carlofrigerio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1e:f6:a4:e1:89:c4:77:2b:70:09:39:31:2b:61:6c:c6:aa was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=carlofrigerio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1e:f6:a4:e1:89:c4:77:2b:70:09:39:31:2b:61:6c:c6:aa
Serial Number (int): 358985460932774251722168287900232175109802
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:1b:6f:04:6b:35:0e:fd:9e:c5:73:ba:7c:12:d1:e8:ab:90:2f:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 63:39:19:f3:9d:11:0d:79:c9:ef:ad:67:9f:43:9f:05:54:97:5c:f7
Fingerprint (sha256): 00:28:14:aa:41:7e:73:9d:ee:97:bd:f0:61:b1:94:4e:08:d3:5a:aa:ff:fd:f9:72:ff:70:55:22:a2:cf:1e:43

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate carlofrigerio.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for carlofrigerio.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

carlofrigerio.amsbustovm1.a2hosted.com
carlofrigerio.com
casbot.amsbustovm1.a2hosted.com
cortevecchiaristorante.amsbustovm1.a2hosted.com
gini-srl.amsbustovm1.a2hosted.com
ginidanilo.amsbustovm1.a2hosted.com
mail.carlofrigerio.com
rinaldiamedeo.amsbustovm1.a2hosted.com
studiodentisticopanepinto.amsbustovm1.a2hosted.com
ww2.carlofrigerio.com
www.carlofrigerio.amsbustovm1.a2hosted.com
www.carlofrigerio.com
www.casbot.amsbustovm1.a2hosted.com
www.casbot.com
www.cortevecchiaristorante.amsbustovm1.a2hosted.com
www.gini-srl.amsbustovm1.a2hosted.com
www.ginidanilo.amsbustovm1.a2hosted.com
www.ginidanilo.com
www.rinaldiamedeo.amsbustovm1.a2hosted.com
www.studiodentisticopanepinto.amsbustovm1.a2hosted.com
www.studiodentisticopanepinto.com

Other certificates including the domain name carlofrigerio.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for carlofrigerio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH8DCCBtigAwIBAgISBB72pOGJxHcrcAk5MSthbMaqMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEyMTgxNjAyMTdaFw0x
ODAzMTgxNjAyMTdaMBwxGjAYBgNVBAMTEWNhcmxvZnJpZ2VyaW8uY29tMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvzSY8bMDkuVuvxccqVR+PmHEnpY
Rrr8UGEpFazBA6zrSGA0m7gxrGGCfBFI0in6IiwPlJUOsNzIygaUFVX//WjwpUaM
31mpA+eWAffUEeUBYMcBTpHYKNUI243YaSkOV4GD0X+mvC8QV2ilF5kOoMXJG3XJ
q2EmLgqUhty/kFe7ALvw9UXAvgexYPtdPhqkFFXz/rX1dMBp8GpJqHgNB7FrsyMf
kLsuT5WLvxlbYuYJji+4jduBlEs5wE+3wSLBw0rWNQxVAxyswjIboDmNPdRgoT20
y9Ekg3q+be61+BBCJWYwIO6xFigTvfU+kw78gFPSbv5xBcj2HTXlCirW8wIDAQAB
o4IE/DCCBPgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSmG28EazUO/Z7Fc7p8EtHo
q5AvwjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB
AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw
dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw
dC5vcmcvMIIDBQYDVR0RBIIC/DCCAviCJmNhcmxvZnJpZ2VyaW8uYW1zYnVzdG92
bTEuYTJob3N0ZWQuY29tghFjYXJsb2ZyaWdlcmlvLmNvbYIfY2FzYm90LmFtc2J1
c3Rvdm0xLmEyaG9zdGVkLmNvbYIvY29ydGV2ZWNjaGlhcmlzdG9yYW50ZS5hbXNi
dXN0b3ZtMS5hMmhvc3RlZC5jb22CIWdpbmktc3JsLmFtc2J1c3Rvdm0xLmEyaG9z
dGVkLmNvbYIjZ2luaWRhbmlsby5hbXNidXN0b3ZtMS5hMmhvc3RlZC5jb22CFm1h
aWwuY2FybG9mcmlnZXJpby5jb22CJnJpbmFsZGlhbWVkZW8uYW1zYnVzdG92bTEu
YTJob3N0ZWQuY29tgjJzdHVkaW9kZW50aXN0aWNvcGFuZXBpbnRvLmFtc2J1c3Rv
dm0xLmEyaG9zdGVkLmNvbYIVd3cyLmNhcmxvZnJpZ2VyaW8uY29tgip3d3cuY2Fy
bG9mcmlnZXJpby5hbXNidXN0b3ZtMS5hMmhvc3RlZC5jb22CFXd3dy5jYXJsb2Zy
aWdlcmlvLmNvbYIjd3d3LmNhc2JvdC5hbXNidXN0b3ZtMS5hMmhvc3RlZC5jb22C
Dnd3dy5jYXNib3QuY29tgjN3d3cuY29ydGV2ZWNjaGlhcmlzdG9yYW50ZS5hbXNi
dXN0b3ZtMS5hMmhvc3RlZC5jb22CJXd3dy5naW5pLXNybC5hbXNidXN0b3ZtMS5h
Mmhvc3RlZC5jb22CJ3d3dy5naW5pZGFuaWxvLmFtc2J1c3Rvdm0xLmEyaG9zdGVk
LmNvbYISd3d3LmdpbmlkYW5pbG8uY29tgip3d3cucmluYWxkaWFtZWRlby5hbXNi
dXN0b3ZtMS5hMmhvc3RlZC5jb22CNnd3dy5zdHVkaW9kZW50aXN0aWNvcGFuZXBp
bnRvLmFtc2J1c3Rvdm0xLmEyaG9zdGVkLmNvbYIhd3d3LnN0dWRpb2RlbnRpc3Rp
Y29wYW5lcGludG8uY29tMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEE
AYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBi
ZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNj
b3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0
cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQAD
ggEBAGkjutwwbAu+sNVhG++128qrb03tVMXleusS52h1U7GIfMmZhCZGojxypDEh
+T/QQgC7S1JgDezHM4S2HZWC14FuSqPcAAm4iw2Y21dzc43Ot1WwO2JCFNVxK9fF
AeWmn58Ef7jN3WfVyYU76NIbryacP7xyteoFVe6g9DI5sHnlsgHZqWv9oV9Hvgg9
+fiaXg/ZEsqwx7s8ymiKNU/6k6auBmq12fEPCoZkfPrXFOcSjb9fTVy+ym0U5hPj
X+UKKyk0RulLIZvoEyWr766GMJ59VLRI6goJUbOW9Ufo6Q35ukW4uR/kR26hOA/f
ocoeRLho8cHw2wj3RhzJrURLqZM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvzSY8bMDkuVuvxccqVR
+PmHEnpYRrr8UGEpFazBA6zrSGA0m7gxrGGCfBFI0in6IiwPlJUOsNzIygaUFVX/
/WjwpUaM31mpA+eWAffUEeUBYMcBTpHYKNUI243YaSkOV4GD0X+mvC8QV2ilF5kO
oMXJG3XJq2EmLgqUhty/kFe7ALvw9UXAvgexYPtdPhqkFFXz/rX1dMBp8GpJqHgN
B7FrsyMfkLsuT5WLvxlbYuYJji+4jduBlEs5wE+3wSLBw0rWNQxVAxyswjIboDmN
PdRgoT20y9Ekg3q+be61+BBCJWYwIO6xFigTvfU+kw78gFPSbv5xBcj2HTXlCirW
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358985460932774251722168287900232175109802
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-18 16:02:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-18 16:02:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'carlofrigerio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26129761916386744192918069578240552238868157601009428279047622733539220255811367762351319134428381127299826260073417329291416858157900207206464368317450544068158047928681071218012013311766480646058812780595902826555488240628717654182855062169416336259900391262772720615305153264116288789053632109146118170677209988668308756849060971695723880544444735107838477197190838666882022423552469203753303201588511516989874417691270796760707948883739180684192227823286578366746872990896663548382278936535394147786251500515557930069419453720054606392598854405345762036243580443274487794469493720430954147150859070027682584123123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a61b6f046b350efd9ec573ba7c12d1e8ab902fc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (764 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlofrigerio.amsbustovm1.a2hosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlofrigerio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casbot.amsbustovm1.a2hosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortevecchiaristorante.amsbustovm1.a2hosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gini-srl.amsbustovm1.a2hosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ginidanilo.amsbustovm1.a2hosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.carlofrigerio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rinaldiamedeo.amsbustovm1.a2hosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiodentisticopanepinto.amsbustovm1.a2hosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww2.carlofrigerio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carlofrigerio.amsbustovm1.a2hosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carlofrigerio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casbot.amsbustovm1.a2hosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cortevecchiaristorante.amsbustovm1.a2hosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gini-srl.amsbustovm1.a2hosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ginidanilo.amsbustovm1.a2hosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ginidanilo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rinaldiamedeo.amsbustovm1.a2hosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studiodentisticopanepinto.amsbustovm1.a2hosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studiodentisticopanepinto.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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