difmportal.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a3:40:62:5f:03:a3:6e:96:92:19:49:70:6c:cc:0d:0a:fa was issued on by Let's Encrypt.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=difmportal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a3:40:62:5f:03:a3:6e:96:92:19:49:70:6c:cc:0d:0a:fa
Serial Number (int): 316888464967333257097317738479000478354170
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 28:21:99:75:84:52:bd:9f:14:02:81:68:e9:58:0a:04:9c:08:a2:88
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:ae:f9:66:8b:da:90:42:dd:c0:00:d7:70:9b:7e:62:76:2e:d7:e5
Fingerprint (sha256): 16:c5:c7:dd:61:03:92:0c:72:65:5b:d3:9a:65:9d:51:dc:6d:12:4b:ec:6f:b0:8c:8d:b9:a5:09:21:b5:e9:f2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate difmportal.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for difmportal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

difmportal.com
firestonecompleteautocarebattery.com
fleet-iframe.difmportal.com
fleets-canada.difmportal.com
flwpronight.com
hibdontiresplusbattery.com
offers.pennzoil.ca
offers.pennzoil.com
offers.quakerstate.ca
offers.quakerstate.com
offers.shell.ca
pennzoil-rollback.com
pennzoilautonation.com
pennzoilfirestone.com
pennzoilhibdontiresplus.com
pennzoilhmvrollback.com
pennzoilmicheltiresplus.com
pennzoilmoparoffers.com
pennzoiloffers.com
pennzoilpromotionspepboys.com
pennzoilpromotionspepboys.com.sq1dev.co
pennzoilpromotionspepboys.com.sq1stage.co
pennzoilsyntheticrollback.com
pennzoilwheelworks.com
quakerstatepromotions.com
ru-gtm.difmportal.com
tiresplusbattery.com
www.difmportal.com
www.pennzoil-rollback.com
www.pennzoilautonation.com
www.pennzoilfirestone.com
www.pennzoilhibdontiresplus.com
www.pennzoilhmvrollback.com
www.pennzoilmicheltiresplus.com
www.pennzoilmoparoffers.com
www.pennzoiloffers.com
www.pennzoilpromotions.com
www.pennzoilpromotionspepboys.com
www.pennzoilsyntheticrollback.com
www.pennzoilwheelworks.com
www.quakerstateoffers.com
www.quakerstatepromotions.com

Other certificates including the domain name difmportal.com

(limited to 100 certificates)
portal.shell.com.sq1dev.co
www.quakerstatetiresplus.com
www.quakerstatetiresplus.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
difmportal.com
difmportal.com
portal.shell.com.sq1dev.co
difmportal.com
www.quakerstatetiresplus.com
difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
www.quakerstatetiresplus.com
www.quakerstatetiresplus.com
portal.shell.com.sq1dev.co
difmportal.com
difmportal.com
difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
difmportal.com
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
ru.difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
www.quakerstatetiresplus.com
difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
ru.difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
difmportal.com
www.quakerstatetiresplus.com
portal.shell.com.sq1dev.co
www.quakerstatetiresplus.com
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
www.quakerstatetiresplus.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
difmportal.com
difmportal.com
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
www.quakerstatetiresplus.com
portal.shell.com.sq1dev.co
difmportal.com
portal.shell.com.sq1dev.co
difmportal.com
ru.difmportal.com
portal.shell.com.sq1dev.co

Certificate

The complete raw certificate details for difmportal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37dg9liMcGTjv9NKPLxb
oQ/GuajQ9YOEWFR0AOMoHqs0d0ec3auRIa6y+HNy49v/iXMmcvbrjO0CXb4tnReg
ortv+GkkTOgxUK3L0/nmGr7zqI2zl6OOzR2qMKxn1YPYKkS6b+Xdh/T7pBcpwbfh
n90idxQOh6cI39n1ZhUl+mCXqa5dUfz1Jc593O3P/oUdGs39DKQUf+BlqstMkYY8
MGL2uDIS4bU59UUwvytgdL/Noyy1xBBVQfGIjN8QBcT6kTa941Sin38wqSXeGZxd
KhDmuTKN8EnGnVBDA29I6t0x0HHG/OKuVWr4OIW0wWn/E9QO2EKaopEDQxx9BZh7
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316888464967333257097317738479000478354170
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 17:31:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 17:31:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'difmportal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28241569443741100765710464152107435595284009031905471460112866675657362173815923570850971774886044859058522139331656497095715753711007581367331211532505586660991512757740037377194197493764558567422066008406309848632679500818483202986989200315462783190722066963209076793364596959405586885523131979998835088248976470191389878901443441988118413304786708064722537091690635250247733556161097667962837412686850689082745749736671749236595462516193725235996783190411046019091877149630203932177621143513556917913032669511644950332436257092196143947177255487263887838862801416504038581958989069135036718066798248147000764169201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							282199758452bd9f14028168e9580a049c08a288
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'difmportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firestonecompleteautocarebattery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fleet-iframe.difmportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fleets-canada.difmportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flwpronight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hibdontiresplusbattery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.pennzoil.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.pennzoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.quakerstate.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.quakerstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.shell.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoil-rollback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilautonation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilfirestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilhibdontiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilhmvrollback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilmicheltiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilmoparoffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoiloffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilpromotionspepboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilpromotionspepboys.com.sq1dev.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilpromotionspepboys.com.sq1stage.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilsyntheticrollback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilwheelworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quakerstatepromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru-gtm.difmportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiresplusbattery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.difmportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoil-rollback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilautonation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilfirestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilhibdontiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilhmvrollback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilmicheltiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilmoparoffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoiloffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilpromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilpromotionspepboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilsyntheticrollback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilwheelworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quakerstateoffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quakerstatepromotions.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a6f83bafe0000040300473045022034613c0046a1ca2d02c12d0b709218d23c3ae6d4155c96a4af206397cfb84c64022100b19cebc27884f016dd2138b9b61ca16fe3fd0c1d4801d38bc07c57b39227aae9007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a6f83bb39000004030046304402200bc4c5551526b65ad8166361121b925c61e06e8d13a14c3f5541abc0fdc890a802201cab0a2a7dc8615345d01da9b176c354eb31db1094cf8c6f0d73684b4dffa15f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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