clubmanager.me

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:18:fe:17:21:a5:04:01:54:ec:b5:3a:c9:e3:c5:9d:4f:c3 was issued on by Let's Encrypt.

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=clubmanager.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:18:fe:17:21:a5:04:01:54:ec:b5:3a:c9:e3:c5:9d:4f:c3
Serial Number (int): 269841378617533781281114832103280597618627
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e5:35:81:73:7a:91:4a:d2:c6:ca:51:30:50:a2:3a:98:88:e7:66:a2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 42:7b:e8:a4:59:dc:1b:06:ec:74:a8:e8:23:6f:8f:8e:fb:c5:15:be
Fingerprint (sha256): 18:23:d2:ea:77:01:ef:12:b4:a0:dc:d5:bb:20:4c:eb:ce:55:55:eb:ae:49:88:fd:67:0d:24:9f:fa:26:8c:28

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate clubmanager.me

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clubmanager.me

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afterguard.clubmanager.me
app.tisailing.org
bowtostern.clubmanager.me
clients-pinfirelabs.clubmanager.me
clients-pinfirestudios.clubmanager.me
clients.pinfirelabs.com
clients.pinfirestudios.com
clubmanager.me
demo.clubmanager.me
events.hooferouting.org
events.hooferscubaclub.org
events.hoofersns.org
lessons.hooferriding.org
lessons.hoofersailing.org
members.hoofermountaineering.org
members.hoofers.org
nbss.clubmanager.me
ocsc-sandbox.clubmanager.me
outdoor-uw.clubmanager.me
pssi.clubmanager.me
register.bowtosternboating.com
register.tacomajrsail.org
registration.hooferyouth.org
registration.sailcalhoun.org
registration.sailmpls.org
reservations.pugetsoundsailing.com
reserve.sbsail.com
reserve.texassailing.com
sailcalhoun.clubmanager.me
sailmpls.clubmanager.me
sailsi.clubmanager.me
sandbox-l.clubmanager.me
sandbox-s.clubmanager.me
sbsail.clubmanager.me
seasafaris.clubmanager.me
secure.hoofers.org
spyc.clubmanager.me
ssc.clubmanager.me
texas-sailing.clubmanager.me
tisc.clubmanager.me
tsa.clubmanager.me
tyc-youth.clubmanager.me
yachtxp.clubmanager.me

Other certificates including the domain name clubmanager.me

(limited to 100 certificates)
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
www-source.pinfirelabs.com
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
staging.clubmanager.me
clubmanager.me
docs-source.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
clubmanager.me
clover.clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
www-source.pinfirelabs.com
staging.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
*.clubmanager.me
craft-dev.clubmanager.me
clubmanager.me
*.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
updates.clubmanager.me
clubmanager.me
events.hooferouting.org
clover.staging.clubmanager.me
clover.staging.clubmanager.me
clubmanager.me
utils.clubmanager.me
staging.clubmanager.me
*.clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clover.staging.clubmanager.me
clover.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
utils.clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
pinfirelabs.com

Certificate

The complete raw certificate details for clubmanager.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6huCXPKKQSp8pZJxkwy
uzHfOl+3Kh5gApXBtjOBrzC5ZxddmoTSKs0KYDHUV6xDG9aTcaPPNvK8TWRctAmQ
7mg5DZlK433l1elqz+PHHRo6XTX+Q6vE0fmxX09GMJQf0isTpJfUL1L0tUqaQT+8
TvcoB9zbMfSMNIsJoTrnq94zmJF1Q+JfcCzc3fprSgV5K4VzVinNOxe3f/WyRUAS
aJiuV7dhfX7321FIGxab6aNRPfs7TpNzeNdqpiOlkOuNwSLZewk7smNvZDwIBCDu
by9UO0EqJZSreV0lzQAWvwFLhfYZt7bSZ8V6eD1jCysWfYqAcL6zwKpJidSMUEWc
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269841378617533781281114832103280597618627
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-08 16:22:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-07 16:22:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clubmanager.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23689618874213128968956484977602351108462443863407465459371854683012777196112611417337495349707481567663047459149319787343037547081834269550822962977083078546787160039012966053299277107354589771494728362955598334202327418675605589565260199464309951603271813651787984968812567471417348321279047281960352106413674233401138491306353784700887895919667869022858379955660658753312387108908384925389323333017947067363111068767898013740949383726879437553656921979233150015280641354974805820265138016776836020204083863549224589763426186298691372943601835548642157588888370279360132467207701922576571811972732179094526543371451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e53581737a914ad2c6ca513050a23a9888e766a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afterguard.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tisailing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowtostern.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients-pinfirelabs.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients-pinfirestudios.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.pinfirelabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.pinfirestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hooferouting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hooferscubaclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hoofersns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessons.hooferriding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessons.hoofersailing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.hoofermountaineering.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.hoofers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbss.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocsc-sandbox.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoor-uw.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pssi.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.bowtosternboating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.tacomajrsail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.hooferyouth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.sailcalhoun.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.sailmpls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.pugetsoundsailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.sbsail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.texassailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailcalhoun.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailmpls.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailsi.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-l.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-s.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbsail.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seasafaris.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hoofers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spyc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texas-sailing.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tisc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsa.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyc-youth.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yachtxp.clubmanager.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162a647e79b0000040300463044022036b0883484f0d3d62400254c29cfd320aab23ed29b747e2c7d1c4b16ba2375f002202ed710ccfdb143fa0bac20cdf0752ab6dc39cef656494f85f14af31e88ad056f007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162a647e7bb0000040300483046022100ce266f4a4cbb91bf7bc36493fe460cb3c357d65717d7435822d8a4f8bd6d727a022100d9f5cf7bfed337b9d68e2e4de892c1fcc28d946811f18191549b0f5f64ba4298
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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