scotthelme.co.uk

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 01:11:9a:69:a0:63:f7:af:f7:08:36:e4:50:ec:25:97:97:6b was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=scotthelme.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:11:9a:69:a0:63:f7:af:f7:08:36:e4:50:ec:25:97:97:6b
Serial Number (int): 93102335725043003926029242460412069779307
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: d5:1d:39:7d:f2:42:10:ce:93:bd:7e:d8:73:d7:48:35:8d:4a:ff:16
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b8:af:7a:d0:bf:79:e7:89:10:f6:90:a6:58:06:dc:df:b8:61:9d:fd
Fingerprint (sha256): 0a:9e:e3:3b:01:2e:7b:a6:aa:26:ae:0a:0d:93:ea:f1:ba:71:44:db:a1:c8:16:e0:31:d5:c3:59:94:fd:31:c6

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate scotthelme.co.uk

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scotthelme.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

scotthelme.co.uk
strongssl.scotthelme.co.uk
weakssl.scotthelme.co.uk
www.scotthelme.com
scotthelme.com
www.scotthelme.co.uk

Other certificates including the domain name scotthelme.co.uk

(limited to 100 certificates)
scotthelme.co.uk
print.scotthelme.co.uk
hpkp.scotthelme.co.uk
ssl2653.cloudflare.com
hpkp.scotthelme.co.uk
sni101751.cloudflaressl.com
scotthelme.co.uk
sni36452.cloudflaressl.com
scotthelme.co.uk
sni101751.cloudflaressl.com
homeassistant.scotthelme.co.uk
sni45819.cloudflaressl.com
hpkp.scotthelme.co.uk
sni101751.cloudflaressl.com
scotthelme.co.uk
sni101751.cloudflaressl.com
sni101630.cloudflaressl.com
sni101751.cloudflaressl.com
scotthelme.co.uk
scotthelme.co.uk
ecdsa.scotthelme.co.uk
hpkp.scotthelme.co.uk
print.scotthelme.co.uk
hpkp.scotthelme.co.uk
sni101751.cloudflaressl.com
sni101751.cloudflaressl.com
sni101630.cloudflaressl.com
scotthelme.co.uk
sni101751.cloudflaressl.com
sni101751.cloudflaressl.com
home.scotthelme.co.uk
scotthelme.co.uk
home.scotthelme.co.uk
sni101751.cloudflaressl.com
rsa2048.scotthelme.co.uk
horizon.scotthelme.co.uk
horizon.scotthelme.co.uk
sni101630.cloudflaressl.com
sni36452.cloudflaressl.com
hpkp.scotthelme.co.uk
scotthelme.co.uk
scotthelme.co.uk
grafana.scotthelme.co.uk
sni101751.cloudflaressl.com
sni45819.cloudflaressl.com
sni101751.cloudflaressl.com
home.scotthelme.co.uk
sni101751.cloudflaressl.com
rsa2048.scotthelme.co.uk
hpkp.scotthelme.co.uk
foo.scotthelme.co.uk
unifi.scotthelme.co.uk
sni101751.cloudflaressl.com
sni36452.cloudflaressl.com
sni101751.cloudflaressl.com
scotthelme.co.uk
scotthelme.co.uk
sni101630.cloudflaressl.com
hpkp.scotthelme.co.uk
scotthelme.co.uk
sni36452.cloudflaressl.com
sni101751.cloudflaressl.com
scotthelme.co.uk
scotthelme.co.uk
scotthelme.co.uk
home.scotthelme.co.uk
sni101751.cloudflaressl.com
whatever.scotthelme.co.uk
sni101630.cloudflaressl.com
grafana.scotthelme.co.uk
sni101751.cloudflaressl.com
sni36452.cloudflaressl.com
foo.scotthelme.co.uk
scotthelme.co.uk
sni101751.cloudflaressl.com
ecdsa.scotthelme.co.uk
scotthelme.co.uk
rsa2048.scotthelme.co.uk
pihole.scotthelme.co.uk
horizon.scotthelme.co.uk
scotthelme.co.uk
scotthelme.co.uk
octoprint.scotthelme.co.uk
scotthelme.co.uk
scotthelme.co.uk
scotthelme.co.uk
sni101751.cloudflaressl.com
sni36452.cloudflaressl.com
sni36452.cloudflaressl.com
scotthelme.co.uk
sni36452.cloudflaressl.com
home.scotthelme.co.uk
sni45819.cloudflaressl.com
sni36452.cloudflaressl.com
scotthelme.co.uk
scotthelme.co.uk
unifi.scotthelme.co.uk
rsa2048.scotthelme.co.uk
home.scotthelme.co.uk
horizon.scotthelme.co.uk

Certificate

The complete raw certificate details for scotthelme.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGdzCCBV+gAwIBAgISARGaaaBj96/3CDbkUOwll5drMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMTIwOTUxMDBaFw0x
NjAzMTEwOTUxMDBaMBsxGTAXBgNVBAMTEHNjb3R0aGVsbWUuY28udWswggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/pIu/3B1clN5GjZoicAEqz/wKEoGN
Hpt3PcPC5FhCISQTSXCU/66bRys6yxjvnJMBNobIYlgzmGNRzpioQqNl4X+QJJA2
qjfQUYO+2QhUoxYVEXPUIjKAHgB52Od5NYTpW+0q089caZankodhcQhC23viSeLM
YgdKG3sEdaL7+zJuNdgZhxg6jvb2GXMGQNRRSL10RHR6f6R2S5zWUHBjXLHOJX9u
PrwfDLHnZGelXpWiYy5bM2Y6tXSxllKxkBi6HwHhrGwh8P6jOO4uFFoFiv43UBFe
k1tgWreDLPZggEnWHzOLOhABWDriIE192Awa39yNxcBj5Yyys+Z0IF8QYbQsGzG8
qqMYqn0h5Vd9eT8wa2KorB1FNrRGORpkG1P1WSjEWvaLH0LFkHhvJmNEufYE7uTl
zJnZsZyy1pMyXCylXfPdmDfb2tx0WeiSqPL/G+EDVGc5lEgq/K0bgTrQUqoafe1m
s7wlIa2BPqtbSdtkJ8nrJgvnzBuXHs0qf1TLTmMjn8/lQJdjDFx0I8tAtEko2DQb
C6O++xxRvBJ5Py8UDf8ycoFVD0hsf9RXpeZxZfU2Qn9WEkVnNiBC6ZlbEX/YDaBx
K2yb7s1RV4HO77TOxhSxQRrneFfmRZSkjmh7GMTsw4ZCrcWPR4cTU2s1YiPGmrBL
PMgvfo0DpsZeQQIDAQABo4IChDCCAoAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTV
HTl98kIQzpO9fthz10g1jUr/FjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmlu
dC14MS5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDEubGV0c2VuY3J5cHQub3JnLzCBjQYDVR0RBIGFMIGCghBzY290dGhlbG1l
LmNvLnVrghpzdHJvbmdzc2wuc2NvdHRoZWxtZS5jby51a4IYd2Vha3NzbC5zY290
dGhlbG1lLmNvLnVrghJ3d3cuc2NvdHRoZWxtZS5jb22CDnNjb3R0aGVsbWUuY29t
ghR3d3cuc2NvdHRoZWxtZS5jby51azCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB
5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2Vu
Y3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5
IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5
IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5k
IGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3
DQEBCwUAA4IBAQBKKdvuVYAA+M+tyzftYw9vzwmNUqIqE8hdiewyepZFXTIPhMTy
yBc9lDhHTk7a1GYgZB2X3dWgKt3pHSgQMyID8TbYxT8HjViFIrv0fLnM+9pLlcEM
k6Y7NkU6enM0DLmwMXnaCAUQmQCaNNLMM7kOOGSYhwQ0deYdkNaCqrN02B8QRWjq
3mOZlYXQGbt0oox0p5S6efGCP3ZWgM3ED1SkS/KpQd3gEqPVEflR8zAIh6LbfhXz
a9KiKMhoecv+dSG5l9d2Vu9LV7Et22K26vcFFJ11xM7BpZ5Q2/ONsXO4uXPNZhGS
cV2f+LKepGJhrQCkIFwzJYGRsFri77UqkmuU
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 93102335725043003926029242460412069779307
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-12 09:51:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-11 09:51:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scotthelme.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781834238436186098010208435411849620740418615291257808702170357446730598152153603256876663051420564509944653476690114554179471881327469971502813076306199514810619039783583017933779141513681599368432937340206619406715143725157015445761736776237978484630763151432940320351674633019163236964118650951107712572870607688268586195123679911901705872428230055551857025373600126202154129904623415317630359860435385279459127139545772677816916017675581981629448548979268701826644464571633132368620174260280853568106213842976007387155236520585445370259394900957533401195287169815134436802180066040396647288617015833792047750408879509106086910915229080866102697567228548927621895389635776575131839576669469460770597324678720644702335196677972369592342730202593468006759155844314893614308675932156332743215762926198124260786895831844309071835378676897220046056488494501981183910866019027627863399949222032518695551931423972755122316928895626076698465866593950844570854899612248111363396463883835429668425866464600756744939502278466968379678899944542899683067056129177617989260784228347453151339898737511675852501405156289020376610434637755266944485118453665634021176635669758751578531181188310380214980515468699710378116436934504925580751131795009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d51d397df24210ce93bd7ed873d748358d4aff16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotthelme.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strongssl.scotthelme.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weakssl.scotthelme.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scotthelme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotthelme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scotthelme.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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