www.edss.ee

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a6:58:2a:cf:20:70:a2:45:f1:1e:eb:82:44:43:54:b9:88 was issued on by Let's Encrypt.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.edss.ee

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a6:58:2a:cf:20:70:a2:45:f1:1e:eb:82:44:43:54:b9:88
Serial Number (int): 317940925045282603588094002078559793101192
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:a6:ba:08:b2:2a:60:38:98:9c:76:b3:38:a9:b5:d8:e3:7f:f6:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:a8:88:8c:7a:39:a4:44:1f:88:91:49:81:fc:b6:8a:bf:37:b9:b6
Fingerprint (sha256): 2c:d1:39:01:5f:7f:dd:43:c9:c4:ed:7e:e9:cf:67:c5:7d:e9:13:a1:44:de:80:5b:c9:34:15:4f:26:b6:f6:f4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.edss.ee

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.edss.ee

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.andres.ee
autodiscover.andresemetall.ee
autodiscover.balticfutsal.com
autodiscover.balticrail.com
autodiscover.bestinwood.ru
autodiscover.bwe.lv
autodiscover.company-kit.com
autodiscover.cone.ee
autodiscover.edss.ee
autodiscover.envirolyte.com
autodiscover.factconsult.ee
autodiscover.fbassets.eu
autodiscover.ftlogistik.ru
autodiscover.gnordtimber.fi
autodiscover.hk.laaneharju.ee
autodiscover.hostech.ee
autodiscover.hromium.ee
autodiscover.infast.ee
autodiscover.kultuurikeskus.laaneharju.ee
autodiscover.loitrans.ee
autodiscover.lumar.ee
autodiscover.mannlines.ee
autodiscover.moduletech.ee
autodiscover.nordicmaritime.ee
autodiscover.ntbunkering.ee
autodiscover.ntmarine.ee
autodiscover.nurminen.ee
autodiscover.ocmseafood.ee
autodiscover.oiliken.com
autodiscover.paldiski.ee
autodiscover.project7spb.ru
autodiscover.prospere.ee
autodiscover.prosperechem.com
autodiscover.rwcargo.kz
autodiscover.sakulate.ee
autodiscover.shipping.ee
autodiscover.soolaladu.ee
autodiscover.stroilogistica.com
autodiscover.tic.ee
autodiscover.tintrade.net
autodiscover.tov-tb.com.ua
autodiscover.uralest.ee
autodiscover.weltonenter.com
exchange.edss.ee
tintrade.net
www.edss.ee
www.tintrade.net

Other certificates including the domain name edss.ee

(limited to 100 certificates)
www.edss.ee
www.edss.ee
estportnet.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
mx1.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
estportnet.edss.ee
www.edss.ee
liwathoneos.cone.ee
exchange.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
bzick.edss.ee
www.edss.ee
bws.edss.ee
tk-registry.edss.ee
bzick.edss.ee
www.edss.ee
www.edss.ee
x.edss.ee
www.edss.ee
www.edss.ee
exchange.edss.ee
emde-registry.edss.ee
exchange.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
cfsfi.cone.ee
esteve.edss.ee
cfsfi.cone.ee
edex.edss.ee
mx1.edss.ee
mx1.edss.ee
www.edss.ee
mx2.edss.ee
www.edss.ee
www.edss.ee
exchange.edss.ee
www.edss.ee
www.edss.ee
bws.edss.ee
www.edss.ee
www.edss.ee
exchange.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
bws.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
exchange.edss.ee
www.edss.ee
www.edss.ee
mx1.edss.ee
liwathoneos.cone.ee
www.eurocoins.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
mx1.edss.ee
www.edss.ee
estportnet.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
transocean.edss.ee
liwathoneos.cone.ee
owncloud.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
x.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
www.edss.ee
owncloud.edss.ee

Certificate

The complete raw certificate details for www.edss.ee in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsntRwWLlYzkWKNCXgNlt
7QwSrVMM/st1LPq7eaebf3HMXKfYOs6XUSCBfRMTzp8HrGN+bf1TdwAhijw6FG6A
AtkqAyuy3lodEklSdjKHH0GuS2/JVTsvL7eBD1bE6X5JnlQmB/SpIzBGz8XlJ44n
6AclLeBYoDtC+Q1VrxcrN6l7fr792cJHqobMRqU/8L0CgfevtLGRRvqPqgFusN25
aFOp/jrR2Zupu8+pLcN4BwBCOt4cReHxcv8d2ZjqkbbAuhhcK8E6bxbPgHF8Ja9z
DEoy8Z63vqL9+tclZV1kleibaU5kcs6/qHOaFTsx9Jt7YUVhxd4vx5fCNR0IOxcQ
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317940925045282603588094002078559793101192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 10:05:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 10:05:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.edss.ee'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22531229325398536217488612241621927359475933401880163465662806915750437507232600909061698403236519125935473708311442428562786276566115941649915097830840584357786072729166848855808574609505218967511514551335780426685478691679710155461429029653474565658534617213438216419720517922292234820448383737242753468224895484583979560011520991938489917494421698534577959819212455255322422765051251225041283335059709092104306998430375930290509466860959304344525158878538412890471876818136497898950077627521191823379602867865402431410850452445589755299036239136550580685556216945662105792323367685125710133664600446170596417933421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ba6ba08b22a6038989c76b338a9b5d8e37ff638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.andres.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.andresemetall.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.balticfutsal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.balticrail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bestinwood.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bwe.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.company-kit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cone.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.edss.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.envirolyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.factconsult.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fbassets.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ftlogistik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gnordtimber.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hk.laaneharju.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hostech.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hromium.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.infast.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kultuurikeskus.laaneharju.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.loitrans.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lumar.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mannlines.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.moduletech.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nordicmaritime.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ntbunkering.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ntmarine.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nurminen.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ocmseafood.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.oiliken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.paldiski.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.project7spb.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.prospere.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.prosperechem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.rwcargo.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sakulate.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.shipping.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.soolaladu.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.stroilogistica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tic.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tintrade.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tov-tb.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.uralest.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.weltonenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.edss.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tintrade.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edss.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tintrade.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a012c3940000040300463044022053192b7bba87f13bc48073506c3c95fc9d942338b083f58d323cdcad26ec586802203295b44ae74b6f5ff2073b52ddd54e8be818252f143d5d81ba45dccccaa2ee380076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170a012c39900000403004730450220033dd782a47ec1e12c38f7d0ef1264c486b37ae0415130cec87d962b87c2694f022100d8b46ac40321ff98b47d8d20a9bc4c1aff12c42c62f473ae0559ef0dd49af19d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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