srv-fna.student-orgs.purdue.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:65:0b:c8:d8:cf:62:ae:72:ef:02:68:26:26:e0:2e:9b:6e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=srv-fna.student-orgs.purdue.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:65:0b:c8:d8:cf:62:ae:72:ef:02:68:26:26:e0:2e:9b:6e
Serial Number (int): 382833327150812356892451439865639671339886
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 18:6d:ac:ab:2e:58:a9:a8:eb:25:5e:92:c1:6f:f9:af:93:8a:fa:37
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:81:15:2b:a5:58:b7:3f:41:95:6b:76:3e:93:e7:41:8c:34:5b:1d
Fingerprint (sha256): 00:01:09:78:1b:3a:e7:7c:35:95:a2:ba:f2:3a:d8:30:ae:b1:a7:69:9b:dd:e2:61:59:8e:d1:b7:f1:69:01:e8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate srv-fna.student-orgs.purdue.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for srv-fna.student-orgs.purdue.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

srv-fna.student-orgs.purdue.edu

Other certificates including the domain name purdue.edu

(limited to 100 certificates)
dev.boilerpress.itap.purdue.edu
srv-fna.student-orgs.purdue.edu
frodo.lib.purdue.edu
dayofgiving.purdue.edu
icds28.cs.purdue.edu
buddy-boy1.ecn.purdue.edu
dev.www.purdue.edu
wqvwebasp02-05.www.purdue.edu
roger.ecn.purdue.edu
pc.cs.purdue.edu
webvpn.purdue.edu
itap-netedge-asa5555x-01.tcom.purdue.edu
givingisgorges.org
dev2.hort.purdue.edu
dev.wp.www.purdue.edu
freedom.cs.purdue.edu
wdvwebasp03-01.www.purdue.edu
cmsdev.pha.purdue.edu
www.math.purdue.edu
npdn-dev.ceris.purdue.edu
dns-vetting1l.map.fastly.net
amarillo.nserl.purdue.edu
author.www.purdue.edu
npdn-dev.ceris.purdue.edu
www.purdue.edu
bionum.cs.purdue.edu
webdav.bio.purdue.edu
5684961520648192-fe4.pantheonsite.io
wqvwebcfm02a.www.purdue.edu
sp-dev.itap.purdue.edu
one.purdue.edu
wqvwebasp03b.www.purdue.edu
5757715179634688-fe2.pantheonsite.io
dns-vetting1l.map.fastly.net
cluster2.technolutions.net
dev.www.purdue.edu
owl.english.purdue.edu
one.purdue.edu
aribaqa.itap.purdue.edu
blackmesa.cerias.purdue.edu
dayofgiving.purdue.edu
5684961520648192-fe4.pantheonsite.io
www.ag.purdue.edu
wdvwebpec02.www.purdue.edu
www.bio.purdue.edu
cancerresearch.purdue.edu
5767874312404992-fe2.pantheonsite.io
dev.boilerpress.itap.purdue.edu
givingisgorges.org
www.eaps.purdue.edu
wpvwebdls01-01.www.purdue.edu
lacuna.cla.purdue.edu
www.purdue.edu
www-old.pharmacy.purdue.edu
wdvwebinf03.www.purdue.edu
redirect.www.purdue.edu
dev.boilerpress.itap.purdue.edu
napis.ceris.purdue.edu
polytechnic.purdue.edu
wpvpfrmft01.itap.purdue.edu
Collegiatelink4.Campuslabs.com
dns-vetting1l.map.fastly.net
phishing.itap.purdue.edu
5684961520648192-fe4.pantheonsite.io
cancerresearch.purdue.edu
erp-reporting-sbx.itap.purdue.edu
deleuze.cla.purdue.edu
5750683647082496-fe3.pantheonsite.io
incapsula.com
assets.lib.purdue.edu
www-new.foodsci.purdue.edu
www-new.foodsci.purdue.edu
jafcidev.chem.purdue.edu
weldon.ecn.purdue.edu
wpvwebasp03-01.www.purdue.edu
cancerresearch.purdue.edu
saraswat.rcac.purdue.edu
bmew.ecn.purdue.edu
n002.offcampuspartners.com
www.cs.purdue.edu
n002.offcampuspartners.com
dev.wiki.itap.purdue.edu
*.math.purdue.edu
collections.lib.purdue.edu
sharepoint.purdue.edu
incapsula.com
givingisgorges.org
bejih.com
cos-7apollo.boilerad.purdue.edu
dev.wp.www.purdue.edu
exchange.purdue.edu
dat2-100-asa5506-01.tcom.purdue.edu
offcampushousing.fau.edu
givingisgorges.org
givingisgorges.org
dev.sharepoint.purdue.edu
www.itap.purdue.edu
webapps.krannert.purdue.edu
dns-vetting1l.map.fastly.net
wpvwebasp03b.www.purdue.edu

Certificate

The complete raw certificate details for srv-fna.student-orgs.purdue.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgISBGULyNjPYq5y7wJoJibgLptuMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMTMxMDQxMDVaFw0x
OTAxMTExMDQxMDVaMCoxKDAmBgNVBAMTH3Nydi1mbmEuc3R1ZGVudC1vcmdzLnB1
cmR1ZS5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75UZ8osaN
iilZcR/da80TS3j+Go6uwgb1HGwRLj+EkYIco+Q1r0wd73Ys4R2LZfYCK73fQjqK
YYCCrFWm0ATK8+jj9dAxphtMXDoHZMonVwg6gUQ+rt7l8cazDFsnfdS48OAcF0ts
++Bl1nwJRuAVJHV7s+ahZVNrXj4BcAhIgpjbbDhCPuMZLY4Ex839gD0DvAI+K6Ig
k+/Rf3Y5O2nYHvLDKryDRrCzJyR9CUYb51p9M8eBNNhMMQE/SWe9GZQR68yso/xD
4eoyA8lcX9zFkrDe16TPxmchosV0HVPZ6jCTY/WfRQOSPezQaJBi5xDsH22IOnvF
K6wcHdqg2JsJAgMBAAGjggMnMIIDIzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBht
rKsuWKmo6yVeksFv+a+Tivo3MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wKgYDVR0RBCMwIYIfc3J2LWZuYS5zdHVkZW50
LW9yZ3MucHVyZHVlLmVkdTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYB
BAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu
b3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkg
YmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFj
Y29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0
dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMIIBBAYKKwYBBAHWeQIE
AgSB9QSB8gDwAHYAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFm
bTrZkQAABAMARzBFAiA0LFTNm+ciw9U+VQvu0r+xvk8LqWYPAZrP0bnzYpkDFAIh
APoHVNSuP2Z8AlWD+RKAwGgMMl9VDRGKxWeb0OVNmmMRAHYAY/Lbzeg7zCzPC3KE
J1drM6SNYXePvXWmOLHHaFRL2I0AAAFmbTrZMwAABAMARzBFAiAzSdWL87MQEmQk
WRIG7B2k6zB8I0JgkXe7aPqNdSLuwwIhAPdPO46e+CqRV7mDQlfQeAwbPVeCWK7O
MZGdQFL/JwNtMA0GCSqGSIb3DQEBCwUAA4IBAQB9zzX4LnBImK7FmtbhWd0NQouv
QvTJcLR2e+TO/uc3AK/vTbF2noUZz1a6A5kR38t517hVMeiXLybfHA/bnTD62ieq
Weyh8RvkfmMWKpPchF7vAXl6q1gca+YWlZA7ySUfNnFKc/6OIyRNVOt9uCHP5ndF
8ehPOVH57uw0UNLe2jU3ZR/7rJL50IoMuBGWodSKBWmvYiJKhwCfYkLwmT8Wwb+h
XPe5uonGusfLw0ifx/d0yGQZ2Rm0F6ZAhvh6OkmmINtI0mOVVdDhsGaow5Iz3IcE
QORPw+svbrH3AZe7KSJMgDf2qIC66Pk1XtBu22IdkuChdWSSEdl6gBLrY32I
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+VGfKLGjYopWXEf3WvN
E0t4/hqOrsIG9RxsES4/hJGCHKPkNa9MHe92LOEdi2X2Aiu930I6imGAgqxVptAE
yvPo4/XQMaYbTFw6B2TKJ1cIOoFEPq7e5fHGswxbJ33UuPDgHBdLbPvgZdZ8CUbg
FSR1e7PmoWVTa14+AXAISIKY22w4Qj7jGS2OBMfN/YA9A7wCPiuiIJPv0X92OTtp
2B7ywyq8g0awsyckfQlGG+dafTPHgTTYTDEBP0lnvRmUEevMrKP8Q+HqMgPJXF/c
xZKw3tekz8ZnIaLFdB1T2eowk2P1n0UDkj3s0GiQYucQ7B9tiDp7xSusHB3aoNib
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382833327150812356892451439865639671339886
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-13 10:41:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 10:41:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'srv-fna.student-orgs.purdue.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23719622912257428245836911246131421647130398760197084329405760306013894648297075900396858013066375155948357700861174397729361894454235273482947897808078056683193905679660707602089409217202031842479645025007706605156842062987730440921041293542242889059102362986562220258395646066033237858520082589459325679686555678082229943774451240096381817868478433054836900684772613363794334214086000877125252403950283106859446235460336881092688299908729252999821330768110771019519340856966391995070960693251214275572741817089091702977938317518665216249760914852462240633316981007660827885170650427055732487334494472022741652904713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							186dacab2e58a9a8eb255e92c16ff9af938afa37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv-fna.student-orgs.purdue.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001666d3ad99100000403004730450220342c54cd9be722c3d53e550beed2bfb1be4f0ba9660f019acfd1b9f362990314022100fa0754d4ae3f667c025583f91280c0680c325f550d118ac5679bd0e54d9a631100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001666d3ad933000004030047304502203349d58bf3b310126424591206ec1da4eb307c2342609177bb68fa8d7522eec3022100f74f3b8e9ef82a9157b9834257d0780c1b3d578258aece31919d4052ff27036d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007dcf35f82e704898aec59ad6e159dd0d428baf42f4c970b4767be4cefee73700afef4db1769e8519cf56ba039911dfcb79d7b85531e8972f26df1c0fdb9d30fada27aa59eca1f11be47e63162a93dc845eef01797aab581c6be61695903bc9251f36714a73fe8e23244d54eb7db821cfe67745f1e84f3951f9eeec3450d2deda3537651ffbac92f9d08a0cb81196a1d48a0569af62224a87009f6242f0993f16c1bfa15cf7b9ba89c6bac7cbc3489fc7f774c86419d919b417a64086f87a3a49a620db48d2639555d0e1b066a8c39233dc870440e44fc3eb2f6eb1f70197bb29224c8037f6a880bae8f9355ed06edb621d92e0a175649211d97a8012eb637d88