fook.nuv.uit.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:87:03:5e:99:86:54:65:d7:f2:bf:d0:79:ab:cc:41:1c:ca was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fook.nuv.uit.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:87:03:5e:99:86:54:65:d7:f2:bf:d0:79:ab:cc:41:1c:ca
Serial Number (int): 394391742135111099173203461029885613513930
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7d:2f:9d:5d:9c:0f:42:47:b1:25:fa:79:eb:ae:8f:c8:1a:ee:03:01
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8f:1f:dc:59:36:15:61:41:63:92:47:46:41:da:cf:c8:09:e3:26:28
Fingerprint (sha256): 0d:fb:11:49:02:74:c7:34:ad:2b:44:9f:78:4e:11:1c:ab:74:09:6c:b3:6a:f5:e5:7a:b5:84:2b:bb:cc:13:5c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fook.nuv.uit.no

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fook.nuv.uit.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.delrett.no
dev.norgesuniversitetet.no
fook.nuv.uit.no
tek.nuv.no

Other certificates including the domain name uit.no

(limited to 100 certificates)
mmp.sfb.uit.no
udoc.uit.no
fook.nuv.uit.no
dynserv.eiscat.uit.no
ansatte.uit.no
webarkiv.uit.no
james.ub.uit.no
list.uit.no
heimdal.uit.no
arkivmunin.uit.no
alta-mp.uit.no
digitalmappe.uit.no
uhskypepool02.uhad.no
combineo.cs.uit.no
storefront.uit.no
tdmwiki.uit.no
lync2013pool.uit.no
uhskypepool02.uhad.no
sip.s2.l.uhad.no
inf2900v19.cs.uit.no
netscalermgmt.cc.uit.no
trfl.uit.no
post.ifi.uit.no
uhskypepool01.uhad.no
startiot.cs.uit.no
mmp.sfb.uit.no
kakeboksen.td.org.uit.no
gtdict.uit.no
dynserv.eiscat.uit.no
olyvia.uit.no
udoc.uit.no
dynserv.eiscat.uit.no
aurora.uit.no
cage.uit.no
dua.uit.no
cag.uit.no
avtalekatalogen.uit.no
uhskypepool02.uhad.no
feidehotell-test.uit.no
ise.uit.no
keycard-api.uit.no
nsm-ts.duppedingser.uit.no
nav.uit.no
arctos.uit.no
manntall.uit.no
mmp.sfb.uit.no
gtweb.uit.no
harstad-mp.uit.no
avtalekatalogen.uit.no
sql-report.ad.uit.no
priweb.uit.no
sbmlmod.uit.no
uhskypepool01.uhad.no
fr.uit.no
alta-mp.uit.no
uitbeta.uit.no
immunology.uit.no
arctos.uit.no
uit.no
Russisk.uit.no
utstyr-iis.uit.no
radius2.uit.no
parkering.uit.no
cirfa.uit.no
EX20.ad.uit.no
blyant.uit.no
scom.uit.no
nikt2019.uit.no
fook.nuv.uit.no
spaceweather.uit.no
vch1.cc.uit.no
wolf.uit.no
todos.uit.no
feidehotell-test.uit.no
mmp.sfb.uit.no
td.org.uit.no
manntall.uit.no
highnorth.uit.no
mail.uit.no
uhskypepool01.uhad.no
wac.uit.no
thnetii.td.org.uit.no
munki.uit.no
foto.uit.no
uhskypepool02.uhad.no
munkiwa.uit.no
nikt2019.uit.no
uhskypepool01.uhad.no
rhd.uit.no
gtsvn.uit.no
webmail.wpuitstaging.itpartner.no
cage.uit.no
w3w.uit.no
iad12.cs.uit.no
systemx.uit.no
thnetii.td.org.uit.no
orakel.uit.no
static.uit.no
spips.uit.no
kakeboksen.td.org.uit.no

Certificate

The complete raw certificate details for fook.nuv.uit.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgISBIcDXpmGVGXX8r/QeavMQRzKMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MDkwODIwMDJaFw0x
ODA4MDcwODIwMDJaMBoxGDAWBgNVBAMTD2Zvb2subnV2LnVpdC5ubzCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAMHEaIp1Rb12Y4FgqXZc130Iuum56lg6
ql7emCjyjAXZrTOzvLX8rNxqabP/HR13HlXpHnrAR5Er3nEiX9EqMD468awhkaqw
u2dT2Gk5Tj1Lachaoz44pX1NjM3XZ7qYi8LJOeQGOL34voIElwqZINf0bfURMPyL
B+vg2rLYjOWXQz6sk8uaS0h+AyD8vMLJWRJZk7CFQ5aRrCdWhxpM8nAP1wmkO/Ia
eooR43N2amXP4o2t00zONSnstxEDJoHTOBoLExTfWlbJLniPPBmkYOI08K1+Bmiy
SN2ut++dw7f4SCrhi5pnVW6hwRzjTPdjCsUC2BYLCf0y2H99HY4OcgrzO6YKsXVd
28LsaPcHjI5rkke8B9gh5it96UKDFO451vg4bwtu4f5+Xbm4X2BMeoX6tI2RZPX0
gl/9d2MfMxxOqLrT0lGnhaKwrQmIvcyfYQQHMjiP0MUZDMlhGHEEPx4+cd9nlnjz
oHGdjn0sEtlRsgzacvnulrqLyG1F0mQejgiecm/8lt0kfVXAKkB0eK/x1Vnk9+lU
rRfsXzmvFnAIZGQX9do4drzCFEEXgGD9shr9jTMOIY37edIGPdABv1iEyNVskmgE
XhUWb7pv9z8cA1A4+LFP9JvFMjZKEPz0Ml6G1KFOeUgbShSn60Q4ZsnhPr0T5gSv
jtd0qZeNMBB9AgMBAAGjggNQMIIDTDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFH0v
nV2cD0JHsSX6eeuuj8ga7gMBMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wUgYDVR0RBEswSYIOZGV2LmRlbHJldHQubm+C
GmRldi5ub3JnZXN1bml2ZXJzaXRldGV0Lm5vgg9mb29rLm51di51aXQubm+CCnRl
ay5udXYubm8wgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEB
MIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYI
KwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGll
ZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNl
IHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xl
dHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA
8QB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABY0QzTPIAAAQD
AEcwRQIgdL04FrCfCP5pFHYCNO0f88SDV8hG8Gttefbls4exbVYCIQDeKltM/L5x
C/VTjEIAM5IqEqg8/7MY2LkOKFLgRpn/3wB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6
KXLcpMMM9OVFR/R4AAABY0QzTN0AAAQDAEgwRgIhAI7mecK5lM3HkOZG1SEUSEQI
zmU0bFANjrh+gZNPcfKCAiEAmxRXFpFBw9BuII4M2CbBwOeZBKvzXghjrMrFtEG4
SqcwDQYJKoZIhvcNAQELBQADggEBAEDUhPs0q5yD0/OnyZnSaykPGWtOOGs5bzhE
VhpYE4sbzbfzZYQTmhwqHZ7nwg/X4MBH9BMfu53dMclIi3VvAsWww0DxWjXWqR3N
ZEbhoDcHqpjYkzE4Q9IHk1O6PkUb63Jw2f583fQZCL3Jlu9NdhFIIGPjYm5zJR6P
FKmhxe1+Rmz2dBu/ABd4W+j0eQwSaJG2h/8R7Mvqrb+HOW+9BNHvGgBnx9UWKS+8
TupVFcOgkajzN0ZVxJL8xN3sBLLwgUPrfO8flrTX5ykDaEF6nvGQwK3n8TxNmaDT
JefW/UmUH5fNsSY7lzAHhjVCJxkVUBLPVXuXoLtAhTXnNQ7wacw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394391742135111099173203461029885613513930
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-09 08:20:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-07 08:20:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fook.nuv.uit.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790501290330268554095364164278298418183823397357478512044837311426766602018966482437007673593189415963432899842375315511426551697551352767186762267504229376861332573265150873863599164189438296865329934483367184758952825065146394691809638583260790616019759101460246588391344517537340317722582467667754502159223722444891152381188523192513177835952003990146105193074764909503624510236411477057788776389015962496221453028233733293342952532852399499877787176383313795092437998577725683333402216135883238308912237166696619508278328556150827212540149513899836249422797680695216949091464421385716240515837218362814351528561273429188561261153100366857837828293520995731488003327482000433448293028623381795728812858650547741925427383345236404890912012942842998949527197809615386724122272931706926477041364609027785280244003590849713937345393204354355723096767507053399409787541756395566308499202335744988661291754387073413608771273534842298968328285426445731770900881667936321389408232602675671042008013505428855574732084327242668001058521084010445412510540198993910705975857869333636504651492639855135365444798027887769873025109061355964570738166949437572427122383489732041813884967443706651462988616598772363776833059279512651682947531804797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d2f9d5d9c0f4247b125fa79ebae8fc81aee0301
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.delrett.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.norgesuniversitetet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fook.nuv.uit.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tek.nuv.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016344334cf20000040300473045022074bd3816b09f08fe6914760234ed1ff3c48357c846f06b6d79f6e5b387b16d56022100de2a5b4cfcbe710bf5538c420033922a12a83cffb318d8b90e2852e04699ffdf007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016344334cdd00000403004830460221008ee679c2b994cdc790e646d52114484408ce65346c500d8eb87e81934f71f2820221009b1457169141c3d06e208e0cd826c1c0e79904abf35e0863accac5b441b84aa7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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