alps.ptma.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:72:85:d3:12:1d:ea:8f:a5:aa:fb:9a:e2:9c:05:bc:ff:5f was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alps.ptma.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:85:d3:12:1d:ea:8f:a5:aa:fb:9a:e2:9c:05:bc:ff:5f
Serial Number (int): 300306930889797852164100909306310949666655
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cc:96:07:14:a3:9b:48:d9:0b:08:d5:ab:78:14:43:28:13:56:e9:00
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7d:d7:63:ad:17:9d:86:73:9e:28:c0:8c:f8:28:e0:61:b7:c5:57:ff
Fingerprint (sha256): 18:b9:42:6b:26:2a:19:f5:9a:03:4a:13:54:be:08:84:c3:61:6f:9a:d3:40:93:2f:34:1d:8f:51:82:9a:5a:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alps.ptma.pl

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alps.ptma.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alps.ptma.pl
bialystok.ptma.pl
gliwice.ptma.pl
katowice.ptma.pl
krakow.ptma.pl
socn.ptma.pl
sogz.ptma.pl
sos.ptma.pl
szczecin.ptma.pl
www.alps.ptma.pl
www.bialystok.ptma.pl
www.gliwice.ptma.pl
www.katowice.ptma.pl
www.krakow.ptma.pl
www.socn.ptma.pl
www.sogz.ptma.pl
www.sos.ptma.pl
www.szczecin.ptma.pl

Other certificates including the domain name ptma.pl

(limited to 100 certificates)
sok.ptma.pl
ptma.pl
katowice.ptma.pl
spa.ptma.pl
socn.ptma.pl
sogz.ptma.pl
www.warszawa.ptma.pl
alps.ptma.pl
spa.ptma.pl
lodz.ptma.pl
spa.ptma.pl
spa.ptma.pl
pulawy.ptma.pl
pulawy.ptma.pl
www.forum.ptma.pl
sok.ptma.pl
alps.ptma.pl
lodz.ptma.pl
ptma.netstrefa.pl
ptma.pl
sopiz.ptma.pl
rozdrazew.ptma.pl
ptma.pl
som.ptma.pl
alps.ptma.pl
www.ptma.netstrefa.pl
ptma.netstrefa.pl
alps.ptma.pl
www.wroclaw.ptma.pl
ptma.netstrefa.pl
ptma.netstrefa.pl
som.ptma.pl
sopiz.ptma.pl
ptma.pl
sopiz.ptma.pl
pulawy.ptma.pl
ptma.netstrefa.pl
sos.ptma.pl
som.ptma.pl
warszawa.ptma.pl
socn.ptma.pl
islandia.ptma.pl
ptma.pl
sos.ptma.pl
forum.ptma.pl
historia.ptma.pl
sogz.ptma.pl
wyprawy.ptma.pl
warszawa.ptma.pl
ptma.pl
pulawy.ptma.pl
ptma.pl
sogz.ptma.pl
katowice.ptma.pl
wyprawy.ptma.pl
katowice.ptma.pl
sok.ptma.pl
www.grudziadz.ptma.pl
www.ptma.netstrefa.pl
ptma.netstrefa.pl
gliwice.ptma.pl
sos.ptma.pl
rozdrazew.ptma.pl
socn.ptma.pl
sopiz.ptma.pl
pulawy.ptma.pl
ptma.netstrefa.pl
sok.ptma.pl
sok.ptma.pl
krakow.ptma.pl
www.krakow.ptma.pl
alps.ptma.pl
wyprawy.ptma.pl
sok.ptma.pl
alps.ptma.pl
periapsis.ptma.pl
mail.ptma.pl
ptma.pl
sos.ptma.pl
spa.ptma.pl
pulawy.ptma.pl
spa.ptma.pl
lodz.ptma.pl
rozdrazew.ptma.pl
warszawa.ptma.pl
alps.ptma.pl
katowice.ptma.pl
www.poznan.ptma.pl
krakow.ptma.pl
ptma.netstrefa.pl
sok.ptma.pl
socn.ptma.pl
pulawy.ptma.pl

Certificate

The complete raw certificate details for alps.ptma.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGiTCCBXGgAwIBAgISA3KF0xId6o+lqvua4pwFvP9fMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MDQxNDE3NDdaFw0x
OTA3MDMxNDE3NDdaMBcxFTATBgNVBAMTDGFscHMucHRtYS5wbDCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBANhbf0IwJXEqAlZhVaBSCZjWX3Sh/6E37NLp
cKGff9gkjTHE8BEhBNihMmhMu8eSD8+OSG1ldm8US4hygKCn6fuTFyx7mcl1JnhZ
QelhLGzzf9gFJPzUb/dpGuR48Zq7vL/8CuvDadI9e3ZO7Fpu6DDtqgdQ/OBxeICz
b0SjjlY1oAURkQLPqmqc/r+u1yo02suMHzWi1Af9fqA4mm9sDyj2+CcKMb54UWuM
jv1x/7bl3AewCDRA7vN11YwGxDt1EoO1nD3iRvkoKIq5c7zJMazqB2AyENAOGOeT
WpSQ0/OyKjMSIJ7hAk0rqFrt+eCRV8zAspcGesYyGroCEhQ4zNMCAwEAAaOCA5ow
ggOWMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUzJYHFKObSNkLCNWreBRDKBNW6QAw
HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh
MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
LzCCAU8GA1UdEQSCAUYwggFCggxhbHBzLnB0bWEucGyCEWJpYWx5c3Rvay5wdG1h
LnBsgg9nbGl3aWNlLnB0bWEucGyCEGthdG93aWNlLnB0bWEucGyCDmtyYWtvdy5w
dG1hLnBsggxzb2NuLnB0bWEucGyCDHNvZ3oucHRtYS5wbIILc29zLnB0bWEucGyC
EHN6Y3plY2luLnB0bWEucGyCEHd3dy5hbHBzLnB0bWEucGyCFXd3dy5iaWFseXN0
b2sucHRtYS5wbIITd3d3LmdsaXdpY2UucHRtYS5wbIIUd3d3LmthdG93aWNlLnB0
bWEucGyCEnd3dy5rcmFrb3cucHRtYS5wbIIQd3d3LnNvY24ucHRtYS5wbIIQd3d3
LnNvZ3oucHRtYS5wbIIPd3d3LnNvcy5wdG1hLnBsghR3d3cuc3pjemVjaW4ucHRt
YS5wbDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkC
BAIEgfQEgfEA7wB2AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAAB
aejtbHIAAAQDAEcwRQIhAPgZ9ZrELf73LVrm0dizvSluIXqYXgFaT8YsrXoHsZV5
AiAR4NdiWdfC3OigfuCFroSyK5YK40Aed/s/ueMQymkmuAB1AGPy283oO8wszwty
hCdXazOkjWF3j711pjixx2hUS9iNAAABaejtbOEAAAQDAEYwRAIgeHc9Cu39tOjl
aFsYI/+dKX3/2pqg1weEvCBc1J6C7wQCIGehFU1mq3wJr7vvP+WVMwO9cXZBGpdj
15B0pZduA87eMA0GCSqGSIb3DQEBCwUAA4IBAQBTFm4tDRtG0zcYDhddmNIJINGY
lNPHRN0y1bWO/MHFFak5Sf4uU81ImFkHH1UtFd+h4GxwGorsmtBLIrjEmWpPLtyX
d9fE/s2gT/jT+sPHAKCW+relP96xvbR8qdqKvarNmfm6gDKM9ygXcbeDwLLUCAqi
Z4BFPc78ewl/4vvadTS3Y7OiTcRp/qwgchsvUCT0nR6D1tWvUj90G12Ypvf0Ud+W
2mK12ZPz81zYQmtdUr5t6OHEbFKwEi/dZCvAlZRaQG6/xWiLaJ4Dikr0k3EUct+k
mmjn3LLdUhWWHL0P+ZZXtRH0H2jsKEw5q0x+uJgJb+Sz9iwRCil+3xO2hgTE
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ft/QjAlcSoCVmFVoFIJ
mNZfdKH/oTfs0ulwoZ9/2CSNMcTwESEE2KEyaEy7x5IPz45IbWV2bxRLiHKAoKfp
+5MXLHuZyXUmeFlB6WEsbPN/2AUk/NRv92ka5Hjxmru8v/wK68Np0j17dk7sWm7o
MO2qB1D84HF4gLNvRKOOVjWgBRGRAs+qapz+v67XKjTay4wfNaLUB/1+oDiab2wP
KPb4JwoxvnhRa4yO/XH/tuXcB7AINEDu83XVjAbEO3USg7WcPeJG+SgoirlzvMkx
rOoHYDIQ0A4Y55NalJDT87IqMxIgnuECTSuoWu354JFXzMCylwZ6xjIaugISFDjM
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300306930889797852164100909306310949666655
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-04 14:17:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 14:17:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alps.ptma.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27312592776107603064460065127430291345529802042828726703752661027703691949868501042232618529340781364486044377286761881853369210488931535898650539935529443828482663345420395900661073442972226954845056653915278406053766103872311468452548879485258929228104080284265151060540725032325687027164041421313970006455290319702900104367653361851953830983075175637353860455354295296951753609013889645169858840212585828798642735428627326861178381835120054999871609310338197145789886905631745715969071406031203054329806710157424208777653428221494273393629574961541820307022350639490182768561305600871064046481672731940246494170323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc960714a39b48d90b08d5ab781443281356e900
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (326 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alps.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bialystok.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gliwice.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katowice.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krakow.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socn.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sogz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sos.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'szczecin.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alps.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bialystok.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gliwice.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katowice.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krakow.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.socn.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sogz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.szczecin.ptma.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169e8ed6c720000040300473045022100f819f59ac42dfef72d5ae6d1d8b3bd296e217a985e015a4fc62cad7a07b19579022011e0d76259d7c2dce8a07ee085ae84b22b960ae3401e77fb3fb9e310ca6926b800750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169e8ed6ce10000040300463044022078773d0aedfdb4e8e5685b1823ff9d297dffda9aa0d70784bc205cd49e82ef04022067a1154d66ab7c09afbbef3fe5953303bd7176411a9763d79074a5976e03cede
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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