ukisug.staging.betterbrandagency.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:de:c2:d9:db:6e:c5:af:0d:4d:d9:e9:33:d0:a5:f6:f1:ac was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ukisug.staging.betterbrandagency.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:de:c2:d9:db:6e:c5:af:0d:4d:d9:e9:33:d0:a5:f6:f1:ac
Serial Number (int): 337138544661953635813744594272758636409260
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8a:5b:fe:39:4f:fd:62:26:b6:e9:c4:01:1d:2f:54:02:1b:50:ca:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 45:82:c5:e8:52:33:07:7c:78:0d:b3:60:5b:73:54:73:af:f7:b6:3c
Fingerprint (sha256): 1b:c5:90:fd:99:8f:65:b8:91:b1:3b:97:5f:96:92:db:01:93:6e:c4:c0:a9:39:80:e0:32:48:3e:0a:1d:fc:27

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ukisug.staging.betterbrandagency.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ukisug.staging.betterbrandagency.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ukisug.staging.betterbrandagency.com

Other certificates including the domain name betterbrandagency.com

(limited to 100 certificates)
nusafe.test.betterbrandagency.com
www.cdyp.co.uk
necs.test.betterbrandagency.com
www.disc.test.betterbrandagency.com
better2016.test.betterbrandagency.com
sales.test.betterbrandagency.com
ukisug.staging.betterbrandagency.com
mail.endeavour.test.betterbrandagency.com
stm.test.betterbrandagency.com
neef.co.uk
alistairgriffin.test.betterbrandagency.com
www.maxwell.test.betterbrandagency.com
vcas.test.betterbrandagency.com
ukisug.staging.betterbrandagency.com
kinnery.test.betterbrandagency.com
vcas.test.betterbrandagency.com
vcas.test.betterbrandagency.com
sales.test.betterbrandagency.com
mail.spectrumnoir.test.betterbrandagency.com
apc.test.betterbrandagency.com
pdports.test.betterbrandagency.com
ukisug.staging.betterbrandagency.com
stm.test.betterbrandagency.com
metador2.test.betterbrandagency.com
maxwell.test.betterbrandagency.com
sites.betterbrandagency.com
hightide.test.betterbrandagency.com
betterbrandagency.com
cheap-accounting-software.co.uk
oddsmonkey.test.betterbrandagency.com
www.neef.co.uk
humankindlearningcentre.co.uk.humankind.betterbrandagency.com
hightide.test.betterbrandagency.com
ukisug.staging.betterbrandagency.com
fivelamps.org.uk
sales.test.betterbrandagency.com
newmanscott.co.uk
cheap-accounting-software.co.uk
www.baltictraining.test.betterbrandagency.com
uts-ltd.com
cheap-sage-software.com
fivelamps.org.uk
vcas.test.betterbrandagency.com
maxwell.test.betterbrandagency.com
www.rootwise.test.betterbrandagency.com
betterbrandagency.com
uts-ltd.com
stokesleyschool.org
betterbrandagency.com
central.test.betterbrandagency.com
main.test.betterbrandagency.com
better.agency
stokesleyschool.org
active.test.betterbrandagency.com
mail.freshfayre.test.betterbrandagency.com
marskesiteservices.co.uk
lambtonestates.com
nusafe.co.uk
ukisug.staging.betterbrandagency.com
better2016.test.betterbrandagency.com
better.agency
clapham.test.betterbrandagency.com
lambtonestates.com
mail.lionlawns.test.betterbrandagency.com
sales.test.betterbrandagency.com
sales.test.betterbrandagency.com
sites.betterbrandagency.com
maxwell.test.betterbrandagency.com
better.betterbrandagency.com
webuilttheworld.com
selwynhedgley.com
sales.test.betterbrandagency.com
lionlawns.test.betterbrandagency.com
main.test.betterbrandagency.com
sales.test.betterbrandagency.com
vcas.test.betterbrandagency.com
techequal.test.betterbrandagency.com
emailcampaign.betterbrandagency.com
disc.test.betterbrandagency.com
better2016.test.betterbrandagency.com
better.agency
cpcalendars.fivelamps.org.uk
hightidefoundation.co.uk
emailcampaign.betterbrandagency.com
metador2.test.betterbrandagency.com
staff.humankind.betterbrandagency.com
sales.test.betterbrandagency.com
cheap-accounting-software.co.uk
www.amorrison.test.betterbrandagency.com
learning.humankind.betterbrandagency.com
hightidefoundation.co.uk
access.test.betterbrandagency.com
sales.test.betterbrandagency.com
uts-ltd.com
disc.test.betterbrandagency.com
fivelamps.org.uk
www.stokesleyschool.test.betterbrandagency.com
hightide.test.betterbrandagency.com
newmanscott.dev.betterbrandagency.com
stm.test.betterbrandagency.com

Certificate

The complete raw certificate details for ukisug.staging.betterbrandagency.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHNDCCBhygAwIBAgISA97C2dtuxa8NTdnpM9Cl9vGsMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA0MDgxMDAwNDJaFw0x
ODA3MDcxMDAwNDJaMC8xLTArBgNVBAMTJHVraXN1Zy5zdGFnaW5nLmJldHRlcmJy
YW5kYWdlbmN5LmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgh
IDGC4CFnOrWe3V2WUqu6FvCefN2vBRXNEVJBX4Xml1iP5bm8vydBePQcIYh2R0LK
r3S1P2qSCX1eevCyZei3gHPgRdIYKNiIbePFy+S8pdeg+tSqRgZUc7IOiR8VnSYY
Nyxm7bMdXp0g+NrIq7wtdNy4iuKU/vvGnhZKB90WmevlNiV4aAYV1afRmjyt6WRK
0V27gbYOEQcx5ZBqdq/0rybs3Oj8o5paupERCUCjjSCUW/RYg6qY2tOThZPJz5q3
tY6VaSCFLWOChEmNeqc7J1bdCjBSx9EAXmvTp9J6jruy2Gzh5+3Wzw8NwmIGXvAK
/BM3C4QBsDi0piBXNDzAFp42YVFqgjvlm4bYfTWCB3iZWQbQt/UCqalFksvbByuo
O2glmQ5xP2qodgQFZW3wHIWrF8fFJRmU5AhRrr+jBC04laJidXuTgxrwKJSeYOKc
uuH3z5PbAuG/MUScDqU9e8M3YXugrdfyrycOXr47/UqxSnZjLzOuPDTm4j1E/SQQ
KnWg7QrL4Og/Nq06CwQDWK0QzfLZ4gCkCptuc5KIkdeHNOyBAsSaAaIGWHWGXyyb
rElqFgkO3fUx43cXxyBDXxIWYRsfNhu5HA2Q9sftkM02jgjHhbyVNm653VIhkTH9
I1Mp7LchPOqI2ufVJU2vtggrIBpWe36q3zRKcRwTAgMBAAGjggMtMIIDKTAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFIpb/jlP/WImtunEAR0vVAIbUMroMB8GA1UdIwQY
MBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEF
BQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEF
BQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYDVR0R
BCgwJoIkdWtpc3VnLnN0YWdpbmcuYmV0dGVyYnJhbmRhZ2VuY3kuY29tMIH+BgNV
HSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcC
ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGb
VGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5
aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0
aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcv
cmVwb3NpdG9yeS8wggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwApPFGWVMg5Zbqq
UPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWKk6lAaAAAEAwBIMEYCIQCvmxfEm4gW
U2Mkn42sXZcWAWqFl7hhEJepwL0u59a+MgIhANFGCCsDn1FcBFknZEnQMFZcz7S4
aG01vTworWOYWqR3AHYAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwA
AAFipOpRowAABAMARzBFAiAh7FjrqC5rG5Jywb8tFgk5JlpHOEcewdHOzZjNfph1
ewIhAOMUyy8iIU8UTzn3HaXQu8T5QTBl5Xn7L5HfeCpfmZkBMA0GCSqGSIb3DQEB
CwUAA4IBAQBYoV2XJnqAU6Z/1ipGnn8wTeLtMLL8MkVFL8j3IqQp/rgzxT11Z6Xm
tq8dOWKfPAxeJrwlMlJNbg/peEZgZ0tTlQLT7pzgmaiuDeX/gn/bVWhe6G5dvbPB
VbSv2vLtvKY8HOIGC3B5GesgCBoG9fxFcY/OfZfpqPjTMQJXCML6+0qOaWstKaB5
46W06MxQR0ebLrbdE/dAZXn+XInGg28W5WEPpnF+J7J8yb0zYd+Uni+dR6aeU2JA
E5EUcJ6vYnli68iwLYpLZzfMjmhfwu47oW9SB5OT/lxtzpTAoTFnE2TIsXqmn5qL
bLPwPbXU2lkFvGOoIJVwXRSXnXzHzNYq
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337138544661953635813744594272758636409260
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-08 10:00:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-07 10:00:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ukisug.staging.betterbrandagency.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 881731014363630990777035246003325747835700565253304930852089091854062952116543151691308848146969645953755187488198160726706835088325294664422056268969422182620763054583485084252181266786974330388689319169026311289076583096415968032098105112665832736016502103840684053920408944839399899159956827426655386275795960831093919255081222788623571094354860358714802587423964256415526658494876173983004404633153486056495561840038408349515997476391613857871261288243778934652645355218267124588945714031463892853606347458928723689513487286465322467473321732747119755861024587911352179753430376030449158663317255756946628995952638540407511846686654778627639766329915029047292060654185016076640768582323516260240541221297922936432621495340132071422140930376991274959599108311007597424794991116815783104345201683152524323336751862480206280753618910668316889935401669776050439568114589915889947826940057706621983758704829918665144276518129767561316085402604770200720663377484994743376785370594944964202630305813829689546155397546700508253380315247601767125102143263373787556867118826877798380894183231215307954224944584215327687735833168151195118870928888771234127777624451276810031673006697075131596641371381284219958185005506996871011197328104467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a5bfe394ffd6226b6e9c4011d2f54021b50cae8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukisug.staging.betterbrandagency.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162a4ea501a0000040300483046022100af9b17c49b88165363249f8dac5d9716016a8597b8611097a9c0bd2ee7d6be32022100d146082b039f515c0459276449d030565ccfb4b8686d35bd3c28ad63985aa4770076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000162a4ea51a30000040300473045022021ec58eba82e6b1b9272c1bf2d160939265a4738471ec1d1cecd98cd7e98757b022100e314cb2f22214f144f39f71da5d0bbc4f9413065e579fb2f91df782a5f999901
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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