redaktion.jfmedier.dk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e9:00:62:9d:f6:21:29:7c:40:1c:f2:9c:54:1d:f2:a9:e9 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=redaktion.jfmedier.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e9:00:62:9d:f6:21:29:7c:40:1c:f2:9c:54:1d:f2:a9:e9
Serial Number (int): 427735447268550483896429591123183187175913
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: dd:6f:b9:a2:95:8e:f1:e2:0f:bb:7f:92:fb:70:2a:fc:ec:78:a5:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 08:cd:64:ce:cc:b8:a7:09:b9:ea:20:e9:55:c3:95:76:3b:95:28:fb
Fingerprint (sha256): 29:53:a7:05:90:63:52:f7:7e:3b:ad:7d:14:87:b8:01:0c:32:5b:3e:ae:ae:db:ac:5a:49:45:cc:b3:a6:dc:8a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate redaktion.jfmedier.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for redaktion.jfmedier.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

redaktion.jfmedier.dk
trespor.fyens.dk

Other certificates including the domain name jfmedier.dk

(limited to 100 certificates)
jfmedier.dk
secure.jfmedier.dk
secure.jfmedier.dk
dns-vetting1d.map.fastly.net
redirect2.jfmedier.dk
secure.jfmedier.dk
dns-vetting1d.map.fastly.net
bestyrelsesvalg.jfmedier.dk
dns-vetting1d.map.fastly.net
secure.jfmedier.dk
secure.jfmedier.dk
twentythree.net
dns-vetting1d.map.fastly.net
avis.jfmedier.dk
secure.jfmedier.dk
production.jfmedier.dk
redaktion.jfmedier.dk
secure.jfmedier.dk
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
production.jfmedier.dk
twentythree.net
dns-vetting1d.map.fastly.net
secure.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
secure.jfmedier.dk
secure.jfmedier.dk
twentythree.net
redaktion.jfmedier.dk
twentythree.net
redaktion.jfmedier.dk
dns-vetting1d.map.fastly.net
redaktion.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
jfmedier.dk
*.jfmedier.dk
secure.jfmedier.dk
*.ping.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
redaktion.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
secure.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
redirect.jfmedier.dk
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
jfmedier.dk
redaktion.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
secure.jfmedier.dk
twentythree.net
dns-vetting1d.map.fastly.net
redaktion.jfmedier.dk
twentythree.net
redirect2.jfmedier.dk
jfmedier.dk
intern.jfmedier.dk
sip.jfmedier.dk
secure.jfmedier.dk
jfmcrosscai.jfmedier.dk
redaktion.jfmedier.dk
twentythree.net
twentythree.net
secure.jfmedier.dk
secure.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
secure.jfmedier.dk
secure.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
redirect.jfmedier.dk
redaktion.jfmedier.dk
secure.jfmedier.dk
dns-vetting1d.map.fastly.net
secure.jfmedier.dk
redaktion.jfmedier.dk
dns-vetting1d.map.fastly.net
twentythree.net
secure.jfmedier.dk
twentythree.net
redaktion.jfmedier.dk
twentythree.net
dns-vetting1d.map.fastly.net

Certificate

The complete raw certificate details for redaktion.jfmedier.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGHzCCBQegAwIBAgISBOkAYp32ISl8QBzynFQd8qnpMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA3MjMyMTAxMDBaFw0x
NzEwMjEyMTAxMDBaMCAxHjAcBgNVBAMTFXJlZGFrdGlvbi5qZm1lZGllci5kazCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOjtgO8XXvIz0iWw4gVMdM0r
tNZn9hJqlUUTlHnvIWAY6XOqqBMY43ctBKgJHn5IbqV3qYJf5xZagluaS5p4YtUp
mcHXle7pxNMG9T9RIjzbVBYMq1hbFDYTuw/f+i8kEnBXRF+4DVkV9e6TXRRdFTQU
D6jmftQHHalC/L7Fv8VRYs6sOdNvDIcbkQZutvWkUPBt72BAtbP9sXq4JOzl/Edn
9YPCeLPv128wClQQC2gGDDu+enYfhWkGs0iwk46A3yX7jBDM/nkPx2ROJnXtzs3P
pLXZR5iOWJU0nyTQxPrnLD6mJWnlaoz5wifY4cTO11ux8kUMUZ4Jtxf/UAV85gKe
8tLPH308HaRsO5L37EL5DKkhNHRgaagfYGwUbjqOb5cQMyQA2kyO8dEEki2RMGCk
vv1ZLM1xngPJBLR31I+f9TtU34CfuglrzOX72UZ2Qf0Mx2dDvPd0e3syuZIQ8Q/a
SMysm1/aAd4fn+Dqq6Dpd9urcGQKva1lrgFCOaZZ5IWu57DlKMUzQ6ryAtYRxfnp
jk4FuB3adV4hPMD7DV1u9Q5+n5LJCf1FH17xnRaQIzUTyvpN9m9Fs/2ygQ9RNaRB
ZwDHoE3paKrDM6+/uGl27iTXK5UVdRZfLIKbgoffDyavxt3Ka4tCWGHlzE+unX1/
hhWoUEeNUsznwO8+SIrDAgMBAAGjggInMIICIzAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFN1vuaKVjvHiD7t/kvtwKvzseKWoMB8GA1UdIwQYMBaAFKhKamMEfd265tE5
t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j
c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl
cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wMgYDVR0RBCswKYIVcmVkYWt0aW9u
LmpmbWVkaWVyLmRrghB0cmVzcG9yLmZ5ZW5zLmRrMIH+BgNVHSAEgfYwgfMwCAYG
Z4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nw
cy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZp
Y2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMg
YW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xp
Y3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8w
DQYJKoZIhvcNAQELBQADggEBAGgHYoOmUWC7pFN07m198+rFqHnAx1cW7Q9x2zrp
mu1vE31vTEpcil2BoVW8SUH6zpvUKBtWfwMPpUBdYh5UPLlRvxvAdR8i31MN8BAp
l6WDfe74n2niPbvnvAKUhyrYdsSMLq6skYMH2nssddE4trAxG/Rik3ub17MGsgAm
Eek9MQbhfCg5wGgcpFkngNk2MUSaUrK8zhDIfCHHsYF2gpzrTfM07+AXS5DhQYe6
ED4/vJPoSIESQibWeYpFo6cm3PDQpuaJtmB9W5bLByVUubI1SGH8vN7Y51OBWs5m
jpytrZYJ0i4agrq923dUcnoKcn8sSolRNZLrsy5MKgSfGAw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6O2A7xde8jPSJbDiBUx0
zSu01mf2EmqVRROUee8hYBjpc6qoExjjdy0EqAkefkhupXepgl/nFlqCW5pLmnhi
1SmZwdeV7unE0wb1P1EiPNtUFgyrWFsUNhO7D9/6LyQScFdEX7gNWRX17pNdFF0V
NBQPqOZ+1AcdqUL8vsW/xVFizqw5028MhxuRBm629aRQ8G3vYEC1s/2xergk7OX8
R2f1g8J4s+/XbzAKVBALaAYMO756dh+FaQazSLCTjoDfJfuMEMz+eQ/HZE4mde3O
zc+ktdlHmI5YlTSfJNDE+ucsPqYlaeVqjPnCJ9jhxM7XW7HyRQxRngm3F/9QBXzm
Ap7y0s8ffTwdpGw7kvfsQvkMqSE0dGBpqB9gbBRuOo5vlxAzJADaTI7x0QSSLZEw
YKS+/VkszXGeA8kEtHfUj5/1O1TfgJ+6CWvM5fvZRnZB/QzHZ0O893R7ezK5khDx
D9pIzKybX9oB3h+f4OqroOl326twZAq9rWWuAUI5plnkha7nsOUoxTNDqvIC1hHF
+emOTgW4Hdp1XiE8wPsNXW71Dn6fkskJ/UUfXvGdFpAjNRPK+k32b0Wz/bKBD1E1
pEFnAMegTeloqsMzr7+4aXbuJNcrlRV1Fl8sgpuCh98PJq/G3cpri0JYYeXMT66d
fX+GFahQR41SzOfA7z5IisMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427735447268550483896429591123183187175913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-23 21:01:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-21 21:01:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redaktion.jfmedier.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 950262307959146560905381674305251697778851949473228658756627843571421011975851842536431352673913723045503244638856398181600895046169764250816985550094539027237422472187768927707567094762559224898734419030139946723698314480676988102298766023224342828823390654982424132851937607996469203016979253093406095576757430098978157595536798704405581018380700456198595027711901561082639531318864625191006985472834635037853596502138920060440243116802021906702476338750282209745986995561613065690209280942471338970512453360468156496801700157764160436248225325937697494457133591373802430516988174446823422004726557524322438960135065775736312378854745329599569539729986694380773623549249372109497895300940961950122934175486741261204312883842961266488735506841691019858783660340775985006205647428939504948883450979557541431908276914350393586955384375653635523585697668716738092083086351172292375128954483199988135852312876087859686389353052247322904641251580721988458577164016623470438797008417574429055895329394395243542965625988192564815267478663357505803082244276825437527586953706889650823793925063751774769294685885288698241645557796034256221283775364205783085505030508310497013440161215868229972310310684813045143427237046358854672534777400003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd6fb9a2958ef1e20fbb7f92fb702afcec78a5a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redaktion.jfmedier.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trespor.fyens.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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