libraries.sta.uwi.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8c:2c:eb:5c:c2:98:d5:6a:7a:da:d0:1c:44:73:4a:76:7d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=libraries.sta.uwi.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8c:2c:eb:5c:c2:98:d5:6a:7a:da:d0:1c:44:73:4a:76:7d
Serial Number (int): 309036097267187663596895115682640961369725
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c1:55:37:cc:b4:03:3b:13:cd:db:66:6d:22:db:09:ca:91:bb:df:c9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 51:3f:ab:c7:74:07:de:4f:eb:2d:21:12:78:24:f1:05:ab:52:44:c1
Fingerprint (sha256): 0e:65:4c:c3:41:98:e8:c4:e6:97:66:e3:c7:4f:65:4b:e6:3a:a0:8a:9d:e3:e8:9d:3a:ae:72:61:f9:7a:5c:18

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate libraries.sta.uwi.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for libraries.sta.uwi.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

libraries.sta.uwi.edu

Other certificates including the domain name uwi.edu

(limited to 100 certificates)
moodlerooms.com
uwischolar.sta.uwi.edu
blackboardopenlms.com
*.cavehill.uwi.edu
*.uwi.edu
mysta.uwi.edu
clinicallabs.mona.uwi.edu
uwischolar.sta.uwi.edu
libguides.uwi.edu
moodlerooms.com
uwischolar.sta.uwi.edu
MAIL.STA.UWI.EDU
my.uwi.edu
clinicallabs.mona.uwi.edu
dataverse.sta.uwi.edu
libguides.uwi.edu
idcard.sta.uwi.edu
uwischolar.sta.uwi.edu
*.library.open.uwi.edu
ssrpm.cavehill.uwi.edu
geomatics.sta.uwi.edu
moodlerooms.com
moodlerooms.com
peoplesoftportal1.sta.uwi.edu
ssb2.sta.uwi.edu
uwischolar.sta.uwi.edu
journals.sta.uwi.edu
moodlerooms.com
moodlerooms.com
redcap.mona.uwi.edu
uwischolar.sta.uwi.edu
moodlerooms.com
sta.uwi.edu
uwispace.sta.uwi.edu
uwischolar.sta.uwi.edu
innovation.cavehill.uwi.edu
clinicallabs.mona.uwi.edu
moodlerooms.com
eservices.mona.uwi.edu
requirements.open.uwi.edu
ourvle.mona.uwi.edu
servicedesk.sta.uwi.edu
my.uwi.edu
apps.sta.uwi.edu
libraries.sta.uwi.edu
journals.sta.uwi.edu
journals.sta.uwi.edu
mycas.sta.uwi.edu
careers.sta.uwi.edu
support.mona.uwi.edu
www.mona.uwi.edu
uwischolar.sta.uwi.edu
idcard-login.sta.uwi.edu
test-research-clinic.cavehill.uwi.edu
libraries.sta.uwi.edu
ourvle.mona.uwi.edu
fsweb.sta.uwi.edu
mycas.sta.uwi.edu
my.uwi.edu
*.global.uwi.edu
enroltest.myelearning.sta.uwi.edu
moodlerooms.com
my.uwi.edu
www.uwi.edu
journals.sta.uwi.edu
ban.mona.uwi.edu
uwischolar.sta.uwi.edu
libraries.sta.uwi.edu
uwischolar.sta.uwi.edu
archivespace.sta.uwi.edu
blackboardopenlms.com
staevisionsstvm.sta.uwi.edu
uwischolar.sta.uwi.edu
uwischolar.sta.uwi.edu
libraries.sta.uwi.edu
mycavehill.uwi.edu
apps.mona.uwi.edu
uwischolar.sta.uwi.edu
apps.mona.uwi.edu
libguides.uwi.edu
journals.sta.uwi.edu
downloads.open.uwi.edu
*.cavehill.uwi.edu
staevisionsstvm.sta.uwi.edu
my.uwi.edu
moodlerooms.com
espro.mona.uwi.edu
journals.sta.uwi.edu
sta.uwi.edu
mycas.open.uwi.edu
journals.sta.uwi.edu
moodlerooms.com
servicedesk.sta.uwi.edu
geomatics.sta.uwi.edu
journals.sta.uwi.edu
moodlerooms.com
mail.sta.uwi.edu
*.tle.courses.open.uwi.edu
MAIL.STA.UWI.EDU
uwispace.sta.uwi.edu

Certificate

The complete raw certificate details for libraries.sta.uwi.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgISA4ws61zCmNVqetrQHERzSnZ9MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MTMyMzI0MTFaFw0x
ODEyMTIyMzI0MTFaMCAxHjAcBgNVBAMTFWxpYnJhcmllcy5zdGEudXdpLmVkdTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAInhcTJrybVA0vqZBpfIOAn2
IkduhsvrzZ6Siv7PaaTwRDeeQOhvbvbONEUf2ErNIDE6X5mmP+o1EwnSgbGziwzW
qx5b3rFtRU428UIup51wkKIgkAq51EGfaO4Fmu05nqDKYND8HKIou3QUjKKq0Sm4
wI/NNznRITXAnF5paoXXdMMY9mTE72Zp+QN5H2S72+VNrgGkNAsq88NTThO/fIvY
B9K/Zc/TrLWK8AvOCtJQzdhA/ZaxG34tKcA2vMF84xR8+avVjiMhbMpW9yCcQcYF
fbapQSry4++47+RT4kTqRRhjMoPupGtYCNO0thWQP7jNTITInkpvZNXi1Oo7pvsC
AwEAAaOCAx4wggMaMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUwVU3zLQDOxPN22Zt
ItsJypG738kwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzAgBgNVHREEGTAXghVsaWJyYXJpZXMuc3RhLnV3aS5lZHUwgf4G
A1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUF
BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4M
gZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJl
bHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENl
cnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9y
Zy9yZXBvc2l0b3J5LzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3ANt0r+7LKeyx
/so+cW0s5bmquzb3hHGDx12dTze2H79kAAABZdV2tqEAAAQDAEgwRgIhANYFmMq9
1F5U2kQmNUIzi+1UpdkKtJfM9rl8QY7AdruNAiEAoozjqQvhAhFZ/M9OaQTdWxXd
1IsE8i00omUBt4dU1hYAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0
eAAAAWXVdrjEAAAEAwBHMEUCIQDOe0TWiRVaRMshSn/sIRfHaW81e2LHxm3/Oe6g
E35E9AIgA53R3wIPfOw7mwP91o6Jp/3hqcjpdRflA36yh5c2DfQwDQYJKoZIhvcN
AQELBQADggEBABQ67YlMHKvEuNCuhQeqQDJTL+ZKhWfJ4ijX1Q1IB3Vnh+5Pcccj
EUV93DCxt5AABnWl/VZQ6dQQkA8C0LaoBFdLLexlHgYFMEEjZG5oTxcedABAgpOh
23umN9hkMYSg9K5w0GFRDGRvcemunwL6syaS2wuIcLjC3abVEOM/j4gkEjio13HJ
W3aF1ZR7qVcqeDTCnV2v428heG1Mmf14Zg2RgFOmIMXGkcsgGqK5rzM88xnzWfHF
+LHqPV1wU7T42Uz0rydS2yziI5j4ao0zSzw5hqJgCsU+AYFU/6KR1pBWzcp/FY5C
mbddrAaEG+qFIMknYKRFO/ruG5ez20IM3L0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieFxMmvJtUDS+pkGl8g4
CfYiR26Gy+vNnpKK/s9ppPBEN55A6G9u9s40RR/YSs0gMTpfmaY/6jUTCdKBsbOL
DNarHlvesW1FTjbxQi6nnXCQoiCQCrnUQZ9o7gWa7TmeoMpg0Pwcoii7dBSMoqrR
KbjAj803OdEhNcCcXmlqhdd0wxj2ZMTvZmn5A3kfZLvb5U2uAaQ0Cyrzw1NOE798
i9gH0r9lz9OstYrwC84K0lDN2ED9lrEbfi0pwDa8wXzjFHz5q9WOIyFsylb3IJxB
xgV9tqlBKvLj77jv5FPiROpFGGMyg+6ka1gI07S2FZA/uM1MhMieSm9k1eLU6jum
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309036097267187663596895115682640961369725
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-13 23:24:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-12 23:24:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'libraries.sta.uwi.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17405817460496071320408813869489228045820331722598290424384747387409522059210110823430388856999961494495427323206354794407442819710949304733346758255382239685623922426314157691929826034849520225802561067198759088610657750257431699406752179306900343273006569765220477226471311396768308818165449313673693168146755578896848354527154291738730565184528217652992602299226907235481575356835633388963890127057357684345520209655998952736898656947587550395744989254505881846322845694840581451039243250336647107415292744633714979510216519747368900695685601132392445416108485713860763090233524282413643906779180744736896735487739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c15537ccb4033b13cddb666d22db09ca91bbdfc9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libraries.sta.uwi.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165d576b6a10000040300483046022100d60598cabdd45e54da44263542338bed54a5d90ab497ccf6b97c418ec076bb8d022100a28ce3a90be1021159fccf4e6904dd5b15ddd48b04f22d34a26501b78754d616007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165d576b8c40000040300473045022100ce7b44d689155a44cb214a7fec2117c7696f357b62c7c66dff39eea0137e44f40220039dd1df020f7cec3b9b03fdd68e89a7fde1a9c8e97517e5037eb28797360df4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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