stage.test.ex2-webarch.vip01.952e.blackmesh.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5d:2f:a4:1c:22:6f:8c:52:b8:25:3a:d2:7e:69:fc:83:5b was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stage.test.ex2-webarch.vip01.952e.blackmesh.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:2f:a4:1c:22:6f:8c:52:b8:25:3a:d2:7e:69:fc:83:5b
Serial Number (int): 293046443742050456703790704824241941676891
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:a0:92:77:dc:74:68:07:f6:44:c3:9e:2b:6f:ac:e8:6a:e3:3d:22
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9a:d1:61:aa:8f:eb:ca:41:10:dd:a5:ac:e6:08:80:d8:dd:ec:a1:b8
Fingerprint (sha256): 10:5b:0f:bb:f3:cf:e4:61:3c:2e:c4:67:46:9c:5e:03:62:48:c8:26:52:1c:c2:ea:cf:ae:26:b5:fb:0a:d1:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stage.test.ex2-webarch.vip01.952e.blackmesh.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage.test.ex2-webarch.vip01.952e.blackmesh.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stage.alturahomes.vip01.952e.blackmesh.com
stage.anglehomes.vip01.952e.blackmesh.com
stage.bloomfield.vip01.952e.blackmesh.com
stage.boydhomes.vip01.952e.blackmesh.com
stage.c-rock.vip01.952e.blackmesh.com
stage.charterhomes.vip01.952e.blackmesh.com
stage.danryanbuilders.vip01.952e.blackmesh.com
stage.devonshire.vip01.952e.blackmesh.com
stage.dornhomes.vip01.952e.blackmesh.com
stage.esperanzahomes.vip01.952e.blackmesh.com
stage.ex2-webarch.vip01.952e.blackmesh.com
stage.gehanhomes.vip01.952e.blackmesh.com
stage.kandpbuilders.vip01.952e.blackmesh.com
stage.laxhomes.vip01.952e.blackmesh.com
stage.mountainhouseliving.vip01.952e.blackmesh.com
stage.oakmontliving.vip01.952e.blackmesh.com
stage.ownalandmark.vip01.952e.blackmesh.com
stage.ryderhomes.vip01.952e.blackmesh.com
stage.smithdouglas.vip01.952e.blackmesh.com
stage.southgatehomes.vip01.952e.blackmesh.com
stage.stonefieldhomes.vip01.952e.blackmesh.com
stage.test.ex2-webarch.vip01.952e.blackmesh.com
stage.thrivehomebuilders.vip01.952e.blackmesh.com

Other certificates including the domain name blackmesh.com

(limited to 100 certificates)
855elmp01.blackmesh.com
sandbox.dev.unocha.org
710elmp02.blackmesh.com
*.ucmerced.edu.672elmp01.blackmesh.com
*.blackmesh.com
worldshakesbib.org.602elmp01.blackmesh.com
710elmp02.blackmesh.com
staging.ransomedheart.com.803elmp01.blackmesh.com
deadhorse.blackmesh.com
710elmp02.blackmesh.com
cloud.pmmimediagroup.com
110elas02.blackmesh.com
sandbox.dev.unocha.org
curb1-cos-mp1.blackmesh.com
*.blackmesh.com
710elmp02.blackmesh.com
default.568elmp03.blackmesh.com
sandbox.dev.unocha.org
bowdoinham.com.654elmp01.blackmesh.com
wcmtraining.sfgov3.org
careeradvisor.pwc.com.864elmp01.blackmesh.com
ftsadmin.stage.hpc.568elmp03.blackmesh.com
cloud.pmmimediagroup.com
gms.unochaorg.568elmp03.blackmesh.com
mailhog.568elmp03.blackmesh.com
910elwb01.blackmesh.com
helpspot.457elmp45.blackmesh.com
prod.test.ex2-webarch.vip01.952e.blackmesh.com
deadhorse.blackmesh.com
timeline2018.457elmp20.blackmesh.com
cloud.pmmimediagroup.com
710elmp02.blackmesh.com
stage.test.ex2-webarch.vip01.952e.blackmesh.com
710elmp02.blackmesh.com
dev.merkleinc.com.305elmp13.blackmesh.com
910elwb01.blackmesh.com
910elwb01.blackmesh.com
*.blackmesh.com
assessmentregistry.hrinfo.568elmp03.blackmesh.com
assessmentregistry.hrinfo.568elmp03.blackmesh.com
resakss.org
stage.test.ex2-webarch.vip01.952e.blackmesh.com
dev-2018.aesnet.org.964elmp02.blackmesh.com
ywpvt.org
mailhog.568elmp03.blackmesh.com
dev.nsarchive.gwu.edu.946elmp01.blackmesh.com
710elmp02.blackmesh.com
910elas01.blackmesh.com
stage.test.ex2-webarch.vip01.952e.blackmesh.com
hrinfo.568elmp03.blackmesh.com
850elmp02.blackmesh.com
default.568elmp03.blackmesh.com
staging.ransomedheart.com.803elmp01.blackmesh.com
prod.test.ex2-webarch.vip01.952e.blackmesh.com
assessmentregistry.hrinfo.568elmp03.blackmesh.com
careeradvisor.pwc.com.864elmp01.blackmesh.com
stage.test.ex2-webarch.vip01.952e.blackmesh.com
710ellb5051-vip01.blackmesh.com
910elwb01.blackmesh.com
710elmp02.blackmesh.com
stage.test.ex2-webarch.vip01.952e.blackmesh.com
shoremedicalcenter.org.512elmp01.blackmesh.com
*.800e.blackmesh.com
855elmp01.blackmesh.com
dev.nsarchive.gwu.edu.946elmp01.blackmesh.com
330elmp01.blackmesh.com
627elmp04.blackmesh.com
curb1-cos-mp1.blackmesh.com
stage.unochaorg.568elmp03.blackmesh.com
default.568elmp03.blackmesh.com
curb1-cos-mp1.blackmesh.com
gms.unochaorg.568elmp03.blackmesh.com
assessmentregistry.hrinfo.568elmp03.blackmesh.com
sandbox.dev.unocha.org
938elmp01.blackmesh.com
710elmp02.blackmesh.com
*.blackmesh.com
*.ucmerced.edu.672elmp01.blackmesh.com
910elwb01.blackmesh.com
812elmp01.blackmesh.com
emergencemagazine.org
wcmtraining.sfgov3.org
dev.nsarchive.gwu.edu.946elmp01.blackmesh.com
710elmp02.blackmesh.com
stage.cerf.568elmp03.blackmesh.com
710elmp02.blackmesh.com
stage.test.ex2-webarch.vip01.952e.blackmesh.com
indicatorregistry.hrinfo.568elmp03.blackmesh.com
stage.689elmp01.blackmesh.com
careeradvisor.pwc.com.864elmp01.blackmesh.com
stage.fts.568elmp03.blackmesh.com
indicatorregistry.hrinfo.568elmp03.blackmesh.com
938elmp01.blackmesh.com
910elwb01.blackmesh.com
700elmp01.blackmesh.com
gms.unochaorg.568elmp03.blackmesh.com
627elmp04.blackmesh.com
stage.oewd.sfgov.org.710elmp02.blackmesh.com
hrinfo.568elmp03.blackmesh.com
indicatorregistry.hrinfo.568elmp03.blackmesh.com

Certificate

The complete raw certificate details for stage.test.ex2-webarch.vip01.952e.blackmesh.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293046443742050456703790704824241941676891
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-05 12:59:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-05 12:59:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage.test.ex2-webarch.vip01.952e.blackmesh.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 746816705301008297837798155683019440037900783942998286223855058298605352078406353188768080838434682055306824155699283359111950387373811777454727543755821379131361353517790517560012215783896871238733628298289507196149728604034496278630974414742174264845086251838219268488149463784971704311787347204009601872223793773542085775640969222742750788177157426941167180950738242160410456601989370494838139713061100836531870529514285836088777400544600906101380776872420493845070272275073148700654883120812837905231413212080114332601299032534720710181926326378064213309684491517660116583571052644439190412088479114563301900177181982840835313918821276340864745852416746979871319613039206443212036221995878337358890902152336671765907043634766657155784785460942800098789482491141832831385170858591250444810968395933017969271158455531214907490603301842411392683862743562644355436015361146822149926222427213823096465708100840117362224730600857733381564508604951131840187874897823194095828444835019608744211500405610282742557314800220294354165278993587350586494357553230255925747845247382360967514260929932107974889941048110671652691887367812989702261963253839391889032170240872334050547335296231544603453105954062018302707800869483464435523249019551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aaa09277dc746807f644c39e2b6face86ae33d22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1040 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.alturahomes.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.anglehomes.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.bloomfield.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.boydhomes.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.c-rock.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.charterhomes.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.danryanbuilders.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.devonshire.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dornhomes.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.esperanzahomes.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ex2-webarch.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.gehanhomes.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.kandpbuilders.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.laxhomes.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mountainhouseliving.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.oakmontliving.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ownalandmark.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ryderhomes.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.smithdouglas.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.southgatehomes.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.stonefieldhomes.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.test.ex2-webarch.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.thrivehomebuilders.vip01.952e.blackmesh.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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