www.pedsresidency.uic.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ec:79:ec:ac:03:3b:7b:6b:b9:8d:c9:1e:b5:39:ed:c2:bb was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pedsresidency.uic.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ec:79:ec:ac:03:3b:7b:6b:b9:8d:c9:1e:b5:39:ed:c2:bb
Serial Number (int): 428917847778761598141595155157288349450939
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: db:e5:dc:b3:7d:e2:04:56:5f:a8:c8:0e:07:fb:1a:f9:33:10:be:95
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ec:44:0e:eb:04:67:51:6b:26:1b:33:13:d1:1a:f8:43:04:26:1d:02
Fingerprint (sha256): 03:8a:fa:0a:a4:65:9e:4e:48:48:ed:2b:0f:88:a4:c8:bf:ee:a2:33:9e:94:f7:33:68:36:30:05:17:0c:fd:a7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pedsresidency.uic.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pedsresidency.uic.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pedsresidency.uic.edu
www.pedsresidency.uic.edu

Other certificates including the domain name uic.edu

(limited to 100 certificates)
vpngateway.hospital.uic.edu
belonging.uic.edu
saweb.uic.edu
lawreview.jmls.edu
netschcampus.uic.edu
healthinformatics.uic.edu
cluster3.technolutions.net
fmweb.uic.edu
policy.security.uic.edu
ripl.jmls.edu
aarcc.uic.edu
oia.uic.edu
streetfilms.org
give.uic.edu
www.iesp.uic.edu
lares.uic.edu
rotc.uic.edu
msc.uic.edu
dos.uic.edu
urbanbigdata.uic.edu
maps.uic.edu
pascal.math.uic.edu
com-p-ts2012.ad.uic.edu
greatcities.uic.edu
cluster3.technolutions.net
2017.techteach.uic.edu
my.uillinois.edu
trl.uic.edu
ahs.uic.edu
cluster2.technolutions.net
calendars.illinois.edu
iuicintl.uic.edu
dev.auth.uillinois.edu
calendars.illinois.edu
libcal.uic.edu
uic-chicago-pool1.ad.uic.edu
starcluster.phy.uic.edu
media.uic.edu
diversity.uic.edu
bios.uic.edu
san-6-s10.tlsprovisioning.exacttarget.com
dev-pharmacyce.pharm.uic.edu
aarcc.uic.edu
*.business.uic.edu
summercollege.uic.edu
cores8.mede.uic.edu
outlook.uic.edu
applynow.uic.edu
*.class.uic.edu
illinois.edu
securedmail.dscc.uic.edu
mail.cpvp.uic.edu
healthresearch.ccts.uic.edu
math.uic.edu
urbanbigdata.uic.edu
cc-malwareent.ad.uic.edu
cif.uic.edu
rrc.uic.edu
rullfig.digital.uic.edu
secure3r.hospital.uic.edu
masterplan.uic.edu
*.news.uic.edu
migrantworkerrights.com
uic-cc-ess1.ad.uic.edu
globalhealth.uic.edu
securesso.hospital.uic.edu
www.pedsresidency.uic.edu
financialaid.uic.edu
mcph.uic.edu
vmsrv-5.cc.uic.edu
globalmarkets.jmls.edu
vcha.uic.edu
*.cri.uic.edu
web-travel-prod.cc.uic.edu
engineering.uic.edu
www.mycheck.uic.edu
*.uicbrandedsites.uic.edu
flamestutoring.uic.edu
brain.uic.edu
hub.accc.uic.edu
mail.cs.uic.edu
mail.las.uic.edu
intranet.sph.uic.edu
n002.offcampuspartners.com
itcon.uic.edu
web.uillinois.edu
n002.offcampuspartners.com
www.wcms.uillinois.edu
live.today.uic.edu
www.uic.edu
ehsodb.ehs.uic.edu
exedweb.cc.uic.edu
giving.pharmacy.uic.edu
ccm.psych.uic.edu
www.wcms.uillinois.edu
research.jacsw.uic.edu
keys.uic.edu
streetfilms.org
www2.wcms.uillinois.edu
openvpn.uic.edu

Certificate

The complete raw certificate details for www.pedsresidency.uic.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgISBOx57KwDO3truY3JHrU57cK7MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MTYwNzIzMjRaFw0x
ODExMTQwNzIzMjRaMCQxIjAgBgNVBAMTGXd3dy5wZWRzcmVzaWRlbmN5LnVpYy5l
ZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXh0QfYBhDYRC46xTf
Vf9i8QS1GnqjgGAFWda1/UInckUbIlaFq3fMnoNH5WdDwDYI+hnNjp127BGG9E7B
O/bylex835kwA8wpHepdvtRvVDdfCuMji5ok7OMTjDPqGs/QcxMfS1ypgqJgPebY
lanEvZKx8Otuy2FE4Q+xTepA//awYaNPCJED0sTigoDiAmy76oV24KBBzoQGD0GC
RFBfOCcsV+/okK9QFqZaBdTOsN7sTPzUAt/Xre1uNZqxU1m/78QqvQHysQ1RpoHz
xvYmNbhSNf3Y1c6/3n6d3vV6NTS30ZIsu67eG4S+xkRJULBwBF1XIM5f/a21mznI
As+nAgMBAAGjggM5MIIDNTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNvl3LN94gRW
X6jIDgf7GvkzEL6VMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wOwYDVR0RBDQwMoIVcGVkc3Jlc2lkZW5jeS51aWMuZWR1
ghl3d3cucGVkc3Jlc2lkZW5jeS51aWMuZWR1MIH+BgNVHSAEgfYwgfMwCAYGZ4EM
AQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0
ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5k
IG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kg
Zm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEF
BgorBgEEAdZ5AgQCBIH2BIHzAPEAdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcv
o6odBxPTDAAAAWVB1QXxAAAEAwBHMEUCIFj7kzw9C2Raq6qejybLbHznn1C8uyXg
FOg+Ginv38BAAiEAm6U0fVFlgAbC3AvM5jZfVq/3ESolfZdLgDQAqJ2bN6AAdwAp
PFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWVB1QXbAAAEAwBIMEYC
IQC1/irqXevKUkBIdY9Ru6aq7tcNLwNsyVOR9AYNQp9jTAIhANNFxGCplkGhZf0s
VOHLSvRdP1Sp+hdHaQaWhkTxkV6FMA0GCSqGSIb3DQEBCwUAA4IBAQABgSAnEQqp
SmUXXebrOafbpEYg3cPeokTamMwTJMWZLNQsdLmeLx5FRqjxP9bhbwA9rZGfmul0
b819Ohot3Z5e0wcwl+96A0l0CqsjSgppmHgc6wlM+W5EaPe9a+O9QK6+fwd4ofhn
uJtOEkFkkUeBAZ/QO4BMeiX06FdB4C+PfCOR7JlmeuWq/7JaaEVw/WAwdqE5zp9J
R2U7Nvekrs801aZH+ZQSu0QjfRnw2+KDpfn7MYQPABCYwJkJslwh/cbBXyZ5hNAh
J3SYB6AQaOwaiZn++g3ytCEGT5GZZBJIL4mXV903rlhQE9RIZXERdRlkpMmeLtJl
VIN3Fqasvqgz
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4dEH2AYQ2EQuOsU31X/
YvEEtRp6o4BgBVnWtf1CJ3JFGyJWhat3zJ6DR+VnQ8A2CPoZzY6dduwRhvROwTv2
8pXsfN+ZMAPMKR3qXb7Ub1Q3XwrjI4uaJOzjE4wz6hrP0HMTH0tcqYKiYD3m2JWp
xL2SsfDrbsthROEPsU3qQP/2sGGjTwiRA9LE4oKA4gJsu+qFduCgQc6EBg9BgkRQ
XzgnLFfv6JCvUBamWgXUzrDe7Ez81ALf163tbjWasVNZv+/EKr0B8rENUaaB88b2
JjW4UjX92NXOv95+nd71ejU0t9GSLLuu3huEvsZESVCwcARdVyDOX/2ttZs5yALP
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428917847778761598141595155157288349450939
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-16 07:23:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-14 07:23:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pedsresidency.uic.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19128686251659159484467414842458814183610750710035687221972214501695223093479995598969076808945793181301947116608296988015455924770599883127407431153177806413899360784629266626678423885076132675841345936097050606029915120786821994124047577410408723705358030406230966905702101512015232959297483358855587692899581133364399163754728446648300873340530043530854365759890136377585458320240001817997899641742101476459126103676170628737730996538479667127189126782147270981747478670464641128152723109844777673744389468297243398465069789743833715424529780603671702586550190436444566177293936153716073447710453543577777728573351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dbe5dcb37de204565fa8c80e07fb1af93310be95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedsresidency.uic.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pedsresidency.uic.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016541d505f10000040300473045022058fb933c3d0b645aabaa9e8f26cb6c7ce79f50bcbb25e014e83e1a29efdfc0400221009ba5347d51658006c2dc0bcce6365f56aff7112a257d974b803400a89d9b37a0007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016541d505db0000040300483046022100b5fe2aea5debca524048758f51bba6aaeed70d2f036cc95391f4060d429f634c022100d345c460a99641a165fd2c54e1cb4af45d3f54a9fa17476906968644f1915e85
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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