andersinnovations.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:76:1f:05:35:ea:43:49:6e:a4:9c:ba:66:09:eb:71:e1:de was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=andersinnovations.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:1f:05:35:ea:43:49:6e:a4:9c:ba:66:09:eb:71:e1:de
Serial Number (int): 301531410214833026986364184904482604311006
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:32:4d:ae:1b:7c:cc:93:b2:22:01:b3:5d:49:0b:97:e1:d3:49:6a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 60:5c:11:25:ff:46:1a:cf:01:db:60:05:a2:0d:f9:38:25:f5:cd:43
Fingerprint (sha256): 19:4e:3a:b6:1d:d7:f6:05:47:c0:ec:47:cd:98:6b:a5:5a:3b:47:3d:53:6b:2d:7b:93:fc:5e:f2:c1:e5:ec:a6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate andersinnovations.fi

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for andersinnovations.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

anders.fi
andersfinland.fi
andersholdings.fi
andersinno.com
andersinno.fi
andersinno.net
andersinnovations.com
andersinnovations.fi
andersvisual.fi
digidim.com
helvar.cn
helvar.co.uk
helvar.com
helvar.de
helvar.eu
helvar.fi
helvar.fr
helvar.ie
helvar.it
helvar.net
helvar.org
helvar.se
okv.fi
punavuorenpeikko.fi
respecta.fi
www.anders.fi
www.andersfinland.fi
www.andersholdings.fi
www.andersinno.com
www.andersinno.fi
www.andersinno.net
www.andersinnovations.com
www.andersinnovations.fi
www.andersvisual.fi
www.digidim.com
www.helvar.cn
www.helvar.co.uk
www.helvar.com
www.helvar.de
www.helvar.eu
www.helvar.fi
www.helvar.fr
www.helvar.ie
www.helvar.it
www.helvar.net
www.helvar.org
www.helvar.se
www.okv.fi
www.punavuorenpeikko.fi
www.respecta.fi

Other certificates including the domain name andersinnovations.fi

(limited to 100 certificates)
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
web.anders.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
web.anders.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi
andersinnovations.fi

Certificate

The complete raw certificate details for andersinnovations.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301531410214833026986364184904482604311006
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-16 07:11:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-16 07:11:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'andersinnovations.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 632485756235581537970364114928126352017335603711386045266763835684088958117231617183081641512003171611280120424083184120167800286661664490797333822508458328128391303686992404260955050566660141839564046944187611814736994907250905819488513890768692734731764143763189067475309093481663044451741765106767314228825698259752261831190794331078932767468020369842868161038757618566123144914849651836616810019917919978968309536544807844501248177073161541473555263131281637879500138537872920823411658112579703827812509896163072334276811942915121605466417669403452559077566897841309086818882689071975922309404157319544798820654259546903866235532853325533427145475256220921534656948233531364955745841586111531765009934314153296812100817107705672806237012665976368584470209222253448012816856559572148907968652662297955032176647957808333239090787092167658510243339432662277795351160025149358464212437145030610582567228189736346431882425905135295105786920325010386042308893218872435667004947349214928839776814347729157427244591643799461402028508000243989283387955609278790959157590240513648925118361009178086432105327229630606584861031597185429785088144106757533575930401859553471126227190555164225664826485098805834866500277230141847290516876631957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0324dae1b7ccc93b22201b35d490b97e1d3496a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (804 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anders.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersfinland.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersholdings.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinno.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinno.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersinnovations.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersvisual.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digidim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvar.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punavuorenpeikko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respecta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anders.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersfinland.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersholdings.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinno.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinno.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersinnovations.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersvisual.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digidim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helvar.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punavuorenpeikko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.respecta.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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