kampucheakrom.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:4a:c9:03:d0:d8:53:c6:7f:cd:c9:39:1c:bc:9c:2d:4d:81 was issued on by Let's Encrypt.
With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kampucheakrom.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4a:c9:03:d0:d8:53:c6:7f:cd:c9:39:1c:bc:9c:2d:4d:81Serial Number (int): 286784947587353937820390596218295776267649
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 8f:a2:ce:6f:2d:58:a2:b1:d3:cb:0d:bd:71:7d:1f:72:3e:49:29:f2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 52:ec:b3:8b:c4:ef:7c:f6:f6:bd:71:11:68:25:4d:ff:94:d6:de:7c
Fingerprint (sha256): fb:50:7b:dc:b0:5e:b8:3d:f1:bb:10:cd:af:c0:cf:8e:68:f8:17:88:89:73:f9:b4:91:51:b5:3f:84:4f:68:d1
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate kampucheakrom.ca
21
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kampucheakrom.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.cancambodia.info
autodiscover.kampucheakrom.ca
autodiscover.keeninvestment.info
cancambodia.ghosananda.org
cancambodia.info
kampucheakrom.ca
kampucheakrom.ghosananda.org
keeninvestment.ghosananda.org
keeninvestment.info
mail.cancambodia.info
mail.kampucheakrom.ca
mail.keeninvestment.info
webdisk.cancambodia.info
webdisk.kampucheakrom.ca
webdisk.keeninvestment.info
www.cancambodia.ghosananda.org
www.cancambodia.info
www.kampucheakrom.ca
www.kampucheakrom.ghosananda.org
www.keeninvestment.ghosananda.org
www.keeninvestment.info
autodiscover.kampucheakrom.ca
autodiscover.keeninvestment.info
cancambodia.ghosananda.org
cancambodia.info
kampucheakrom.ca
kampucheakrom.ghosananda.org
keeninvestment.ghosananda.org
keeninvestment.info
mail.cancambodia.info
mail.kampucheakrom.ca
mail.keeninvestment.info
webdisk.cancambodia.info
webdisk.kampucheakrom.ca
webdisk.keeninvestment.info
www.cancambodia.ghosananda.org
www.cancambodia.info
www.kampucheakrom.ca
www.kampucheakrom.ghosananda.org
www.keeninvestment.ghosananda.org
www.keeninvestment.info
Other certificates including the domain name kampucheakrom.ca
(limited to 100 certificates)
kampucheakrom.ca
vimuttimagga.info
cambodianinterpreter.org
cambodiavipassanacenter.ghosananda.org
vimuttimagga.info
kampucheakrom.ca
kampucheakrom.vimuttimagga.info
cambodiabuddhism.info
cambodianview.com
kampucheakrom.ca
kampucheakrom.ca
kampucheakrom.ca
kampucheakrom.ca
kampucheakrom.ca
kampucheakrom.ca
kampucheakrom.ca
kampucheakrom.ca
kampucheakrom.ca
vimuttimagga.info
cambodianinterpreter.org
cambodiavipassanacenter.ghosananda.org
vimuttimagga.info
kampucheakrom.ca
kampucheakrom.vimuttimagga.info
cambodiabuddhism.info
cambodianview.com
kampucheakrom.ca
kampucheakrom.ca
kampucheakrom.ca
kampucheakrom.ca
kampucheakrom.ca
kampucheakrom.ca
kampucheakrom.ca
kampucheakrom.ca
kampucheakrom.ca
Certificate
The complete raw certificate details for kampucheakrom.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHLDCCBhSgAwIBAgISA0rJA9DYU8Z/zck5HLycLU2BMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA2MTAwNTE2MDBaFw0x NzA5MDgwNTE2MDBaMBsxGTAXBgNVBAMTEGthbXB1Y2hlYWtyb20uY2EwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDT2waTdalc7vEcIt507rYFbAzxFC h2hLhXF55HOA/sLU8iCwKaWz/t0AdNG1HZvxdd5agvtHFVtA6JjdtUyQjlmchNKQ 16tlAjOURVKJspY+OswWG6WPuC68cCpqM2AKyb4EAsNBxdmfbJkcjrGw1kTjfthx 8Svol4hE+32hcOltE21RJgJUaP3Qi3iw1eXlDn0TojLI2ZtyLZIuXsmXyATXgiya hFNboBj+NR3e1dcq45cndTVRbFqVe3GjbBE49newWiVBOYcg41Axl6tJaSgSzmJw dndBHxL8Pds96CCk194s6kJeiNSnGtjLNUDD5Fp56D/q8lj8z5Vesmz3AgMBAAGj ggQ5MIIENTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFI+izm8tWKKx08sNvXF9H3I+ SSnyMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wggJCBgNVHREEggI5MIICNYIdYXV0b2Rpc2NvdmVyLmNhbmNhbWJvZGlh LmluZm+CHWF1dG9kaXNjb3Zlci5rYW1wdWNoZWFrcm9tLmNhgiBhdXRvZGlzY292 ZXIua2VlbmludmVzdG1lbnQuaW5mb4IaY2FuY2FtYm9kaWEuZ2hvc2FuYW5kYS5v cmeCEGNhbmNhbWJvZGlhLmluZm+CEGthbXB1Y2hlYWtyb20uY2GCHGthbXB1Y2hl YWtyb20uZ2hvc2FuYW5kYS5vcmeCHWtlZW5pbnZlc3RtZW50Lmdob3NhbmFuZGEu b3JnghNrZWVuaW52ZXN0bWVudC5pbmZvghVtYWlsLmNhbmNhbWJvZGlhLmluZm+C FW1haWwua2FtcHVjaGVha3JvbS5jYYIYbWFpbC5rZWVuaW52ZXN0bWVudC5pbmZv ghh3ZWJkaXNrLmNhbmNhbWJvZGlhLmluZm+CGHdlYmRpc2sua2FtcHVjaGVha3Jv bS5jYYIbd2ViZGlzay5rZWVuaW52ZXN0bWVudC5pbmZvgh53d3cuY2FuY2FtYm9k aWEuZ2hvc2FuYW5kYS5vcmeCFHd3dy5jYW5jYW1ib2RpYS5pbmZvghR3d3cua2Ft cHVjaGVha3JvbS5jYYIgd3d3LmthbXB1Y2hlYWtyb20uZ2hvc2FuYW5kYS5vcmeC IXd3dy5rZWVuaW52ZXN0bWVudC5naG9zYW5hbmRhLm9yZ4IXd3d3LmtlZW5pbnZl c3RtZW50LmluZm8wgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8T AQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCB qwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJl bGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRh bmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczov L2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEA B9TUyLHqFxcG0XJj5UjgAgmhldeU2pd4wQEHkPteHwMh4LwqBxjaa8GjLvE5+1Py 7DD8sMVuvO6E1f8wBtJMBYHh2dlUZ6PX5BpxVC7eN3goJ57KW9GfXJruKjUtQ+b4 ANDscDS7w/q6AaeXCp0KePq0UEE4UO0gzeGYH7IhjDm5GcPWMfRg3oWFEXXEEGg5 d4po0rFlYKhnsS+pQdm0DNmv9jYCn8uzwabQcxxgeH5K5VA3qfjHXiqcNG0G7SQX 9FPOXTbI4cR9pIljOjxJjFCwhMZT+Cb4josqwzu+pp/B2fz02dxvCKtk8xAsqgIa Pia4Uof0lg57VACcc5qoXg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw09sGk3WpXO7xHCLedO 62BWwM8RQodoS4VxeeRzgP7C1PIgsCmls/7dAHTRtR2b8XXeWoL7RxVbQOiY3bVM kI5ZnITSkNerZQIzlEVSibKWPjrMFhulj7guvHAqajNgCsm+BALDQcXZn2yZHI6x sNZE437YcfEr6JeIRPt9oXDpbRNtUSYCVGj90It4sNXl5Q59E6IyyNmbci2SLl7J l8gE14IsmoRTW6AY/jUd3tXXKuOXJ3U1UWxalXtxo2wROPZ3sFolQTmHIONQMZer SWkoEs5icHZ3QR8S/D3bPeggpNfeLOpCXojUpxrYyzVAw+Raeeg/6vJY/M+VXrJs 9wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 286784947587353937820390596218295776267649 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-10 05:16:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-08 05:16:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kampucheakrom.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22603185956097294988005715772795016689544195938301619525476729712851530301927676339387289639526402030928555489591038281913230439304291472254470757128028061243100863147965605294287301746193289431138953931844502008500227469518626674592310841897008303915169081096145868150980764673698352655769802194435724176538592086286957247489656850485822683955649818671442758547232855877894753239719741971990067474278406422185855854169739440752591461289544474762139433722908065320213912209243603195848198470229962070131895497599637906839571031558500373597583054638378278602477355602449386124175062062960759497984848922124967719628023 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8fa2ce6f2d58a2b1d3cb0dbd717d1f723e4929f2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (569 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cancambodia.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kampucheakrom.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.keeninvestment.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancambodia.ghosananda.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancambodia.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kampucheakrom.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kampucheakrom.ghosananda.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keeninvestment.ghosananda.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keeninvestment.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cancambodia.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kampucheakrom.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.keeninvestment.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.cancambodia.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.kampucheakrom.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.keeninvestment.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cancambodia.ghosananda.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cancambodia.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kampucheakrom.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kampucheakrom.ghosananda.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keeninvestment.ghosananda.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keeninvestment.info' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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