www.intranet.cifa-fashion.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:58:79:0c:b4:12:78:28:d0:e4:c3:2c:82:dc:7e:b0:d0 was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.intranet.cifa-fashion.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:58:79:0c:b4:12:78:28:d0:e4:c3:2c:82:dc:7e:b0:d0
Serial Number (int): 289697894838923288208701208106857249288400
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7f:52:28:99:7e:7b:d7:e1:06:55:7f:9a:07:5b:98:43:78:71:1e:d7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 13:fd:c5:e6:17:27:af:55:40:ab:1f:9c:c3:d0:3a:4d:cf:e4:5c:1a
Fingerprint (sha256): 01:2b:f4:63:ec:ba:2a:c3:1c:e7:07:d2:90:5f:06:4a:ce:d9:9f:3c:f1:9f:53:ca:9f:6c:33:3f:68:94:79:6c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.intranet.cifa-fashion.com

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.intranet.cifa-fashion.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

annuaire.parisfashionshops.com
backoffice.cifa-fashion.com
blog.parisfashionshops.com
cdn.cifa-fashion.com
cifa-express.com
cifa-fashion.com
cn.cifa-fashion.com
crm.cifa-fashion.com
cron.cifa-fashion.com
directorio.parisfashionshops.com
directory.parisfashionshops.com
efashioncenter.com
en.cifa-fashion.com
event.cifa-fashion.com
forherparis.com
intranet.cifa-fashion.com
invitation.phygital.events
location.cifa-fashion.com
magazine.parisfashionshops.com
old.cifa-fashion.com
pfs.cifa-fashion.com
phygital.events
pick-up.cifa-fashion.com
sandbox.efashioncenter.com
sandbox.marketplace.paris
sms.marketplace.paris
template.boxtoshop.com
v2.cifa-fashion.com
verzeichnis.parisfashionshops.com
wsn.parisfashionshops.com
www.cifa-fashion.com
www.efashioncenter.com
www.forherparis.com
www.intranet.cifa-fashion.com
www.location.cifa-fashion.com
www.old.cifa-fashion.com
www.pfs.cifa-fashion.com
www.phygital.events
www.pick-up.cifa-fashion.com
www.sandbox.efashioncenter.com

Other certificates including the domain name cifa-fashion.com

(limited to 100 certificates)
intranet.cifa-fashion.com
www.intranet.cifa-fashion.com
crm.cifa-fashion.com
www.escandelle.marketplace.paris
sandbox.marketplace.paris
tw.parisfashionshops.com
forherparis.com
magazine.parisfashionshops.com
www.pick-up.cifa-fashion.com
old.cifa-fashion.com
forherparis.com
cdn.cifa-fashion.com
hnathalie.marketplace.paris
www.old.cifa-fashion.com
www.location.cifa-fashion.com
annuaire.parisfashionshops.com
sandbox.marketplace.paris
intranet.cifa-fashion.com
event.cifa-fashion.com
forherparis.marketplace.paris
cn.cifa-fashion.com
ru.parisfashionshops.com
directory.parisfashionshops.com
www.michaelkors.marketplace.paris
bestacces.marketplace.paris
www.intranet.cifa-fashion.com
pick-up.cifa-fashion.com
kr.parisfashionshops.com
cn.cifa-fashion.com
tw.parisfashionshops.com
sms.marketplace.paris
cn.cifa-fashion.com
ledesk.marketplace.paris
verzeichnis.parisfashionshops.com
cifa-fashion.com
michaelkors.marketplace.paris
masterclass.parisfashionshops.com
backoffice.cifa-fashion.com
intranet.cifa-fashion.com
pfs.cifa-fashion.com
www.pfs.cifa-fashion.com
cn.cifa-fashion.com
cdn.cifa-fashion.com
cdn.cifa-fashion.fr
old.cifa-fashion.com
wsn.parisfashionshops.com
ru.parisfashionshops.com
marketplace.paris
sms.marketplace.paris
sms.marketplace.paris
styleshoes-paris.com
www.bestacces.marketplace.paris
pfs.cifa-fashion.com
marketplace.paris
www.pick-up.cifa-fashion.com
sms.marketplace.paris
style.parisfashionshops.com
bestacces.marketplace.paris
marketplace.paris
sandbox.marketplace.paris
marketplace.paris
www.sandbox.marketplace.paris
backoffice.cifa-fashion.com
www.jubylee.marketplace.paris
cron.cifa-fashion.com
intranet.cifa-fashion.com
sandbox.marketplace.paris
blog.parisfashionshops.com
cdn.cifa-fashion.fr
crm.cifa-fashion.com
marketplace.paris
sms.marketplace.paris
v2.cifa-fashion.com
intranet.cifa-fashion.com
survey.parisfashionshops.com
forherparis.com
efashioncenter.com
marketplace.paris
michaelkors.marketplace.paris
directory.parisfashionshops.com
marketplace.paris
annuaire.parisfashionshops.com
directory.parisfashionshops.com
survey.parisfashionshops.com
www.michaelkors.marketplace.paris
bestacces.marketplace.paris
masterclass.parisfashionshops.com
event.cifa-fashion.com
www.old.cifa-fashion.com
sg.parisfashionshops.com
cron.cifa-fashion.com
marketplace.paris
fi.parisfashionshops.com
pick-up.cifa-fashion.com
marketplace.paris
marketplace.paris
phygital.events
www.forherparis.com
sandbox.marketplace.paris
v2.cifa-fashion.com

Certificate

The complete raw certificate details for www.intranet.cifa-fashion.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2GcNgdvrEhMOrI+AW9l
HCDL7SwyBUM0lrRGlRIBwjDqO15dZZvT4HtZVnevk5IcW/IUJO78FsyV3Wr0S6iP
hkjcxdOk0pX2HQ84L2Imal/2/qsghi5YcdHh5ufEz2rncKcnBgn5yy0a52tIEgBv
gqx7ICAkTcqSi4ijNa9SV+EAXtRUGnymiXYSeznNn6ljt/+qMaxKwioAkN21iU1r
koYFj01837x4UuS7UZ4mlh7MfCuzIvrRubHxEmC9jk8JgBvaVgLNWbY6OncnqiKd
QdY2IadYWGqLmWx7vcg0ZJJjofIvzh9QjgF+jpddJZkzfA4Wan7vl/lC5yG7ytGC
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289697894838923288208701208106857249288400
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-08 07:20:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-06 07:20:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.intranet.cifa-fashion.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25169556071534366747944280220249686193818238942567747600193597556266799681518031225251617364167911540971156702412365076587289314417476267993010994844620790541601756526110388682796335847770489107256369892722127098591628845915993676746736032789099458778984690172272074318782097458556650594854925289178900706716229557238693889502845486529391030019507522829561814221592680969408714310443521603544650447660410466056843986236099351066335089637804549149941862034180596911513635201333962182981306847599917482914010939633806319849210833519248151765950893555010485232668062839095813625600917843170010084188681892333252898816659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f5228997e7bd7e106557f9a075b984378711ed7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1016 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annuaire.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cifa-express.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cron.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directorio.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efashioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forherparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invitation.phygital.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'location.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phygital.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.efashioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'template.boxtoshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verzeichnis.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsn.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.efashioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forherparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.location.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phygital.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandbox.efashioncenter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166f2687d4100000403004730450220159168c28c031921d7d509d0d41af311f8a32b8f6b09bb233eb5bda0945da1c7022100e8e527d407c02fc1f381a5197307fe1d5143cfde98a2c65409031a996397664c0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000166f2687ea3000004030046304402201eecfbdfb44bf8742ecf4ad95835d5b9f57d2b023e19d757dc9e1f5db3d24758022044fc4a0fe79f3c25a50a239b07c28af437a11792c46442e806041b05b72f7674
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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