3down.mit.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f2:fd:f0:e1:84:01:10:da:0e:89:39:87:29:39:de:2a:2c was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=3down.mit.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f2:fd:f0:e1:84:01:10:da:0e:89:39:87:29:39:de:2a:2c
Serial Number (int): 344022735998328088303559572906753287662124
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:dc:05:87:97:2c:d1:81:28:20:cc:8d:f7:78:da:da:99:4d:b3:af
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:4d:05:a3:43:4a:59:36:6f:6e:99:ca:a0:f3:4b:98:0f:49:ec:fc
Fingerprint (sha256): 0c:63:73:3d:38:b5:27:91:b5:ea:d2:b2:b0:cd:3e:06:5b:32:7c:9e:88:fe:ae:f1:b2:bd:ef:9a:93:09:48:03

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 3down.mit.edu

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 3down.mit.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3down.mit.edu
checkrstatus.com
status.accedo.tv
status.avalara.com
status.booqable.com
status.boxdemo.com
status.c9.io
status.chef.io
status.dispatch.me
status.dome9.com
status.elev.io
status.esendex.com
status.finalsite.com
status.forge.lmig.com
status.goshippo.com
status.hivestreaming.com
status.i-parcel.com
status.injixo.com
status.itfreedom.com
status.munzee.com
status.myconnectedsite.com
status.otoy.com
status.pusher.com
status.reevoo.com
status.resdiary.com
status.ringrevenue.com
status.rm.com
status.sa.ucsb.edu
status.skedulo.com
status.smartsheet.com
status.sparkpost.com
status.threatstack.com
status.truecar.com
status.unbelievable-machine.com
status.via.co.uk
status.wistia.com
status.zaius.com
status.zero-one.cc
trust.proscloud.com
www.cloudflarestatus.com

Other certificates including the domain name mit.edu

(limited to 100 certificates)
5692462144159744-fe3.pantheonsite.io
discussions.odl.mit.edu
frankwilczek.mit.edu
5671617594130432-fe3.pantheonsite.io
dreams.media.mit.edu
github-backup.mit.edu
www.wgs.mit.edu
bucket.mit.edu
cf-registration.mit.edu
tstormvideo.ll.mit.edu
clpi.mers.csail.mit.edu
bosefellows.mit.edu
ceepr.mit.edu
somtow-sucharitkul.mit.edu
us.prod.campusgroups.com
cliff-homepage.mcservices1.media.mit.edu
sloanfacultysearches.mit.edu
image.20210408.094303.s11.et.yellsatcloud.com
5724596284162048-fe2.pantheonsite.io
mailto.mit.edu
discussions-ci.odl.mit.edu
covid-stats.wi.mit.edu
bone.mit.edu
nothangout.media.mit.edu
eqaads.ll.mit.edu
listlottery-dev.mit.edu
crowdsensor.org
sciwrite.mit.edu
edu-apps-test.mit.edu
statuspage.io
maz.mit.edu
theta.mit.edu
rmerton.mit.edu
psirudahximenes.com
admissions.emeritus.org
mobilityofthefuture.mit.edu
dome-preview.mit.edu
www.borgeapps.eu
radius.mit.edu
5638203017003008-fe2.pantheonsite.io
aidm.mit.edu
tatacenter.mit.edu
newhouse.mit.edu
sloangroups.mit.edu
mitoc.mit.edu
meche-prod-app-2.mit.edu
olinda.mit.edu
ipespeakerseries.mit.edu
probcomp-2.csail.mit.edu
5750683647082496-fe3.pantheonsite.io
boyerlab.mit.edu
fryonthefly.mit.edu
silvaire.mit.edu
imes-fmp.mit.edu
git.mers.csail.mit.edu
us.prod.campusgroups.com
aldy.csail.mit.edu
beeme.mit.edu
alm.mit.edu
www.gcws.mit.edu
www.create.mit.edu
infiniteseries.mit.edu
mri-rle.mit.edu
5636026810761216-fe1.pantheonsite.io
hsf1.csail.mit.edu
ceepr.mit.edu
ceipostdoc.mit.edu
socialphysics.media.mit.edu
think.mit.edu
hilary.mit.edu
cce.mit.edu
medg.lcs.mit.edu
clubsports.mit.edu
clubareawest.alumclub.mit.edu
ikim.mit.edu
capco-status.polaris.synopsys.com
sdm.mit.edu
msm-dsoos.mit.edu
visor.mit.edu
education.mit.edu
classrooms.mit.edu
terrascope.mit.edu
5638203017003008-fe2.pantheonsite.io
unhangout.media.mit.edu
atlas.mit.edu
www.sloan-hbc.mit.edu
j3.shared.global.fastly.net
cfg2018.csail.mit.edu
ogs.mit.edu
paulbert.media.mit.edu
stat-stage.mit.edu
oc11-jabber-2.mit.edu
j3.shared.global.fastly.net
darts.mit.edu
skullhouse.mit.edu
5636026810761216-fe1.pantheonsite.io
techspace.mit.edu
hkn.mit.edu
create.mit.edu
hecsh1web01.mit.edu

Certificate

The complete raw certificate details for 3down.mit.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc1OtuX2kmNRuoa+JUOq
rMAu2Wfb09Jmse5ie3nqaAsT7n6528jRyFsDoZT8fqk3nd+12asoRaP7QCvBok6z
yWRVQy1muKDB3OsEYJ2xJrjkDbpIpPaHslNp9/QSWa4Zx09g9fArL8MO663p6ge2
2lFPQxZitx2hEePE2bgRrM1t9CC0NVydetFqI6xGwVB89/rSy5h2kYVLOXpL7pav
KDd7JA5lBPRgij3PcuqobrHqRiRR8jigsl6PjcKmbYNeRjN7DW/hmSxEuqIZThrS
dkVZ7YASrmu22uM8ZkrzmmtzhUK1/a1/UpWBw/pB7uAheGQl6lBg3dkLwMehTOOi
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344022735998328088303559572906753287662124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-09 18:56:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-07 18:56:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3down.mit.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22950374089709212987595598877980885203256679013009857009931332478843156572516874957670417363656860937243338587979036652431621847818429184724653437708647471972961373690817828673106393734217881992937539813321026982687603017546151185381856947429048208757271273076529450616572725529113483925682333419269887217922401254732594553936824366690607114069314235624317926926662794774763475059623344659242723726942210876301946880384129418940058048387926217141592669175871363119419214196067214906804301022746760452530712829349416561620708711395331445096249261407624793199797920866299733914622053187519213166401536201078961044955739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fdc0587972cd1812820cc8df778dada994db3af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (820 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3down.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkrstatus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.accedo.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.avalara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.booqable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.boxdemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.c9.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.chef.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.dispatch.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.dome9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.elev.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.esendex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.finalsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.forge.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.goshippo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.hivestreaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.i-parcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.injixo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.itfreedom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.munzee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.myconnectedsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.otoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.pusher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.reevoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.resdiary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ringrevenue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sa.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.skedulo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.smartsheet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sparkpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.threatstack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.truecar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.unbelievable-machine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.via.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.wistia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.zaius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.zero-one.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trust.proscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloudflarestatus.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001665a674d50000004030047304502202de26ffdb05bc687a9a43205c10b07c5ee908a1f245c7580b1f5217b7628e2530221008e62cd59719d3950c603ed79918f9afb7895376d0edb01f2c0b9fdb1ce9031f3007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001665a674eec0000040300473045022100c5c84b34df675f00c5601555e0de547ae096f265248c7ecf05444bd25d1b068f02200f4da80a9eff2f17d54363e8e31828e2aa59a4207bf5cc9434b9ffbbdb7b1e35
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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