iu.goranku.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:83:de:e9:68:e1:cc:49:2f:14:01:ab:62:97:b3:13:08:68 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=iu.goranku.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:de:e9:68:e1:cc:49:2f:14:01:ab:62:97:b3:13:08:68
Serial Number (int): 306210148409416127353587731039763953813608
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:d8:d6:b8:20:67:44:be:56:dc:72:e4:72:9d:ef:6e:45:14:8f:43
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:b9:c0:9d:01:ee:b5:4d:1c:a3:d2:e9:4c:3d:a9:89:e1:a2:97:00
Fingerprint (sha256): 03:5b:d8:9f:c9:49:29:6c:a9:54:a1:c9:93:49:e9:8c:23:17:2f:79:a2:47:57:22:f0:d3:77:1f:23:97:34:8c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate iu.goranku.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iu.goranku.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iu.goranku.com
online.iu.edu

Other certificates including the domain name goranku.com

(limited to 100 certificates)
go-suny.goranku.com
ssl377523.cloudflaressl.com
ssl3095.cloudflare.com
ssl377524.cloudflaressl.com
iu.goranku.com
manage.goranku.com
*.goranku.com
staging.indiana.goranku.com
glasgow.goranku.com
manage.goranku.com
ssl377523.cloudflaressl.com
nebraska.goranku.com
ssl377524.cloudflaressl.com
columbia.goranku.com
gwu.goranku.com
*.goranku.com
api.goranku.com
navigator.suny.edu
ssl255882.cloudflaressl.com
iu.goranku.com
ssl377524.cloudflaressl.com
ssl377522.cloudflaressl.com
ssl377523.cloudflaressl.com
goranku.com
gwu.goranku.com
ssl377523.cloudflaressl.com
goranku.com
stm.goranku.com
ssl377522.cloudflaressl.com
glasgow.goranku.com
ssl3095.cloudflare.com
api.goranku.com
manage-demo.goranku.com
api.goranku.com
ssl377522.cloudflaressl.com
gwu.goranku.com
dev.indiana.goranku.com
dev.suny.goranku.com
go-suny.goranku.com
ssl377522.cloudflaressl.com
go-suny.goranku.com
ssl377522.cloudflaressl.com
columbia.goranku.com
go-suny.goranku.com
glasgow.goranku.com
gwu.goranku.com
stm.goranku.com
goranku.com
ssl377524.cloudflaressl.com
ssl377523.cloudflaressl.com
www.goranku.com
ssl377524.cloudflaressl.com
ssl255884.cloudflaressl.com
ssl255884.cloudflaressl.com
columbia.goranku.com
glasgow.goranku.com
goranku.com
ssl377524.cloudflaressl.com
ssl255882.cloudflaressl.com
ssl377522.cloudflaressl.com
ssl377523.cloudflaressl.com
manage-demo.goranku.com
ssl255884.cloudflaressl.com
ssl377522.cloudflaressl.com
api.goranku.com
ssl3095.cloudflare.com
*.goranku.com
ssl377523.cloudflaressl.com
ssl377522.cloudflaressl.com
sni.cloudflaressl.com
iu.goranku.com
ssl377522.cloudflaressl.com
api.goranku.com
ssl377523.cloudflaressl.com
ssl255884.cloudflaressl.com
staging.glasgow.goranku.com
staging.api.goranku.com
staging.glasgow.goranku.com
staging.indiana.goranku.com
ssl377524.cloudflaressl.com
ssl377524.cloudflaressl.com
go-suny.goranku.com
api.goranku.com
ssl377522.cloudflaressl.com
staging.manage.goranku.com
manage.goranku.com
ssl377524.cloudflaressl.com
ssl377524.cloudflaressl.com
ssl377524.cloudflaressl.com
staging.glasgow.goranku.com
go-suny.goranku.com
go-suny.goranku.com
ssl377523.cloudflaressl.com
ssl377524.cloudflaressl.com
ssl377524.cloudflaressl.com
ssl377523.cloudflaressl.com
ssl377524.cloudflaressl.com
manage-demo.goranku.com
ssl377522.cloudflaressl.com
ssl377524.cloudflaressl.com

Certificate

The complete raw certificate details for iu.goranku.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgISA4Pe6WjhzEkvFAGrYpezEwhoMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA0MTUxMTU5MjlaFw0x
ODA3MTQxMTU5MjlaMBkxFzAVBgNVBAMTDml1LmdvcmFua3UuY29tMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZiPW/yAZaI0Y8BVO+FMVMrKTzONNqMz
LAtTJ+nvIJ9cPGHqGQs5ThfYM+SL8AZxDMdZcHrme6M8LWbRebj/7B2xc8QNSX4c
5rYvdzWDfb6v5S1MzfPJ27tvyIO9bGFKi5KpnLz9jV5UlNTl/wUDIQqwfwTU0jJz
vsX6lo0Km/y/iX8IGzY/NW8WViOtLwsbLI0zoYU9Jc+WGTiHOhCmFuLOP9xJv4SS
sbzQ0fnCZwIc+RzeTPM5soqFfuv45EqWseQm8A+aYrJznfq4271ipAoPPRDcP3YE
Z51ccVk5nq+R1G6/cTJPIb4naX4w6dYl9GFZtih40ItyT7IrgTaimQIDAQABo4ID
JjCCAyIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQb2Na4IGdEvlbccuRyne9uRRSP
QzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj
MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v
cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v
cmcvMCgGA1UdEQQhMB+CDml1LmdvcmFua3UuY29tgg1vbmxpbmUuaXUuZWR1MIH+
BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGe
DIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBS
ZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBD
ZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5v
cmcvcmVwb3NpdG9yeS8wggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDbdK/uyyns
sf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWLJY5UkAAAEAwBIMEYCIQCFV6Jb
n6lXsg4ufFYyT/Z3OGy7VHPUBse3WI3cyPxuRwIhAOQDLbYoQSJcYsjK97ke48yn
x8BvMSuvxHjbbYZmFb+TAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH
9HgAAAFiyWOVRQAABAMARzBFAiEAu6M1ONPLfv9oUj6zed3LSjjeGvvqnT285MCY
mp2wUKQCIA6HfNmeoQgQ0M59zHOxzUC0GAx7SXIfl+EXCGML6j7QMA0GCSqGSIb3
DQEBCwUAA4IBAQAMsDDDw0b1UsQi6/81BGpO/KBLFKSL0+7B+RO7dIMkDeiarUoE
ijFBFmT5xRJNMnAeikvbBs1dbluHdth63j1KGpXPcyLEp+pl+i3BP4r76JzJOvbV
TSEJBbMWXZSs2g68jWZavJ5gpuNT5cKSeRwIhEdRsA4WZCMZsejmxPy6/nh91wH+
109zLI+JcOA7hJyzbA5WZoSBAIB6VEf35ko239YL7lyGG/ZFi6XXrtlRSKmj6Z8Q
STV5yOmqjtnP7PrGRuT54XrSZjmwF2nm3vp41Q/dsEB/YPyo4VPshy/LLF0CmrMU
Bxac2Rft5qsD5lGnDufbonmKOOGNwJJ4flNH
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZiPW/yAZaI0Y8BVO+FM
VMrKTzONNqMzLAtTJ+nvIJ9cPGHqGQs5ThfYM+SL8AZxDMdZcHrme6M8LWbRebj/
7B2xc8QNSX4c5rYvdzWDfb6v5S1MzfPJ27tvyIO9bGFKi5KpnLz9jV5UlNTl/wUD
IQqwfwTU0jJzvsX6lo0Km/y/iX8IGzY/NW8WViOtLwsbLI0zoYU9Jc+WGTiHOhCm
FuLOP9xJv4SSsbzQ0fnCZwIc+RzeTPM5soqFfuv45EqWseQm8A+aYrJznfq4271i
pAoPPRDcP3YEZ51ccVk5nq+R1G6/cTJPIb4naX4w6dYl9GFZtih40ItyT7IrgTai
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306210148409416127353587731039763953813608
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-15 11:59:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-14 11:59:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iu.goranku.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23934269777144060948226042468761629244816354646896529870919398023578090666086624744439381590635592027233812356216253810646068872654876464194845896585434689541662481101137041580693242038091564839035130231215492367038305503718631152359089740834686536926988384251437259776009035498909750224399884847311638722979145536797017448739636106461944401545266746992326131672111316602900411710435146754264990094403334237981550335059123121600973750942260341794883954648876646464872711123587295972905748513144903143728596155441893788794331762866854721138607793603259614483662964311710170686100204094992846020744913838844261164294809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1bd8d6b8206744be56dc72e4729def6e45148f43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iu.goranku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.iu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162c963952400000403004830460221008557a25b9fa957b20e2e7c56324ff677386cbb5473d406c7b7588ddcc8fc6e47022100e4032db62841225c62c8caf7b91ee3cca7c7c06f312bafc478db6d866615bf93007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162c96395450000040300473045022100bba33538d3cb7eff68523eb379ddcb4a38de1afbea9d3dbce4c0989a9db050a402200e877cd99ea10810d0ce7dcc73b1cd40b4180c7b49721f97e11708630bea3ed0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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