www.daciacentrum.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:cf:59:5a:da:57:0c:e3:31:3a:d1:60:ae:f2:eb:eb:4f was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.daciacentrum.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:cf:59:5a:da:57:0c:e3:31:3a:d1:60:ae:f2:eb:eb:4f
Serial Number (int): 326266121662522479715872477688509707840335
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:45:23:57:d8:8d:91:3a:17:9d:7e:7b:3b:65:b8:09:96:fa:4e:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): db:d1:ca:53:45:ce:a6:f4:df:c5:20:e6:a5:1e:1b:bc:22:3e:e3:ea
Fingerprint (sha256): 08:b5:d6:1d:8a:e4:a3:29:15:95:c0:c3:1a:fd:8a:4d:ba:ac:22:50:a5:6c:68:5f:15:24:d1:30:11:52:a4:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.daciacentrum.cz

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.daciacentrum.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

daciacentrum.cz
daciapruhonice.cz
renaultpruhonice.cz
www.daciacentrum.cz

Other certificates including the domain name daciacentrum.cz

(limited to 100 certificates)
www.daciacentrum.cz
daciapruhonice.cz
www.daciacentrum.cz
daciapruhonice.cz
www.daciacentrum.cz
daciapruhonice.cz
daciapruhonice.cz
www.daciacentrum.cz
daciapruhonice.cz
daciapruhonice.cz
www.daciacentrum.cz
daciapruhonice.cz
www.daciacentrum.cz
daciapruhonice.cz
www.daciacentrum.cz
daciapruhonice.cz
daciapruhonice.cz
daciapruhonice.cz
www.daciacentrum.cz
www.daciacentrum.cz

Certificate

The complete raw certificate details for www.daciacentrum.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgISA77PWVraVwzjMTrRYK7y6+tPMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA0MDcwODAzNDNaFw0x
ODA3MDYwODAzNDNaMB4xHDAaBgNVBAMTE3d3dy5kYWNpYWNlbnRydW0uY3owggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCerIh/Z1q5v/3o4jRpYe0MI1V4
fz6khmhiwmMziCS+BLL/HqkGDCvdJ2M7Bo8p9XVrQHTFutXZwmRSoLr2ikJA+RPt
+AIWChfU7yV5MS7DXBEUeexp/meAPehicRvillceDeozIJvOV4HLWazj4bZgX42N
Fik4cYjf8VmPdvd1dex7Tw7h5ukCRBTflEnLbhHroPGMEKXGS3T6ucbg2p4m4fvZ
9Xb22JaPGFNSWDeeHSVV0AqcWmq7Y82tCcWbyBj9lD04xcw3uoA+iT7OAUNippFE
Zyzl1VFhjAZT3p+F/qBzJjgoYbKy1bEix6J9C/hLNmUrzTAabgynfmrcDaaBi+rw
oU6jd+UHnA1nS1q+886JeFBEAoY438YqrzSwvXlS2uKdxjx8OP+f/otI4UURe1Zi
zdHFRN11TDVUY5iQrrRf4JtwmNuWdCB2eDqUvlQxctU4UYdoDhZvx5SKORzYSZtF
eobCLQusV4GHmsp+OCDFBCwWKNRbYxEFt/ltflP5Qv7FgapQ/nvg1ToXtvKOT2Pv
rgDIZLU+7jnj8ib7BYLcDzFt5pIsYpSMBi562PEox7HyebmDBOMazz2IPYHqUFs1
EEVgBJR6GoZfbElTcTYcBJVErC/AAfz66X+LMRUuSHbCsfjzwO4T1nLogHpLQ5Js
V/MpORFLFKN49GspxQIDAQABo4IDVDCCA1AwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBRdRSNX2I2ROhedfns7ZbgJlvpOxzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem
RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMFcGA1UdEQRQME6CD2RhY2lhY2VudHJ1
bS5jeoIRZGFjaWFwcnVob25pY2UuY3qCE3JlbmF1bHRwcnVob25pY2UuY3qCE3d3
dy5kYWNpYWNlbnRydW0uY3owgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysG
AQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5
IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBh
Y2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBo
dHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB2ANt0r+7LKeyx/so+cW0s5bmquzb3hHGDx12dTze2H79kAAAB
Yp9Y3QwAAAQDAEcwRQIhAP/vET9L/Qx5TOVRy7At9UzgDFcNP5EI1T9p9R+fKk09
AiBXU/UQINxSKpnHGHqJ4EtEbat3WdnpjnR0fU4bA3j5vgB2ACk8UZZUyDlluqpQ
/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABYp9Y3SIAAAQDAEcwRQIgTq4Hrntk5yz0
nYpgerteij4LKjoD0GYLna0sHe62LV4CIQCoFMGjV/ygoYvdjUYrAOszx6030bAB
/1M8zkG+kqurAzANBgkqhkiG9w0BAQsFAAOCAQEAQ50grv4WIGRcX3Rp8jBnLM4J
HgHHuwHE5f/X0ZAuPZ6ZwQpjO7gJu9D6k/zQkZgY49seyOEwhZHXqCifi0KhxOuu
nVViE4xdsiA2f2qYPahY7v05jdwqnNJ6gWwye/oNpPr6ih7TIYg6OaCzPJmd6Yp7
Cjx3g5Tx0f4zAimY4LMew9xXY6FymKONFYlXUjkMHLO2vd5FIqGTxA3nl+zq0mPM
jp+dcNt4WvsBpNAjElyN55/jNOz4pcZPO0smAufrfFI6WcJkNcqauYZZVJY9btF9
5E158GVicRbOCMSRlFTmi0GLQkC8OJJiKNnnpv6aoYgT+HO3kxw+DpNLY82Eog==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnqyIf2daub/96OI0aWHt
DCNVeH8+pIZoYsJjM4gkvgSy/x6pBgwr3SdjOwaPKfV1a0B0xbrV2cJkUqC69opC
QPkT7fgCFgoX1O8leTEuw1wRFHnsaf5ngD3oYnEb4pZXHg3qMyCbzleBy1ms4+G2
YF+NjRYpOHGI3/FZj3b3dXXse08O4ebpAkQU35RJy24R66DxjBClxkt0+rnG4Nqe
JuH72fV29tiWjxhTUlg3nh0lVdAKnFpqu2PNrQnFm8gY/ZQ9OMXMN7qAPok+zgFD
YqaRRGcs5dVRYYwGU96fhf6gcyY4KGGystWxIseifQv4SzZlK80wGm4Mp35q3A2m
gYvq8KFOo3flB5wNZ0tavvPOiXhQRAKGON/GKq80sL15UtrincY8fDj/n/6LSOFF
EXtWYs3RxUTddUw1VGOYkK60X+CbcJjblnQgdng6lL5UMXLVOFGHaA4Wb8eUijkc
2EmbRXqGwi0LrFeBh5rKfjggxQQsFijUW2MRBbf5bX5T+UL+xYGqUP574NU6F7by
jk9j764AyGS1Pu454/Im+wWC3A8xbeaSLGKUjAYuetjxKMex8nm5gwTjGs89iD2B
6lBbNRBFYASUehqGX2xJU3E2HASVRKwvwAH8+ul/izEVLkh2wrH488DuE9Zy6IB6
S0OSbFfzKTkRSxSjePRrKcUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326266121662522479715872477688509707840335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-07 08:03:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-06 08:03:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.daciacentrum.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 647333270643848959281941793669587810009341386993415461267299871433817763984259019877954362872434480447723895610209093583342375234441000829459477494032768962049607484734973931509300108079399199834313012052852652532270895792141800030987436713447175418295028588927081156964221506354709019467210661774198130722651493268497362523225416204316323727741184431689887465829226534612088281095455355521375323487481641402660161034342108113250764098609774203426342263363869057333963616027803717523605588548421562717322397198684602957685693516585083716967335891719055275167918568885091946895864584380324071442002294707145200799403745781124277372868939642335381573129531226665974271300794926995704787301205398421989986085869419627302466909045614739652594643252720441761347594110065714133439012698551982091090534798942442274839223169849659354728154668508498135657123480305874718384203228301757850879124815690411924381063017122954530727178260041800369650551552652423294898488719413176192192142160548203065008052990810611678838689519302032883592445179725339083802135839609876699507396411376327118602575658231672095565889298160711200512712031958724379821500786201971267886466910375832510033705052689286501878812233477400906020331816181510113773386148293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d452357d88d913a179d7e7b3b65b80996fa4ec7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daciacentrum.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daciapruhonice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renaultpruhonice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daciacentrum.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001629f58dd0c0000040300473045022100ffef113f4bfd0c794ce551cbb02df54ce00c570d3f9108d53f69f51f9f2a4d3d02205753f51020dc522a99c7187a89e04b446dab7759d9e98e74747d4e1b0378f9be007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001629f58dd22000004030047304502204eae07ae7b64e72cf49d8a607abb5e8a3e0b2a3a03d0660b9dad2c1deeb62d5e022100a814c1a357fca0a18bdd8d462b00eb33c7ad37d1b001ff533cce41be92abab03
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00439d20aefe1620645c5f7469f230672cce091e01c7bb01c4e5ffd7d1902e3d9e99c10a633bb809bbd0fa93fcd0919818e3db1ec8e1308591d7a8289f8b42a1c4ebae9d5562138c5db220367f6a983da858eefd398ddc2a9cd27a816c327bfa0da4fafa8a1ed321883a39a0b33c999de98a7b0a3c778394f1d1fe33022998e0b31ec3dc5763a17298a38d15895752390c1cb3b6bdde4522a193c40de797ecead263cc8e9f9d70db785afb01a4d023125c8de79fe334ecf8a5c64f3b4b2602e7eb7c523a59c26435ca9ab9865954963d6ed17de44d79f065627116ce08c4919454e68b418b4240bc38926228d9e7a6fe9aa18813f873b7931c3e0e934b63cd84a2