qiyfoundation.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:05:4a:74:6b:e2:e3:ce:78:d1:16:c5:a7:7a:78:68:17:24 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qiyfoundation.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:4a:74:6b:e2:e3:ce:78:d1:16:c5:a7:7a:78:68:17:24
Serial Number (int): 263137236996203001097230112765045513918244
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:43:a6:5a:ab:06:75:89:a3:a5:15:e8:db:4f:8d:2b:e1:79:9a:5b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b2:eb:08:45:c5:19:64:91:69:31:da:64:0d:3c:75:98:32:d7:ad:a7
Fingerprint (sha256): 08:e0:af:28:48:cb:3a:ae:19:f0:96:f6:b6:d5:9a:d0:4d:f2:2e:68:08:67:2c:9d:54:26:92:f2:32:23:f0:0d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate qiyfoundation.org

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qiyfoundation.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digital-self-determination.eu
digital-self-determination.org
digitale-zelfbeschikking.nl
digitalezelfbeschikking.nl
qiy.be
qiy.com
qiy.eu
qiy.fr
qiy.nl
qiy.nu
qiyfoundation.org
www.digital-self-determination.eu
www.digital-self-determination.org
www.digitale-zelfbeschikking.nl
www.digitalezelfbeschikking.nl
www.qiy.be
www.qiy.com
www.qiy.eu
www.qiy.fr
www.qiy.nl
www.qiy.nu
www.qiyfoundation.org

Other certificates including the domain name qiyfoundation.org

(limited to 100 certificates)
qiyfoundation.org
qiyfoundation.org
www.qiy.nl
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
www.qiy.nl
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
www.qiy.nl
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
www.qiy.nl
qiyfoundation.org
qiyfoundation.org
www.qiy.nl
qiyfoundation.org
qiyfoundation.org

Certificate

The complete raw certificate details for qiyfoundation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIpDCCB4ygAwIBAgISAwVKdGvi48540RbFp3p4aBckMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMDcyMDE4NTFaFw0x
OTAyMDUyMDE4NTFaMBwxGjAYBgNVBAMTEXFpeWZvdW5kYXRpb24ub3JnMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwJOrT7ez/3BluNHEv9cllK+X25dW
jeFdk8YBU+qalkjtfPn9MbXqDBsYU7BoHsj0ezJZpoyO5/+RhevaQtJGCiq6VSP9
b0ZSIfBYSrRPZpqymU4I1OI5mnEbJIvkFnwiEwPYsk6mdvGqoBcBctzdiIKNE6zU
F7wFhBPLaos1Eor2OFCN2SiVYomrEq+5lnlFWtwbj7V36B674w31aVSo6rpS2wHr
SaiEEtlFOW2ZPV4bh35qFpduqjEHAcTPQYyLzpJqDKTYwV5GY5K8hGdmVrrXt4z2
PbWHuGDmtj1CQFnD8SlrRPS9GK9S0TeqcSDrIlMCVC34MkcNxJ8dFCuZO0bNFGth
Be5H+a4tXfUFgATP4llV9JLfWIkBpJXzQdNF14xuvMtYbypsQPFB4MlrIDQr6Y8F
dlKbCio2kix9uyRFxN6bnP/588WWtEhWFXfOYpzIPMYspAX9xfYhpKiDeVEB1vn/
HoR3/f5jq0SKIh67AKESGE8oVroGh6Apf43uCVmr73j7enZIaAf5gJMky8rB9jAP
j0nw2UEnn136XBKxrKAhCg47z7o8zKV4zTmopGfGM6Jfh93CV+c4d2Dwp6NPr+mo
NWagyGvZe60FuLiLfqpOE9vAFPEm+XcVMxtg7yS+CjVz7iBqTqPzaZSY7uKLTrZM
Fu7I/l+Est5uG9MCAwEAAaOCBLAwggSsMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
fkOmWqsGdYmjpRXo20+NK+F5mlswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzCCAbEGA1UdEQSCAagwggGkgh1kaWdpdGFs
LXNlbGYtZGV0ZXJtaW5hdGlvbi5ldYIeZGlnaXRhbC1zZWxmLWRldGVybWluYXRp
b24ub3JnghtkaWdpdGFsZS16ZWxmYmVzY2hpa2tpbmcubmyCGmRpZ2l0YWxlemVs
ZmJlc2NoaWtraW5nLm5sggZxaXkuYmWCB3FpeS5jb22CBnFpeS5ldYIGcWl5LmZy
ggZxaXkubmyCBnFpeS5udYIRcWl5Zm91bmRhdGlvbi5vcmeCIXd3dy5kaWdpdGFs
LXNlbGYtZGV0ZXJtaW5hdGlvbi5ldYIid3d3LmRpZ2l0YWwtc2VsZi1kZXRlcm1p
bmF0aW9uLm9yZ4Ifd3d3LmRpZ2l0YWxlLXplbGZiZXNjaGlra2luZy5ubIIed3d3
LmRpZ2l0YWxlemVsZmJlc2NoaWtraW5nLm5sggp3d3cucWl5LmJlggt3d3cucWl5
LmNvbYIKd3d3LnFpeS5ldYIKd3d3LnFpeS5mcoIKd3d3LnFpeS5ubIIKd3d3LnFp
eS5udYIVd3d3LnFpeWZvdW5kYXRpb24ub3JnMIH+BgNVHSAEgfYwgfMwCAYGZ4EM
AQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0
ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5k
IG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kg
Zm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEE
BgorBgEEAdZ5AgQCBIH1BIHyAPAAdQDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8o
kwGd3fHb/gAAAWbwCs0BAAAEAwBGMEQCIHJ9JsUQ2X3p6f7atRAoXoldRURcT7Gq
/0XX/pjHFWsBAiBvSzEYjR3gLrKYf4DFUcvGL6+hCEFBrLBNfWt4unXeAwB3ACk8
UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZvAKz8YAAAQDAEgwRgIh
APL29Eb1tdkVuXlj0ycMTDB0LU41oFPMu7siJdj1FOnuAiEAtIUKaGKtqKPSPqx6
ksqH777Q9PDIfHYWicBYl0YIOQ8wDQYJKoZIhvcNAQELBQADggEBAILzSgPRkgKd
mP3eDfNxbrSoSdBYmuPT8of196G0FxCE5VgDnbBaZYWxTNQFFJocKscdkeMITdmr
XqFQ24BYzJoJ9mw70fEcMNQVeEPl6JoXF5Has6yRe2ybnWs4mK1089t5vTrMqD6F
qyX1WhrRxD9dTaYYG+6SxnYpzBOijy44UBM+1WwrFrtiW/Db6CAPD26ok0dqYnGY
9fsAmNthzA1Lz2pOXU2V+QX+1RjaCJ3FA1pYix9wXf99lgOf7pc2TpnMiFi4cYUS
9Vw/0sux7kIXrCXzEHtFIkxjcjsqQQefU9S54q3U8PHiweOzyh5O7p8xUVLnL9AS
TtKcY4GkqzY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263137236996203001097230112765045513918244
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-07 20:18:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 20:18:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qiyfoundation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785644933384870852054287312107801577073843897414243228100697456310426772711894235011977233124563125279196039793214652262597513363443691016717014085112308790533605008516005303814587267677656659772895869146528190057573057527981530400828386825640411210181732561967342838354379882984371360136622553007637894959962924602218017357566946314121863373403559132515748580044589979994389684715320955150489984845090802135971344828197629680559579327029519242143602082284812248984980396071473496002475407426914521095309849216398629226751709850604155916047286310945652397870406062957227998434573594622439968448396870449338118936276217427815233591909286302453836483193161066755485094467867717775748581840095957209063381304044838799404488295871435657348951150214143835118147116657986544640008963518120957118628359701090742589920464642481033610260321813332250859811608612157609445017692669078826203510627913253745703433282542834154109842108580839192019942714261109936203692247709288008451286280622184917197335624572827490378730502390062042600938234579779294316557060353608910021061724416859642393887233085384151152105716189944770321359013928150086210440986711137600802187426282273119485293793542960272644433780977508258541058678190804775844110905777107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e43a65aab067589a3a515e8db4f8d2be1799a5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (424 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-self-determination.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-self-determination.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitale-zelfbeschikking.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalezelfbeschikking.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiy.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiy.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiy.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiy.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiy.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiyfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digital-self-determination.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digital-self-determination.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitale-zelfbeschikking.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalezelfbeschikking.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qiy.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qiy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qiy.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qiy.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qiy.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qiy.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qiyfoundation.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166f00acd0100000403004630440220727d26c510d97de9e9fedab510285e895d45445c4fb1aaff45d7fe98c7156b0102206f4b31188d1de02eb2987f80c551cbc62fafa1084141acb04d7d6b78ba75de03007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166f00acfc60000040300483046022100f2f6f446f5b5d915b97963d3270c4c30742d4e35a053ccbbbb2225d8f514e9ee022100b4850a6862ada8a3d23eac7a92ca87efbed0f4f0c87c761689c058974608390f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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