www.wearemhabitat.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:80:d3:9b:72:c9:75:74:9c:50:a1:ee:8d:e0:28:65:0a:b5 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.wearemhabitat.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:80:d3:9b:72:c9:75:74:9c:50:a1:ee:8d:e0:28:65:0a:b5Serial Number (int): 305174275002440459612027085905068416109237
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 67:2b:76:b4:7b:e0:f6:51:c6:5b:d6:2b:80:23:53:1a:c0:e7:69:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f8:64:ea:45:14:85:36:22:1b:66:86:84:d7:0c:51:3f:0a:c4:a8:e2
Fingerprint (sha256): fa:71:9d:05:1a:1f:6c:51:36:67:7e:2c:15:2e:a6:6d:92:22:23:9c:bf:61:8e:fa:a4:7f:f0:a7:4b:ed:08:e6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.wearemhabitat.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.wearemhabitat.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wearemhabitat.com
www.wearemhabitat.com
www.wearemhabitat.com
Other certificates including the domain name wearemhabitat.com
(limited to 100 certificates)
www.wearemhabitat.com
www.wearemhabitat.com
events.claever.academy
www.wearemhabitat.com
connect.guildhall.ro
connect.network-consulting.eu
events.nectere.co.uk
events.nectere.co.uk
events.claever.academy
www.wearemhabitat.com
connect.feelserv.net
connect.network-consulting.eu
connect.rgjb.nl
events.wearemhabitat.com
www.wearemhabitat.com
connect.network-consulting.eu
connect.wearemhabitat.com
www.wearemhabitat.com
www.wearemhabitat.com
events.bitsnbites.net
www.wearemhabitat.com
www.wearemhabitat.com
events.claever.academy
www.wearemhabitat.com
events.claever.academy
connect.network-consulting.eu
connect.fdit.co.uk
www.wearemhabitat.com
connect.network-consulting.eu
events.hardingsurveyors.co.uk
events.greymatterlearning.co.uk
events.nectere.co.uk
events.socialyachting.club
events.mobile-xl.nl
events.lecaravan.com
connect.zep18.com
connect.network-consulting.eu
www.wearemhabitat.com
events.nectere.co.uk
connect.bitsnbites.net
networking.ikourox.ventures
www.wearemhabitat.com
events.claever.academy
events.claever.academy
www.wearemhabitat.com
www.wearemhabitat.com
www.wearemhabitat.com
connect.brightsentinel.com
www.wearemhabitat.com
event.parteam.fr
events.claever.academy
events.claever.academy
community.quanta.com
connect.network-consulting.eu
connect.network-consulting.eu
www.wearemhabitat.com
connect.network-consulting.eu
partenaires.numsquare.fr
events.claever.academy
connect.network-consulting.eu
www.wearemhabitat.com
www.wearemhabitat.com
connect.twin-gmbh.de
www.wearemhabitat.com
www.wearemhabitat.com
www.wearemhabitat.com
www.wearemhabitat.com
www.wearemhabitat.com
www.wearemhabitat.com
www.wearemhabitat.com
connect.spektrum.consulting
www.wearemhabitat.com
events.claever.academy
www.wearemhabitat.com
connect.guildhall.ro
connect.network-consulting.eu
events.nectere.co.uk
events.nectere.co.uk
events.claever.academy
www.wearemhabitat.com
connect.feelserv.net
connect.network-consulting.eu
connect.rgjb.nl
events.wearemhabitat.com
www.wearemhabitat.com
connect.network-consulting.eu
connect.wearemhabitat.com
www.wearemhabitat.com
www.wearemhabitat.com
events.bitsnbites.net
www.wearemhabitat.com
www.wearemhabitat.com
events.claever.academy
www.wearemhabitat.com
events.claever.academy
connect.network-consulting.eu
connect.fdit.co.uk
www.wearemhabitat.com
connect.network-consulting.eu
events.hardingsurveyors.co.uk
events.greymatterlearning.co.uk
events.nectere.co.uk
events.socialyachting.club
events.mobile-xl.nl
events.lecaravan.com
connect.zep18.com
connect.network-consulting.eu
www.wearemhabitat.com
events.nectere.co.uk
connect.bitsnbites.net
networking.ikourox.ventures
www.wearemhabitat.com
events.claever.academy
events.claever.academy
www.wearemhabitat.com
www.wearemhabitat.com
www.wearemhabitat.com
connect.brightsentinel.com
www.wearemhabitat.com
event.parteam.fr
events.claever.academy
events.claever.academy
community.quanta.com
connect.network-consulting.eu
connect.network-consulting.eu
www.wearemhabitat.com
connect.network-consulting.eu
partenaires.numsquare.fr
events.claever.academy
connect.network-consulting.eu
www.wearemhabitat.com
www.wearemhabitat.com
connect.twin-gmbh.de
www.wearemhabitat.com
www.wearemhabitat.com
www.wearemhabitat.com
www.wearemhabitat.com
www.wearemhabitat.com
www.wearemhabitat.com
www.wearemhabitat.com
connect.spektrum.consulting
Certificate
The complete raw certificate details for www.wearemhabitat.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGKDCCBRCgAwIBAgISA4DTm3LJdXScUKHujeAoZQq1MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MjgwNjIyMjRaFw0x ODEwMjYwNjIyMjRaMCAxHjAcBgNVBAMTFXd3dy53ZWFyZW1oYWJpdGF0LmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALk6B2unYS6uZQLQ0VaUgijp 3bqu2IW3f1vminaG4qvb6mqExTjpN+4FWvITYwMn8AUT1HP7fGdm8C4Ew0Z/GPH4 XeGZK3317VUuiWjwa3jRmCvTp3I+YjXYTAOvoIuvEyhuzhFxwMUX9EO3fWhB27E/ rgo6tGisZeyt81d/enlRF/eqVUORDB09iVC50bRFt3dVD1Z5uUTEQnygfrtsvYEV NrLBJeeEK4w1LrGcRqW5ddRvLjzdeaLyJBmbTY3kFwN/YbNJY6j0GRVboizj9opA jMHuvRRFfwHTNR2i5M1OD23dLy4xnw3N/Q+x/5Z9axK/OA9YA4G5ASbeERD+JQUC AwEAAaOCAzAwggMsMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUZyt2tHvg9lHGW9Yr gCNTGsDnaSYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzAzBgNVHREELDAqghF3ZWFyZW1oYWJpdGF0LmNvbYIVd3d3Lndl YXJlbWhhYml0YXQuY29tMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEE AYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBi ZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNj b3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0 cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdwBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWTf xFnwAAAEAwBIMEYCIQCZeSMU7EwqUS9JlNCxyVqnshIq4nbxHaE/T9ofD3L7wgIh AMeIf7Q650awlq3tz1MgVZu4RPM/rGzqxsQujqI0lfdlAHUApFASaQVaFVReYhGr N7wQP2KuVXakXksXFEU+GyIQaiUAAAFk38RZpwAABAMARjBEAiA8+e9Fp8spDnNw FCgdas4KP9w9IrW+8BXSlv+4z5NdLgIgQXr1uRhT3RvFcl1MZCMMthxpco3QUHVA TUju0lZyC6IwDQYJKoZIhvcNAQELBQADggEBAGbTgzHrkOKKm5fCE6C4ihaAQXbI lTSI17impp7ZGUomvfzn51CW8rKk/B4V2F9VQnkDupWJ9m7u48+3FDjLiVpPC/kV MSHCOyEW5g9DObCl50wN+a8K0oU3v8462TNJbMAp+x1l9zoGssMDd/IlONmzyAvS oBqN21bedFqEeviCm82TtRYk9hbQHtr8v83eAkC90qistflABLCuA4ab3n+pRBFU Iu7iZPnwx15semJN+cs05zuNlINl3gixvQlYgRsBNibRdN1i1DqNHyJZYB0yHWiC 62GGUdc3RFGw6rDRz4/VG83XpnM5P6G8Obpwzztnin4ObYCyP9COa7Hmkuc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuToHa6dhLq5lAtDRVpSC KOnduq7Yhbd/W+aKdobiq9vqaoTFOOk37gVa8hNjAyfwBRPUc/t8Z2bwLgTDRn8Y 8fhd4ZkrffXtVS6JaPBreNGYK9Oncj5iNdhMA6+gi68TKG7OEXHAxRf0Q7d9aEHb sT+uCjq0aKxl7K3zV396eVEX96pVQ5EMHT2JULnRtEW3d1UPVnm5RMRCfKB+u2y9 gRU2ssEl54QrjDUusZxGpbl11G8uPN15ovIkGZtNjeQXA39hs0ljqPQZFVuiLOP2 ikCMwe69FEV/AdM1HaLkzU4Pbd0vLjGfDc39D7H/ln1rEr84D1gDgbkBJt4REP4l BQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 305174275002440459612027085905068416109237 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-28 06:22:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-26 06:22:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.wearemhabitat.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23382701578424691247666429080757736777375580396117554796880434985238957163134933761512709476921229544306713381474693588333499197788005169795435634080802737944514685527363063699962781702592270401690371415920729562999094612005769404014230914268201615876633284368319589616486397228132169998052944842883441873528284366327242172621147922763360030672575306907714673697650130244386836599446484648616071663176547327208371890502385271583083739090062350020172524254581041469910089144150190411723574218950905293781444545017563856444423039406678003258707205409484297150299056770488135321711849704834729043615641102140583995909381 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 672b76b47be0f651c65bd62b8023531ac0e76926 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearemhabitat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearemhabitat.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000164dfc459f0000004030048304602210099792314ec4c2a512f4994d0b1c95aa7b2122ae276f11da13f4fda1f0f72fbc2022100c7887fb43ae746b096adedcf5320559bb844f33fac6ceac6c42e8ea23495f765007500a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000164dfc459a7000004030046304402203cf9ef45a7cb290e737014281d6ace0a3fdc3d22b5bef015d296ffb8cf935d2e0220417af5b91853dd1bc5725d4c64230cb61c69728dd05075404d48eed256720ba2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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