redir.gsa.ctacdev.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:68:fd:62:82:16:55:4c:31:68:98:dd:e9:69:04:a8:e1:e1 was issued on by Let's Encrypt.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=redir.gsa.ctacdev.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:fd:62:82:16:55:4c:31:68:98:dd:e9:69:04:a8:e1:e1
Serial Number (int): 297063030121566726656568426699431875240417
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:96:d4:d2:17:73:07:44:54:51:14:e7:24:b4:6d:7c:c7:99:5d:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:f7:8d:b6:8c:b0:6f:cd:7d:3c:62:bf:59:74:61:1f:ad:bf:4f:5e
Fingerprint (sha256): 25:9f:eb:1a:32:ae:2f:af:a1:5f:21:bd:b5:47:9a:a3:a4:a5:d7:44:09:43:d2:d3:75:10:3e:cb:fa:ad:c3:4a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate redir.gsa.ctacdev.com

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for redir.gsa.ctacdev.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

answers.usa.gov
apps.gobiernousa.gov
apps.usa.gov
businessusa.gov
challenges.gov
consumeraction.gov
ecpic.gov
faq.gov
febatl.platform.gsa.gov
firstgov.gov
forms.gov
gobierno.gov
gobiernousa.gov
gsa.gov
info.gov
kids.gov
m.gobiernousa.gov
m.gsa.gov
m.usa.gov
my.usa.gov
notice.usa.gov
notifications.usa.gov
plc.platform.gsa.gov
promotions.usa.gov
publications.usa.gov
redir.gsa.ctacdev.com
registry.usa.gov
respuestas.gobiernousa.gov
sffeb.us
tell-us.usa.gov
tellus.usa.gov
unitedstates.gov
us.gov
usa.gov
usagov.gov
usgovernment.gov
vote.usa.gov
www.businessusa.gov
www.challenges.gov
www.consumeraction.gov
www.faq.gov
www.firstgov.gov
www.forms.gov
www.gobierno.gov
www.gobiernousa.gov
www.info.gov
www.kids.gov
www.my.usa.gov
www.promotions.usa.gov
www.unitedstates.gov
www.us.gov
www.usagov.gov
www.usgovernment.gov
www.vote.gov

Other certificates including the domain name ctacdev.com

(limited to 100 certificates)
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
*.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
*.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
*.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.gsa.ctacdev.com
*.ctacdev.com
*.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.ctacdev.com
redir-2.gsa.ctacdev.com
*.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
*.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.ctacdev.com
redir-2.gsa.ctacdev.com
testredir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.gsa.ctacdev.com
testredir2.gsa.ctacdev.com

Certificate

The complete raw certificate details for redir.gsa.ctacdev.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosjaoqaVsW0ApE7FComy
OSGwdcEX9eAGJHU0sxNk2fvLSZGiI0qR/4JasL6ucyVyUjOJYnl4uAsYf71+caAp
k91va6mABtVCjPk5LCi+O0pYtYPLgMX4+T4+ialCCYw1qgVU3qoy3zT8d41rcylc
Q4mjllyWjGdMeObb9uCIQMGrl42Mi5C8prllzoAJasItt/HruvZbt9vGTkAEutbp
O/JYiCeSKwu4gKYc05A6JL8y+cZUzuQNXMrMry4Nc8y+hzY5HCm2XWb0sAWjiH5n
tG9FgiLDq921fMizH8bDQAR8fhjb9KrvrFe7o3gzwoRCrpO1+TEzkMbEKJFFH4B4
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297063030121566726656568426699431875240417
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-19 23:36:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-19 23:36:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redir.gsa.ctacdev.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20549650225223008056932721532572731198527947786716302208329526777048290030252907250732759053520157295925028341199730160541283618208410641357920192423973119480448637747017002763308693801692073245673582584766045092728805077211646325896713759320719011005615531941114931026430016954423294252397791523829909795996474415094258728589055637622615074982523202421625821284322389909439059333777301748928254083183259668393415651137106123558105533767135992676465900205288776815303842523376088579564805534854756286791647207471806309936852099564056028055333184736143771530812412483389444311267361557593621912139479977009481559078997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c96d4d217730744545114e724b46d7cc7995d41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (891 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.gobiernousa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessusa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challenges.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumeraction.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecpic.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'febatl.platform.gsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstgov.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobierno.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobiernousa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kids.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.gobiernousa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.gsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notice.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notifications.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plc.platform.gsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promotions.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redir.gsa.ctacdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respuestas.gobiernousa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sffeb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tell-us.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tellus.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedstates.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usagov.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usgovernment.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businessusa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.challenges.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consumeraction.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faq.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstgov.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forms.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gobierno.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gobiernousa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.info.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kids.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promotions.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitedstates.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usagov.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usgovernment.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vote.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008ee2f39867f35d8fece6063e3205eac1e166bf94d40e5d8931451c9fc63319974deb9cb7f23c2232aa6f7b4b5d1c776f086899dab96016edd25fa4c5efdc5df364fcae8d53d4a6b0336fc50916a3da81eeffb80796945ba963e418cc554990df05227b2279464db149f8daeed066f008b9614224338fa2a6e7d5450af18c224b108b4bd6d0a5006f036319c21e13895bd65f7e5655057c05982588629a43b9fa123ab55c34adc458761e8d6744d0c165660aadfaeee9ca2579b1395b72c8770793b19e0be6860a1c5dff4d5c23d2f0bfec512e2623473468a5ca503fe143c27f160d9cf0f30f21a00b125ecb8388e6fe7585f66e7fe815ee106109f1f7fa7957