act.presenteaction.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:55:fe:2f:3b:b7:ba:4d:9f:20:c4:7f:6c:0d:8e:b0:de:ed was issued on by Let's Encrypt.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=act.presenteaction.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:55:fe:2f:3b:b7:ba:4d:9f:20:c4:7f:6c:0d:8e:b0:de:ed
Serial Number (int): 290598728143660807509009183108863850766061
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0b:93:3c:7d:6a:f7:fc:8c:99:4e:68:20:53:f0:c8:cb:32:48:5e:51
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:2d:b1:05:56:ce:c5:80:2c:9c:25:91:c2:52:ca:5e:6b:9d:56:bd
Fingerprint (sha256): 16:54:f5:4b:24:ba:e6:e6:78:ff:aa:b5:e9:d8:97:b2:03:60:50:ff:6b:21:88:44:fc:58:5a:02:12:4b:46:f1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate act.presenteaction.org

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for act.presenteaction.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

act.andrewromanoff.com
act.ayannapressley.com
act.beaherofund.com
act.presenteaction.org
act.progressivetakeover.org
act.realjusticepac.org
act.rokhanna.com
act.sumofus.org
act.theirworld.org
act.thesyriacampaign.org
act.weareultraviolet.org
act.winwithoutwar.org
act.yang2020.com
act.zazim.org.il
action.storyofstuff.org
action.turnoutpac.org
herofund.whitehelmets.org
peoplesconvoy.com
peoplesmillion.whitehelmets.org

Other certificates including the domain name presenteaction.org

(limited to 100 certificates)
act.one.org
action.standupamerica.com
act.onewisconsinnow.org
act.johnfetterman.com
act.fusewashington.org
act.presenteaction.org
act.boldprogressives.org
www-default.actionkit.com
www-default.actionkit.com
act.medicare4all.org
www-default.actionkit.com
act.progressnownm.org
act.presenteaction.org
donate.demandaplan.org
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
act.realjusticepac.org
act.pollinis.org
faithfulamerica.org
action.standupamerica.com
act.abwt.org
act.defendvotingrights.org
secure.presenteaction.org
act.ourrevolution.com
www-default.actionkit.com
go.tonyevers.com
act.beaherofund.com
act.ourrevolution.com
act.onewisconsinnow.org
act.progressva.org
www-default.actionkit.com
act.fusewashington.org
act.onewisconsinnow.org
act.ourrevolution.com
act.fusewashington.org
act.occupydemocrats.com
www.nowarwithiran.org
act.bcndp.ca
act.onewisconsinnow.org
act.fusewashington.org

Certificate

The complete raw certificate details for act.presenteaction.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIICDCCBvCgAwIBAgISA1X+Lzu3uk2fIMR/bA2OsN7tMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTIxNjU1NTFaFw0y
MDAzMTExNjU1NTFaMCExHzAdBgNVBAMTFmFjdC5wcmVzZW50ZWFjdGlvbi5vcmcw
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDWUplRgyZpkwYSmo27/FB4
j60stsJ0Fvj00Q3YCwPQxlE52987d5J/6SnEEsnKdhSsyXkUZ+aHNvJ6k283/Zb2
eAs7kGxcgPtpby5WKG7Hu0bn0fej7dlvRV0qBrtyMHpqF0hDZVOOMiLQujAJAIXi
7yghM/9BvnSB8Lb0aHYd4I4VUAfqf5oJ+z4wNBxS+nlqzrN/N4qnpjxOg6CQanZn
hOFTdBYVdN+92CIGZPtZHKKoUWlRPm6B4zvgiV4psGTPQPrFEC29NL8ubcvormml
Vk//9xK1AY25gxMdvMxfNqLqm6VyW2Avp+wAai4BuC+WHxLC5mOIRvK1I01JZ6Dm
oGu5RIKysVqFQYEAezJFQtiX/oS/5UNshcmfLbz6IeXbqvgFQow4LJJZhY/RuWbh
igSX2DiuikXl53oE5a0cl0Dxk3NhIZlfWa8vaOjPXO9was086k62tJRTjpZ5owNI
aj7utJxbHUdYthzLDID1TPjf0DcVs1PPOABed5pj7AtDxtkCQ2+Jo02h8o05d+vd
hYvwKLWddwiyQoDUvdowdbOUpYE3tp2BpsERcPQmI84VQIuYF0f0Ae9d+vkeaXbG
MbFoK3o0ofAC9Yeq9T4GmuJPOt8o3KJ69H6lN+DAWhteb9rnpEkhBnlpCgoRdVqP
zV+Q1pPMlz15zTcZb1GXrwIDAQABo4IEDzCCBAswDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBQLkzx9avf8jJlOaCBT8MjLMkheUTAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j
ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIIBxAYDVR0RBIIBuzCCAbeCFmFj
dC5hbmRyZXdyb21hbm9mZi5jb22CFmFjdC5heWFubmFwcmVzc2xleS5jb22CE2Fj
dC5iZWFoZXJvZnVuZC5jb22CFmFjdC5wcmVzZW50ZWFjdGlvbi5vcmeCG2FjdC5w
cm9ncmVzc2l2ZXRha2VvdmVyLm9yZ4IWYWN0LnJlYWxqdXN0aWNlcGFjLm9yZ4IQ
YWN0LnJva2hhbm5hLmNvbYIPYWN0LnN1bW9mdXMub3JnghJhY3QudGhlaXJ3b3Js
ZC5vcmeCGGFjdC50aGVzeXJpYWNhbXBhaWduLm9yZ4IYYWN0LndlYXJldWx0cmF2
aW9sZXQub3JnghVhY3Qud2lud2l0aG91dHdhci5vcmeCEGFjdC55YW5nMjAyMC5j
b22CEGFjdC56YXppbS5vcmcuaWyCF2FjdGlvbi5zdG9yeW9mc3R1ZmYub3JnghVh
Y3Rpb24udHVybm91dHBhYy5vcmeCGWhlcm9mdW5kLndoaXRlaGVsbWV0cy5vcmeC
EXBlb3BsZXNjb252b3kuY29tgh9wZW9wbGVzbWlsbGlvbi53aGl0ZWhlbG1ldHMu
b3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB
BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIE
AgSB9ASB8QDvAHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFu
+0Cw6QAABAMARzBFAiBglxb7Uu2M8vSOZAnldM8cSjgRFQt3w/sYF4KRnBvs1QIh
AMBcbQTLaPvUqwYrCAJjXH6Sq/OG5o2Sw3HZTdM5xCBjAHUAB7dcG+V9aP/xsMYd
IxXHuuZXfFeUt2ruvGE6GmnTohwAAAFu+0CxFgAABAMARjBEAiALX5uDKFp7w3bS
b8Pkp/XuON/OFedOjcGQm7krRMUr1AIgPVhNHU34yA+4W56ddyqli+evN1Qypo1F
+OymqQgw3ZQwDQYJKoZIhvcNAQELBQADggEBAE3A90y5nw2213axgeR5eifv+RAv
Q+GFqIuWFTco+BpjlwkIBpymVeSj7/8hSS9AZHH7YowX1CHdgOsp7ut/2f8F+NCw
ICWtjuwi218n7w3XIU5E+l9recw2SNHyLF0u1Z6IWkl8vJCb/AIKBVdDYPerOxeY
FKMQYwRoCuDibjtZKjY9QqdvhOtOJwqxvpm8mhYIhJ8ntM9Q+/an2cs5eryuyddd
hoKo7zonoiWSy81zCsQGX3ERlwkIS9RfUT5Z2iunGRMdMvWTiyIh0zHb+zJTBBno
Jy/YpH5Du0dlVCsWudgHFPq3kaAOPRsviXLhILRtaw1rSKbfH7oGp0s7Edw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290598728143660807509009183108863850766061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 16:55:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 16:55:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'act.presenteaction.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874360135683371888628970527359784822320709839866582913027367078133638737392051127471305583093050532523521102822156651778043824621716177899997903463228696881991371071630153934605975422292408994846037865465446471135256561434846957611839212070532037363100879774132158573055031286045651768771236546414811092591422799057811187233302538253834866969143547034492967223244785529814938565569746354188791843030933205028251766417862991197382596061338475261567408657158526543834003445585928170476460063222334299032444067902347278219822498920616493856375579344946273071213227287398710128001238813702940664354774067847684704497918262405332107891209071387110140240899271774850837812539191375083901054477731170088768824962056455571141415806401055751288545403247007511125697445002501612866461169599509894921433707239758226601540585123993560122220923872604328264415138698362552775427740554921317155725704738442471349694683350223098007373058688610858910856613087960086581409938901412644234910514323574302042767681114517760746999525106750583762903447610693384572455537765865329572522772261470539014303778722428152046455439748720391836214748361922330824443124093104008570410225981279691548960260614788780687790196719452821009765215325688272424287463380911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b933c7d6af7fc8c994e682053f0c8cb32485e51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.andrewromanoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ayannapressley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.beaherofund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.presenteaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressivetakeover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.realjusticepac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.rokhanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.sumofus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.theirworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.thesyriacampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.weareultraviolet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.winwithoutwar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.yang2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.zazim.org.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.storyofstuff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.turnoutpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herofund.whitehelmets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesconvoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesmillion.whitehelmets.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016efb40b0e900000403004730450220609716fb52ed8cf2f48e6409e574cf1c4a3811150b77c3fb181782919c1becd5022100c05c6d04cb68fbd4ab062b0802635c7e92abf386e68d92c371d94dd339c4206300750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016efb40b116000004030046304402200b5f9b83285a7bc376d26fc3e4a7f5ee38dfce15e74e8dc1909bb92b44c52bd402203d584d1d4df8c80fb85b9e9d772aa58be7af375432a68d45f8eca6a90830dd94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004dc0f74cb99f0db6d776b181e4797a27eff9102f43e185a88b96153728f81a63970908069ca655e4a3efff21492f406471fb628c17d421dd80eb29eeeb7fd9ff05f8d0b02025ad8eec22db5f27ef0dd7214e44fa5f6b79cc3648d1f22c5d2ed59e885a497cbc909bfc020a05574360f7ab3b179814a3106304680ae0e26e3b592a363d42a76f84eb4e270ab1be99bc9a1608849f27b4cf50fbf6a7d9cb397abcaec9d75d8682a8ef3a27a22592cbcd730ac4065f71119709084bd45f513e59da2ba719131d32f5938b2221d331dbfb32530419e8272fd8a47e43bb4765542b16b9d80714fab791a00e3d1b2f8972e120b46d6b0d6b48a6df1fba06a74b3b11dc