tw.avivainvestors.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:db:26:cf:9c:a1:75:26:cf:ba:6c:fd:0a:4c:fa:d1:9a:3f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tw.avivainvestors.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:db:26:cf:9c:a1:75:26:cf:ba:6c:fd:0a:4c:fa:d1:9a:3f
Serial Number (int): 335910284797103695951596385029844722883135
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:c7:ea:76:44:48:26:63:e8:0d:6b:d4:e1:ac:82:0e:d4:8f:36:b7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9b:01:96:fe:0b:0e:bb:cd:2d:8c:99:d9:c3:65:6f:31:dc:dd:e2:fc
Fingerprint (sha256): 26:17:bb:90:aa:13:59:98:64:b6:6a:fc:a1:0c:d5:ff:45:6f:07:79:40:56:20:d6:fe:01:26:64:6e:fe:94:c8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tw.avivainvestors.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tw.avivainvestors.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tw.avivainvestors.com

Other certificates including the domain name avivainvestors.com

(limited to 100 certificates)
f6.shared.global.fastly.net
www.eserve.avivaservices.co.uk
cert06.uk.aviva.com
f6.shared.global.fastly.net
cert11.uk.aviva.com
remote.na.avivainvestors.com
avivainvestors.com
cert06.uk.aviva.com
cert06.uk.aviva.com
securelogin.avivainvestors.com
cert06.uk.aviva.com
cert01.tmp.aviva.com
ibmwebspheremqukjpmb1p.avivainvestors.com
apps.avivainvestors.com
np-cert02.uk.aviva.com
avivainvestors.com
tw.avivainvestors.com
vault.uk.avivainvestors.com
digital-investor-web-app.prod.kea.ifdsfs.com
f6.shared.global.fastly.net
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com
t.notifications.avivainvestors.com
f6.shared.global.fastly.net
avivainvestors.com
cert03.uk.aviva.com
avivainvestors.com
cert01.tmp.aviva.com
f6.shared.global.fastly.net
alb.investors-qliksense.dev.aws-euw1-np.avivacloud.com
avivainvestors.com
avivainvestors.com

f6.shared.global.fastly.net
remote.na.avivainvestors.com
f6.shared.global.fastly.net
fpcidc01.avivagroup.com
avivainvestors.com
f6.shared.global.fastly.net
tw.avivainvestors.com
tw.avivainvestors.com
digital-investor-web-app.prod.kea.ifdsfs.com

www.avivainvestors.com
reach.uk.avivainvestors.com
cert06.uk.aviva.com
np-cert02.uk.aviva.com

avivainvestors.com
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com

f6.shared.global.fastly.net
ibmwebspheremqukextb1p.avivainvestors.com
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
tw.avivainvestors.com
cert03.uk.aviva.com
np-cert02.uk.aviva.com
f6.shared.global.fastly.net
f6.shared.global.fastly.net
f6.shared.global.fastly.net
f6.shared.global.fastly.net
sam.uk.avivainvestors.com
f6.shared.global.fastly.net
f6.shared.global.fastly.net
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com
f6.shared.global.fastly.net
www.avivainvestors.com
avivainvestors.com
at.avivainvestors.com
digital-investor-web-app.prod.kea.ifdsfs.com
f6.shared.global.fastly.net
mail.sg.avivainvestors.com
appsstage.avivainvestors.com
avivainvestors.com
ibmwebspheremqukjpmb1u.avivainvestors.com
avivainvestors.com
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com
f6.shared.global.fastly.net
np-cert02.uk.aviva.com
ibmwebspheremqukextb1p.avivainvestors.com
f6.shared.global.fastly.net
fplidc01.avivagroup.com

f6.shared.global.fastly.net
avivainvestors.com
cert01.tmp.aviva.com
cert01.tmp.aviva.com
tw.avivainvestors.com
f6.shared.global.fastly.net
www.aviva.co.uk
avivainvestors.com

f6.shared.global.fastly.net
remote.na.avivainvestors.com
f6.shared.global.fastly.net

Certificate

The complete raw certificate details for tw.avivainvestors.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgISA9smz5yhdSbPumz9Ckz60Zo/MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MTAxNTUxNDdaFw0x
ODEyMDkxNTUxNDdaMCAxHjAcBgNVBAMTFXR3LmF2aXZhaW52ZXN0b3JzLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN9i/BC5iK2vCkFqFImuWc3E
aEbpRKamPMYvGELI7dODLr5rmvcQfxc/wnR3/ooV7QoQtYCxoLsb8J/c7o5v0wwB
9mInRrid9buckz6zeYUeZhs24Nqy1DjUttdAmSZR0iaB1QWaEG+h76LueBTyTHib
52bca2mTdLviYb2903JtC3Tb7tvXA/oQY6kV1uaODg+2Eyk5uro+Uutx9ual1tCN
vaYvbVc/DZgus5bcHf5oEmbNW4fLDRG3LvN/cXo1HncF4QxZ+/6QemFktOQ0l1SC
lvTmFOlz9aCm4E5bU9Gz9j1OPsyN5wvgL5CfelcM00K4at+HuKi7dw1FeXKJADEC
AwEAAaOCAxwwggMYMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU58fqdkRIJmPoDWvU
4ayCDtSPNrcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzAgBgNVHREEGTAXghV0dy5hdml2YWludmVzdG9ycy5jb20wgf4G
A1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUF
BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4M
gZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJl
bHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENl
cnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9y
Zy9yZXBvc2l0b3J5LzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ACk8UZZUyDll
uqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZcRlcvAAAAQDAEcwRQIgDFRDHkTM
Dd4IehO2lWv/ujLolB2we7lsyHZiCZgD9mECIQDHZrDeiU2ndTZICizAhzruTgQx
ng6/sRfv7N7VF36M7AB1AMEWSuCnctLUOS3ICsEHcNTwxJvemRpIQMH6B1Fk9jNg
AAABZcRldMwAAAQDAEYwRAIgITNhICsnyqyAPzT5IOH1/a7DzPi300gyfUUiH+Hj
ATQCIBW97WpV0VSO7DgQT82KrndBaQmoKyQazVBnBOQrR9qpMA0GCSqGSIb3DQEB
CwUAA4IBAQAAQD5VKZLe+jo1yL859xd3sj9f5zqumylbgpqPPhlIs3pm3PE5Lphh
Gz3r0TvAdCZd92V/48mTQoBHsBJusikElWYtcb1pfD+YVxTX+tzvJP09BshUkhh1
uuWO9gPtH6cxEYeKyCww93LMH5M4PpQdfJFz5fSXlUHfWFJ/adOneiqhT+MFDslE
MNYAWZ2DkxaSG9VEFXQ1/v0+GqHfTeHy2zE/bPloMJZXdxNWw4SbQZxO0Vsy8pSk
dwhZ2ZJTKC/CPcMJnS7Go9pt4Ff0IjLe/OIUDpFDEEOzN6jijEq2wCzVK9z7IQV9
LkmrT4bMVwbfZzjIqdLsDQXTtKcOfLzc
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32L8ELmIra8KQWoUia5Z
zcRoRulEpqY8xi8YQsjt04Muvmua9xB/Fz/CdHf+ihXtChC1gLGguxvwn9zujm/T
DAH2YidGuJ31u5yTPrN5hR5mGzbg2rLUONS210CZJlHSJoHVBZoQb6Hvou54FPJM
eJvnZtxraZN0u+Jhvb3Tcm0LdNvu29cD+hBjqRXW5o4OD7YTKTm6uj5S63H25qXW
0I29pi9tVz8NmC6zltwd/mgSZs1bh8sNEbcu839xejUedwXhDFn7/pB6YWS05DSX
VIKW9OYU6XP1oKbgTltT0bP2PU4+zI3nC+AvkJ96VwzTQrhq34e4qLt3DUV5cokA
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335910284797103695951596385029844722883135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-10 15:51:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-09 15:51:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tw.avivainvestors.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28199953147798466048386573695379883450517459034000982197182499635887137512039487598555436109135499048160393268653959641689169961079108556890039100951043667401568824341912968004739698950688169093571065596080583364895523527381836830952779419748814620362829347286473721109978269025718991115070537908176595052310608195146847307897835740025760021611936903114951111789556250166621066396524466322111769709725017960855258461956491474446026646639000594317628321958836366430283373820523051523366024086309460857902148086332134378137591255149538427911283503037403338218747655006802618163748789366733470407642269578849476114186289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7c7ea7644482663e80d6bd4e1ac820ed48f36b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.avivainvestors.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165c46572f0000004030047304502200c54431e44cc0dde087a13b6956bffba32e8941db07bb96cc87662099803f661022100c766b0de894da77536480a2cc0873aee4e04319e0ebfb117efecded5177e8cec007500c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165c46574cc00000403004630440220213361202b27caac803f34f920e1f5fdaec3ccf8b7d348327d45221fe1e30134022015bded6a55d1548eec38104fcd8aae77416909a82b241acd506704e42b47daa9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0000403e552992defa3a35c8bf39f71777b23f5fe73aae9b295b829a8f3e1948b37a66dcf1392e98611b3debd13bc074265df7657fe3c993428047b0126eb2290495662d71bd697c3f985714d7fadcef24fd3d06c854921875bae58ef603ed1fa73111878ac82c30f772cc1f93383e941d7c9173e5f4979541df58527f69d3a77a2aa14fe3050ec94430d600599d839316921bd544157435fefd3e1aa1df4de1f2db313f6cf968309657771356c3849b419c4ed15b32f294a4770859d99253282fc23dc3099d2ec6a3da6de057f42232defce2140e91431043b337a8e28c4ab6c02cd52bdcfb21057d2e49ab4f86cc5706df6738c8a9d2ec0d05d3b4a70e7cbcdc