provenir.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a3:20:b2:1c:84:64:5c:fe:20:2d:86:6e:2c:e5:89:bc:05 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=provenir.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a3:20:b2:1c:84:64:5c:fe:20:2d:86:6e:2c:e5:89:bc:05Serial Number (int): 316846343706496293268014426148645450136581
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ea:ba:0d:3f:c2:1b:64:7e:04:ae:1d:94:4b:70:c1:ca:a8:39:9c:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 17:22:f2:54:91:7e:d8:e2:66:cb:c1:9c:fa:d8:61:87:eb:b4:ee:94
Fingerprint (sha256): fa:61:e7:56:59:9f:94:72:6e:71:d1:53:2d:22:1c:0d:12:52:3a:e3:49:96:e0:06:e0:41:a4:69:34:d4:44:96
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate provenir.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for provenir.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
provenir.com
www.provenir.com
www.provenir.com
Other certificates including the domain name provenir.com
(limited to 100 certificates)
sni.cloudflaressl.com
prod1.uk.provenir.com
ldiplusstatus.uds.lenovo.com
helpdesk.trolley.com.kw
blog.provenir.com
blog.provenir.com
wiki.provenir.com
provenir.com
helpdesk.stjosephsvilla.net
blog.provenir.com
ldiplusstatus.uds.lenovo.com
itsupport.provenir.com
provenir.com
blog.provenir.com
info.provenir.com
wiki.provenir.com
helpdesk.trolley.com.kw
www.provenir.com
itsupport.provenir.com
wiki.provenir.com
sni.cloudflaressl.com
glsshelpdesk.glss.net
ldiplusstatus.uds.lenovo.com
sni.cloudflaressl.com
sd.almansoori.biz
provenir.com
*.uk.provenir.com
info.provenir.com
provenir.com
provenir.com
prod1bcp.uk.provenir.com
www.provenir.com
www.provenir.com
provenir.com
ldiplusstatus.uds.lenovo.com
helpdesk.lexingtonmfg.com
www.provenir.com
provenir.com
info.provenir.com
itsupport.provenir.com
provenir.com
provenir.com
facilities.realmanage.com
sni.cloudflaressl.com
blog.provenir.com
provenir.com
info.provenir.com
*.provenir.com
provenir.com
helpdesk.lexingtonmfg.com
provenir.com
mail.provenir.com
sni.cloudflaressl.com
helpdesk.stjosephsvilla.net
ldiplusstatus.uds.lenovo.com
provenir.com
provenir.com
sni.cloudflaressl.com
info.provenir.com
ldiplusstatus.uds.lenovo.com
sd.almansoori.biz
helpdesk.childrensinstitute.org
provenir.com
*.provenir.com
sd.almansoori.biz
helpdesk.childrensinstitute.org
helpdesk.stjosephsvilla.net
provenir.com
blog.provenir.com
www.provenir.com
qa1.uk.provenir.com
blog.provenir.com
info.provenir.com
ariticpinpoint.provenir.com
info.provenir.com
helpdesk.trolley.com.kw
itsupport.provenir.com
helpdesk.trolley.com.kw
ldiplusstatus.uds.lenovo.com
helpdesk.stjosephsvilla.net
blog.provenir.com
provenir.com
helpdesk.childrensinstitute.org
blog.provenir.com
info.provenir.com
*.uk.provenir.com
provenir.com
ldiplusstatus.uds.lenovo.com
ariticpinpoint.provenir.com
sd.almansoori.biz
www.provenir.com
www.provenir.com
provenir.com
provenir.com
helpdesk.childrensinstitute.org
sni.cloudflaressl.com
sni.cloudflaressl.com
prod1.uk.provenir.com
ldiplusstatus.uds.lenovo.com
helpdesk.trolley.com.kw
blog.provenir.com
blog.provenir.com
wiki.provenir.com
provenir.com
helpdesk.stjosephsvilla.net
blog.provenir.com
ldiplusstatus.uds.lenovo.com
itsupport.provenir.com
provenir.com
blog.provenir.com
info.provenir.com
wiki.provenir.com
helpdesk.trolley.com.kw
www.provenir.com
itsupport.provenir.com
wiki.provenir.com
sni.cloudflaressl.com
glsshelpdesk.glss.net
ldiplusstatus.uds.lenovo.com
sni.cloudflaressl.com
sd.almansoori.biz
provenir.com
*.uk.provenir.com
info.provenir.com
provenir.com
provenir.com
prod1bcp.uk.provenir.com
www.provenir.com
www.provenir.com
provenir.com
ldiplusstatus.uds.lenovo.com
helpdesk.lexingtonmfg.com
www.provenir.com
provenir.com
info.provenir.com
itsupport.provenir.com
provenir.com
provenir.com
facilities.realmanage.com
sni.cloudflaressl.com
blog.provenir.com
provenir.com
info.provenir.com
*.provenir.com
provenir.com
helpdesk.lexingtonmfg.com
provenir.com
mail.provenir.com
sni.cloudflaressl.com
helpdesk.stjosephsvilla.net
ldiplusstatus.uds.lenovo.com
provenir.com
provenir.com
sni.cloudflaressl.com
info.provenir.com
ldiplusstatus.uds.lenovo.com
sd.almansoori.biz
helpdesk.childrensinstitute.org
provenir.com
*.provenir.com
sd.almansoori.biz
helpdesk.childrensinstitute.org
helpdesk.stjosephsvilla.net
provenir.com
blog.provenir.com
www.provenir.com
qa1.uk.provenir.com
blog.provenir.com
info.provenir.com
ariticpinpoint.provenir.com
info.provenir.com
helpdesk.trolley.com.kw
itsupport.provenir.com
helpdesk.trolley.com.kw
ldiplusstatus.uds.lenovo.com
helpdesk.stjosephsvilla.net
blog.provenir.com
provenir.com
helpdesk.childrensinstitute.org
blog.provenir.com
info.provenir.com
*.uk.provenir.com
provenir.com
ldiplusstatus.uds.lenovo.com
ariticpinpoint.provenir.com
sd.almansoori.biz
www.provenir.com
www.provenir.com
provenir.com
provenir.com
helpdesk.childrensinstitute.org
sni.cloudflaressl.com
sni.cloudflaressl.com
Certificate
The complete raw certificate details for provenir.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISA6MgshyEZFz+IC2GbizlibwFMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEwMDIxMDAwNDVaFw0x NzEyMzExMDAwNDVaMBcxFTATBgNVBAMTDHByb3ZlbmlyLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAOhBqLg7uMtd80qJBo7hsjGsWo9yxGoHaKOa U27k/cjCL1pbgn5lMKPnWoJeeZPk1mQYEuUoHb6q5Xuzsq5wGDNGugubOh7Bt1RV CZYQshHK29OlwBkIrTPXxkj5nJHE5CfTEaPxkUoxE65YQ2JvD677zIfKFujCv2kW 5RjZnZ9NVe1wfLzhy6ZE/mkyn43j2HXRrT/a4Liz8t6b+N3Y6/erz9xsD01d9Omz LdnxMZKSUY+b57ulWSpBL9admr7prUeeWfPXdod5kNXr+Ld0NUF3Ke5kQEyrl+s1 AP2o7ttmFoXhTP/IMZPFhWNt1OXl6GCjuE49IgLnos3JOEIck7sCAwEAAaOCAh4w ggIaMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU6roNP8IbZH4Erh2US3DByqg5nG4w HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzApBgNVHREEIjAgggxwcm92ZW5pci5jb22CEHd3dy5wcm92ZW5pci5jb20wgf4G A1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUF BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4M gZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJl bHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENl cnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9y Zy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEALSzA340Uj8pbrE2ApCMM CvJK69Ads7jJ+CLCU3st1wOiDUr+L/fwot+MbqRi0v9DR1rgdzrHZEmhJCozwvox dP1PiFoUghtcXAkDKgdKul3C9LJCUU9AjRjbI9OuMXxugIxdnAtkbkuoBOQp7OM5 lE8fCVOpzfYZCC00b9QW4MkZRCNJEK7DBeu1i86V4SreN2WXJEGVIcd881CT0IJq 8IHP0QPFHm9HPM8vT6+Nw+lca18DBS3c1761tPXeTuaYMgAwyZmwKDjAjLVJ2afy gFfYJ9PYs3w8GaRZVljMqfO9MrY0NEW/Yj69AEIowbpr/RIX5HKHYbLibxc3SnTF TQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EGouDu4y13zSokGjuGy Maxaj3LEagdoo5pTbuT9yMIvWluCfmUwo+dagl55k+TWZBgS5Sgdvqrle7OyrnAY M0a6C5s6HsG3VFUJlhCyEcrb06XAGQitM9fGSPmckcTkJ9MRo/GRSjETrlhDYm8P rvvMh8oW6MK/aRblGNmdn01V7XB8vOHLpkT+aTKfjePYddGtP9rguLPy3pv43djr 96vP3GwPTV306bMt2fExkpJRj5vnu6VZKkEv1p2avumtR55Z89d2h3mQ1ev4t3Q1 QXcp7mRATKuX6zUA/aju22YWheFM/8gxk8WFY23U5eXoYKO4Tj0iAueizck4QhyT uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316846343706496293268014426148645450136581 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-02 10:00:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-31 10:00:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'provenir.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29319664441924948038754528324161530713856506398798009497678616556535825667693967099080405255281137782039118717984123455897438021029032446094415955552942077675844131193105650038378873899223211234397264396270940466461858211719295090565209675019290828285727444323178767985930800615706884479363056686902147647337425472144635508482036615561227193751286860232256877865564715916502185917809796023591633317913085816592396635494097983314932580632327102594740951398663332445570918165092737002083554847673727103331467776402107103120552137205138989532204576208504334028896380058030971951782056291456919818364651519821557230506939 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) eaba0d3fc21b647e04ae1d944b70c1caa8399c6e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provenir.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.provenir.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 002d2cc0df8d148fca5bac4d80a4230c0af24aebd01db3b8c9f822c2537b2dd703a20d4afe2ff7f0a2df8c6ea462d2ff43475ae0773ac76449a1242a33c2fa3174fd4f885a14821b5c5c09032a074aba5dc2f4b242514f408d18db23d3ae317c6e808c5d9c0b646e4ba804e429ece339944f1f0953a9cdf619082d346fd416e0c91944234910aec305ebb58bce95e12ade37659724419521c77cf35093d0826af081cfd103c51e6f473ccf2f4faf8dc3e95c6b5f03052ddcd7beb5b4f5de4ee698320030c999b02838c08cb549d9a7f28057d827d3d8b37c3c19a4595658cca9f3bd32b6343445bf623ebd004228c1ba6bfd1217e4728761b2e26f17374a74c54d