:de:93:2e:2b:ab:8c:f7:c7:15:3e was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.chute-saint-philippe.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:d1:cc:4e:f1:e9:94:f9:de:93:2e:2b:ab:8c:f7:c7:15:3eSerial Number (int): 419839730830379196205907456443068369540414
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e2:7e:93:ec:af:f5:54:2d:f7:04:84:22:27:58:f5:0a:a4:4f:51:a6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 4b:c1:92:2a:7e:1f:af:2d:77:76:e0:7c:29:73:e2:28:30:20:d0:50
Fingerprint (sha256): ef:c1:ed:48:26:98:9a:5c:a0:fa:38:83:88:a5:d8:22:10:24:e9:af:ba:b9:fb:6e:3f:06:40:19:4b:2c:3a:39
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.chute-saint-philippe.ca
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.chute-saint-philippe.ca
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
munchute.aegir3.koumbit.net
www-chute-saint-philippe-ca.aegir3.koumbit.net
www.chute-saint-philippe.ca
www-chute-saint-philippe-ca.aegir3.koumbit.net
www.chute-saint-philippe.ca
Other certificates including the domain name chute-saint-philippe.ca
(limited to 100 certificates)
www.chute-saint-philippe.ca
*.chute-saint-philippe.ca
www.chute-saint-philippe.ca
chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
webmail.chute-saint-philippe.ca
www.chute-saint-philippe.ca
webmail.chute-saint-philippe.ca
chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
webmail.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
webmail.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
*.chute-saint-philippe.ca
www.chute-saint-philippe.ca
chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
webmail.chute-saint-philippe.ca
www.chute-saint-philippe.ca
webmail.chute-saint-philippe.ca
chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
webmail.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
webmail.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
www.chute-saint-philippe.ca
Certificate
The complete raw certificate details for www.chute-saint-philippe.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZjCCBU6gAwIBAgISBNHMTvHplPneky4rq4z3xxU+MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEwMTQxNTU4NDVaFw0x ODAxMTIxNTU4NDVaMCYxJDAiBgNVBAMTG3d3dy5jaHV0ZS1zYWludC1waGlsaXBw ZS5jYTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJ7H2VDmN9G81FIJ dz25brgnVshxTqjG77JX1Xlnkhg2DrqpWCU5yZcqU3ENAnj7/kkP1Dex2hl4IDrs DQL/jU4frtsJRKUY5r8hIJcMOnI7IHPB0nbA+0qSgoQO3w6l9qMIehsR2ISfKDM/ Tg2YAAND9o8pVXXDpMOi4zvJNqJarP3Fk3ynqGg+tb/CM8O6Vv6V3nTMnMBXADLR q3+mC2UbwJTmbYd9O1Pq4Fe8AJ/6hMy6JMuVHNj5jqyFbUiiGoorG1mTk3W0sc83 V0b9faLN794wwAGlV/4OyuGlUjxINR7FXUT29iZpdQTNyXqLwU1q5ymFMmuhaTrf tpr0nqWjjpUtjrM24npPYbBY3jYIs1AerbmopDjMCOI+B4lVp14QlTiQLp24BpV7 3lZBveID5AaOlPafE6ZJI5MQLzrUo339mobm76Xf+3HIu8LffU6c29X6aHGF+JdA utd4j5HPXaKMOA4q1iP8SrxthMsq1nOwQH6A6nBC7TQt40dvkSmIbJaj5FtO39BQ uaewYmboJCkFoJXCUbtkbXc8pxg+o4syftynvIc1sn3ujPNX4VI2+ojnWlr3pqvK zj0AIiNgvz0cDWEB8IlC3WSp4t7krVhnxMq5VoAscC6CYvwDKUH9Jk2A1QS3tYO4 yIvLGain6uhpAMGti4cg+sUGclkjAgMBAAGjggJoMIICZDAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFOJ+k+yv9VQt9wSEIidY9QqkT1GmMB8GA1UdIwQYMBaAFKhKamME fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0 cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0 cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wcwYDVR0RBGwwaoIbbXVu Y2h1dGUuYWVnaXIzLmtvdW1iaXQubmV0gi53d3ctY2h1dGUtc2FpbnQtcGhpbGlw cGUtY2EuYWVnaXIzLmtvdW1iaXQubmV0ght3d3cuY2h1dGUtc2FpbnQtcGhpbGlw cGUuY2Ewgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHW MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYB BQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1 cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdp dGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNl bmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAIf5piW7d jborICpIXGFXHMy/ZJle9AhNRTdUcM8J068ZLGWkfyFOODbA9XjPLDhbQlcYEUSb h4vxFOW+g2VqM0J5/KCF140X5CA0pjV/hfUp2N9zJt8JShWqVV65mCBDgz6tsVRj 9NHQBb3je71cN5ukyrSOXmCNDIimVVReXO52SO5vaxYbHhYqw4seSV3bSF8tAO6Z GU4UUGCrajQRNiUiktjpXLgbwGR8GXav1rO6utyeHvVn/3JQ0q0GyPQov8T4o42u lksVN1QzArSxZsClX+NAFGNgBTgkv3UxFiP69/0mKPf9mwUzJhB2CHWdM/cib1FA HvAbXLdGOTxsYA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnsfZUOY30bzUUgl3Pblu uCdWyHFOqMbvslfVeWeSGDYOuqlYJTnJlypTcQ0CePv+SQ/UN7HaGXggOuwNAv+N Th+u2wlEpRjmvyEglww6cjsgc8HSdsD7SpKChA7fDqX2owh6GxHYhJ8oMz9ODZgA A0P2jylVdcOkw6LjO8k2olqs/cWTfKeoaD61v8Izw7pW/pXedMycwFcAMtGrf6YL ZRvAlOZth307U+rgV7wAn/qEzLoky5Uc2PmOrIVtSKIaiisbWZOTdbSxzzdXRv19 os3v3jDAAaVX/g7K4aVSPEg1HsVdRPb2Jml1BM3JeovBTWrnKYUya6FpOt+2mvSe paOOlS2Oszbiek9hsFjeNgizUB6tuaikOMwI4j4HiVWnXhCVOJAunbgGlXveVkG9 4gPkBo6U9p8TpkkjkxAvOtSjff2ahubvpd/7cci7wt99Tpzb1fpocYX4l0C613iP kc9doow4DirWI/xKvG2EyyrWc7BAfoDqcELtNC3jR2+RKYhslqPkW07f0FC5p7Bi ZugkKQWglcJRu2RtdzynGD6jizJ+3Ke8hzWyfe6M81fhUjb6iOdaWvemq8rOPQAi I2C/PRwNYQHwiULdZKni3uStWGfEyrlWgCxwLoJi/AMpQf0mTYDVBLe1g7jIi8sZ qKfq6GkAwa2LhyD6xQZyWSMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 419839730830379196205907456443068369540414 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-14 15:58:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-12 15:58:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.chute-saint-philippe.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 647768576580552877911021084328509205490367256579172923548971841363790976193377420635111264883752122164585514591736820738767937359579224166473994679061644421914215431867946728091116300889249459490711303301397919400243985298975099143031312290830464660109885723225653033475904921190474398279044205446123495821755184757601240810883424501640430870659466718109615496450417619886834992647494931377748382647518216575025418497080970979066753604509493926185097488006521226221858527595730461608937458443704028598396431765839277685214709781343242011502159599608427949709991413432910869261605941951093638985973805334559319545085866353211941959344686040873880103128250319004754939644562876382197296923304477374473153301035801997708058047969131772850647059322910884757750053039738966741883011324555010260063574013621132181578434700521108088757413262601866506322324824198110440383469368696688799416205777303568652314051531170470516994528142536007165288336913313270270231191716381771573073323672983715179390033492295745361924851195795105197585729998664747344199948569012857141877283921000082653495626747333322582176360005767862747865692359342346117513355796638102132073716520768262529579977426621560274802050242500545360314957751719549465260964600099 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e27e93ecaff5542df70484222758f50aa44f51a6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'munchute.aegir3.koumbit.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-chute-saint-philippe-ca.aegir3.koumbit.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chute-saint-philippe.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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