www.brooke.k12.wv.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5c:d7:27:38:ed:61:8e:d6:4c:67:ed:4a:65:75:e7:4b:ff was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.brooke.k12.wv.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5c:d7:27:38:ed:61:8e:d6:4c:67:ed:4a:65:75:e7:4b:ff
Serial Number (int): 292928823225300523395243109705623894707199
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c6:a2:83:ff:a6:97:a3:18:91:e5:7a:71:1c:9f:16:12:c6:66:46:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1a:cd:f5:6f:ee:1d:7c:bc:a6:eb:a4:77:c0:46:04:ea:56:0e:27:56
Fingerprint (sha256): 18:d9:9f:15:0a:97:e3:46:f1:7b:9b:7b:48:13:7d:2a:ec:1d:f0:83:16:a2:bd:9d:d4:8b:00:d6:a6:4b:0c:75

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.brooke.k12.wv.us

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.brooke.k12.wv.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

balc.brooke.k12.wv.us
bhs.brooke.k12.wv.us
bin.brooke.k12.wv.us
bis.brooke.k12.wv.us
bms.brooke.k12.wv.us
bpn.brooke.k12.wv.us
bps.brooke.k12.wv.us
www.brooke.k12.wv.us

Other certificates including the domain name k12.wv.us

(limited to 100 certificates)
sso.k12.wv.us
roster.k12.wv.us
procket.rale.k12.wv.us
*.kana.k12.wv.us
admin.ninth.frenship.net
hayes.kana.k12.wv.us
boe.webs.k12.wv.us
boe.hancock.k12.wv.us
boe.hancock.k12.wv.us
boe.jack.k12.wv.us
sems.rale.k12.wv.us
eschool.mine.k12.wv.us
home.mono.k12.wv.us
wvlearns.k12.wv.us
gcw.kana.k12.wv.us
cpes.rale.k12.wv.us
res.mono.k12.wv.us
admin.ahs.ardmoreschools.org
procket.rale.k12.wv.us
www.monongaliacntyschs.wv.schools.bz
kcs.kana.k12.wv.us
boe.hancock.k12.wv.us
wvlearns.k12.wv.us
admin.ahs.ardmoreschools.org
kcs.kana.k12.wv.us
intranet.kana.k12.wv.us
plad.k12.wv.us
boe.rale.k12.wv.us
etsts.wood.k12.wv.us
rocket.rale.k12.wv.us
*.jeff.k12.wv.us
sub.lewi.k12.wv.us
boe.hamp.k12.wv.us
boe.hamp.k12.wv.us
iforgot.kana.k12.wv.us
cia.cabell.k12.wv.us
sso.kana.k12.wv.us
home.mono.k12.wv.us
airwatch.roan.k12.wv.us
*.jeff.k12.wv.us
schoolforthedeaf.wvsdb2.state.k12.wv.us
boe.hancock.k12.wv.us
www.brooke.k12.wv.us
sid.resa7.k12.wv.us
procket.rale.k12.wv.us
*.k12.wv.us
reporter.kana.k12.wv.us
makakiloelementary.k12.hi.us
boe.jack.k12.wv.us
boe.ohio.k12.wv.us
owa.harr.k12.wv.us
boe.mine.k12.wv.us
jacksonmdm.jack.k12.wv.us
destiny.putn.k12.wv.us
*.jeff.k12.wv.us
www.wayneschoolswv.org
kcs.kana.k12.wv.us
rocket.rale.k12.wv.us
rocket.rale.k12.wv.us
sub.lewi.k12.wv.us
kcs.kana.k12.wv.us
www.bpbraves.net
iforgot.kana.k12.wv.us
*.sis.k12.wv.us
wvsdb.state.k12.wv.us
home.mono.k12.wv.us
mes.logan.k12.wv.us
owa.harr.k12.wv.us
eschool.mine.k12.wv.us
jacksonmdm.jack.k12.wv.us
warwood.ohio.k12.wv.us
boe.mono.k12.wv.us
enrollment.kana.k12.wv.us
wvsdb.state.k12.wv.us
alban.kana.k12.wv.us
wvlearns.k12.wv.us
cb.mono.k12.wv.us
bes.mono.k12.wv.us
boe.hamp.k12.wv.us
virtualschool.k12.wv.us
bethlehem.ohio.k12.wv.us
*.sis.k12.wv.us
boe.wayn.k12.wv.us
procket.rale.k12.wv.us
mms.mono.k12.wv.us
www.monongaliacntyschs.wv.schools.bz
mitel.rale.k12.wv.us
boe.putn.k12.wv.us
jacksonmdm.jack.k12.wv.us
plad.k12.wv.us
south-nac.mcs.mono.k12.wv.us
el.westwoodisd.net
sems.kana.k12.wv.us
www.monongaliacntyschs.wv.schools.bz
riverside.kana.k12.wv.us
vpn.harr.k12.wv.us
kcs.kana.k12.wv.us
boe.mcdo.k12.wv.us
wvdegps.k12.wv.us
destiny.harr.k12.wv.us

Certificate

The complete raw certificate details for www.brooke.k12.wv.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGEjCCBPqgAwIBAgISA1zXJzjtYY7WTGftSmV150v/MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTgxNjMyNDFaFw0y
MDA2MTYxNjMyNDFaMB8xHTAbBgNVBAMTFHd3dy5icm9va2UuazEyLnd2LnVzMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJgw0FYx9FklNqhpsFwIpVCQ
Wp90f9T48HastTrmcLKcCGhEGMkhhjbvHvCcM95FSoOa0g5n3WTZjl49Ye2XjAAz
qHVJxFpFDCBYlh2xa8wVpjdmOQnkoiUZ2KMxfYXh4D0CP84VINS6oEO7QMssxRST
lidsFd9Xac246dAJqWKB8WKibaPg5LtZ7/BS1AzBJyd5wixFDlh1r/xzQljJxOlb
EzEdHCYSgbpVT3c5UUzyWVHD2uHhmlr3n8uJFxUEjHQYTC3ol6Zah7L0JQSFYWhz
Zx0oYHoUfrvvFCq3J/q/uIAFyZySPckHT7LAQSpWJpkKXb72bEveXjGcv/8M9QID
AQABo4IDGzCCAxcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTGooP/ppejGJHlenEc
nxYSxmZG+DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEF
BQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5j
cnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5j
cnlwdC5vcmcvMIG8BgNVHREEgbQwgbGCFWJhbGMuYnJvb2tlLmsxMi53di51c4IU
YmhzLmJyb29rZS5rMTIud3YudXOCFGJpbi5icm9va2UuazEyLnd2LnVzghRiaXMu
YnJvb2tlLmsxMi53di51c4IUYm1zLmJyb29rZS5rMTIud3YudXOCFGJwbi5icm9v
a2UuazEyLnd2LnVzghRicHMuYnJvb2tlLmsxMi53di51c4IUd3d3LmJyb29rZS5r
MTIud3YudXMwEQYIKwYBBQUHARgEBTADAgEFMEwGA1UdIARFMEMwCAYGZ4EMAQIB
MDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2Vu
Y3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAb1N2rDHwMRnYmQCk
URX/dxUcEdkCwQApBo2yCJo32RMAAAFw7rRZugAABAMASDBGAiEAjdS0shWmB3Zs
Zah30GlHl2RuC3O9g9K4T2yxAdCxMooCIQCc+UW2NyEEHdXXdw9FAFbd2QtR125d
qYy5jw53CzadEQB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAAB
cO60WdUAAAQDAEcwRQIhAN+pBk6F0SI3xJka109Lk807j+2AnFeawc/qiI5HYfBz
AiBCup3XdKrF0NY52o7n05l9fYsY5CqNKw8aRhYAkcJtMjANBgkqhkiG9w0BAQsF
AAOCAQEAUruVc1880jnSFVYb+lBcIna9SYUAIRDkpnl2WIHvxjCJOcZlrdlmuxIv
LMLI1yfFxMf6ozfvuZ2htWo7PnTvil4T+bB6X0HTHxhN5lJyd4eaWSL3JHta6Rfy
wyGUx0aWXob/GpqeBgBMOXGr9XSk/Dtf08qm7Msjh5mJOlDOievJJi3QVsoyyWCO
JNZp12BNzjB3XbYLpfWMFp5IoGM01LY9pYZSpNZILo0q5j8JwcLGHJZ6N9Pill2b
XA+Bwbiid6kYTfEE4r6u+3Dnw5YQGgxcXeWNKxFKY1U1ZIORN7D2z6L5brtvfY3/
6XfAyCnPlxyexkU36mIjVVMZ81kAvA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJgw0FYx9FklNqhpsFwI
pVCQWp90f9T48HastTrmcLKcCGhEGMkhhjbvHvCcM95FSoOa0g5n3WTZjl49Ye2X
jAAzqHVJxFpFDCBYlh2xa8wVpjdmOQnkoiUZ2KMxfYXh4D0CP84VINS6oEO7QMss
xRSTlidsFd9Xac246dAJqWKB8WKibaPg5LtZ7/BS1AzBJyd5wixFDlh1r/xzQljJ
xOlbEzEdHCYSgbpVT3c5UUzyWVHD2uHhmlr3n8uJFxUEjHQYTC3ol6Zah7L0JQSF
YWhzZx0oYHoUfrvvFCq3J/q/uIAFyZySPckHT7LAQSpWJpkKXb72bEveXjGcv/8M
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292928823225300523395243109705623894707199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 16:32:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-16 16:32:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.brooke.k12.wv.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23302896134630843339597948866831080785337531388950604581180416326398588491132439824894037731687198482550639069261825194626080371357789443351928072107271536296758162799619788934428067116635058979161109332361346967734416222444851947120272748107834234040703224722470522378008049856390541562849912014759683451264082640729808379353660037944795603020673048162947787424337671630868193821570808923630428026262822713979160260710233599677549683036701016191517076175423369813876446994151422973621151710203333572517766310317743222275616910305781842539383268260655356235370585774441764721618879143545188050582704252352608356732149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6a283ffa697a31891e57a711c9f1612c66646f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (180 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balc.brooke.k12.wv.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.brooke.k12.wv.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bin.brooke.k12.wv.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bis.brooke.k12.wv.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.brooke.k12.wv.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpn.brooke.k12.wv.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bps.brooke.k12.wv.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooke.k12.wv.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170eeb459ba00000403004830460221008dd4b4b215a607766c65a877d0694797646e0b73bd83d2b84f6cb101d0b1328a0221009cf945b63721041dd5d7770f450056ddd90b51d76e5da98cb98f0e770b369d1100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170eeb459d50000040300473045022100dfa9064e85d12237c4991ad74f4b93cd3b8fed809c579ac1cfea888e4761f073022042ba9dd774aac5d0d639da8ee7d3997d7d8b18e42a8d2b0f1a46160091c26d32
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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