loadbalancer.nix.jucy.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b4:e3:0f:f2:75:aa:3e:60:7a:4b:34:c5:59:23:f6:8f:e4 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=loadbalancer.nix.jucy.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b4:e3:0f:f2:75:aa:3e:60:7a:4b:34:c5:59:23:f6:8f:e4
Serial Number (int): 410001787329971470894013338676065786564580
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9f:be:a1:8c:e7:f1:cf:27:c0:48:7f:1e:be:e8:74:f6:68:b3:c4:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): af:60:ef:6d:98:fd:9f:9d:8d:88:05:3e:3c:19:5d:a0:ae:d5:03:29
Fingerprint (sha256): 32:1b:29:62:d1:0a:36:d9:a4:63:df:4b:bc:38:24:01:9e:7f:3c:a1:c7:bb:74:4b:93:88:2f:9a:d9:86:7b:66

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate loadbalancer.nix.jucy.co.nz

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loadbalancer.nix.jucy.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.jucyworld.com
cp.nix.jucy.co.nz
ecotoursmilford.co.nz
ecotoursmilford.co.nz.loadbalancer.nix.jucy.co.nz
ecotoursmilford.co.nz.prod.jucy.co.nz
ecotoursmilford.co.nz.web1.nix.jucy.co.nz
ecotoursmilford.co.nz.web2.nix.jucy.co.nz
jucy.co.nz
jucy.co.nz.loadbalancer.nix.jucy.co.nz
jucy.co.nz.prod.jucy.co.nz
jucy.co.nz.web1.nix.jucy.co.nz
jucy.co.nz.web2.nix.jucy.co.nz
jucy.com.au
jucy.com.au.loadbalancer.nix.jucy.co.nz
jucy.com.au.prod.jucy.co.nz
jucy.com.au.web1.nix.jucy.co.nz
jucy.com.au.web2.nix.jucy.co.nz
jucycruise.co.nz
jucycruise.co.nz.loadbalancer.nix.jucy.co.nz
jucycruise.co.nz.prod.jucy.co.nz
jucycruise.co.nz.web1.nix.jucy.co.nz
jucycruise.co.nz.web2.nix.jucy.co.nz
jucyrentals.de
jucyrentals.de.loadbalancer.nix.jucy.co.nz
jucyrentals.de.prod.jucy.co.nz
jucyrentals.de.web1.nix.jucy.co.nz
jucyrentals.de.web2.nix.jucy.co.nz
jucysnooze.co.nz
jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
jucysnooze.co.nz.prod.jucy.co.nz
jucysnooze.co.nz.web1.nix.jucy.co.nz
jucysnooze.co.nz.web2.nix.jucy.co.nz
jucyusa.com
jucyusa.com.loadbalancer.nix.jucy.co.nz
jucyusa.com.prod.jucy.co.nz
jucyusa.com.web1.nix.jucy.co.nz
jucyusa.com.web2.nix.jucy.co.nz
jucyworld.com
jucyworld.com.loadbalancer.nix.jucy.co.nz
jucyworld.com.prod.jucy.co.nz
jucyworld.com.web1.nix.jucy.co.nz
jucyworld.com.web2.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
prod.jucy.co.nz
web1.nix.jucy.co.nz
web2.nix.jucy.co.nz
www.ecotoursmilford.co.nz
www.ecotoursmilford.co.nz.loadbalancer.nix.jucy.co.nz
www.ecotoursmilford.co.nz.prod.jucy.co.nz
www.ecotoursmilford.co.nz.web1.nix.jucy.co.nz
www.ecotoursmilford.co.nz.web2.nix.jucy.co.nz
www.jucy.co.nz
www.jucy.co.nz.loadbalancer.nix.jucy.co.nz
www.jucy.co.nz.prod.jucy.co.nz
www.jucy.co.nz.web1.nix.jucy.co.nz
www.jucy.co.nz.web2.nix.jucy.co.nz
www.jucy.com.au
www.jucy.com.au.loadbalancer.nix.jucy.co.nz
www.jucy.com.au.prod.jucy.co.nz
www.jucy.com.au.web1.nix.jucy.co.nz
www.jucy.com.au.web2.nix.jucy.co.nz
www.jucycruise.co.nz
www.jucycruise.co.nz.loadbalancer.nix.jucy.co.nz
www.jucycruise.co.nz.prod.jucy.co.nz
www.jucycruise.co.nz.web1.nix.jucy.co.nz
www.jucycruise.co.nz.web2.nix.jucy.co.nz
www.jucyrentals.de
www.jucyrentals.de.loadbalancer.nix.jucy.co.nz
www.jucyrentals.de.prod.jucy.co.nz
www.jucyrentals.de.web1.nix.jucy.co.nz
www.jucyrentals.de.web2.nix.jucy.co.nz
www.jucysnooze.co.nz
www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
www.jucysnooze.co.nz.prod.jucy.co.nz
www.jucysnooze.co.nz.web1.nix.jucy.co.nz
www.jucysnooze.co.nz.web2.nix.jucy.co.nz
www.jucyusa.com
www.jucyusa.com.loadbalancer.nix.jucy.co.nz
www.jucyusa.com.prod.jucy.co.nz
www.jucyusa.com.web1.nix.jucy.co.nz
www.jucyusa.com.web2.nix.jucy.co.nz
www.jucyworld.com
www.jucyworld.com.loadbalancer.nix.jucy.co.nz
www.jucyworld.com.prod.jucy.co.nz
www.jucyworld.com.web1.nix.jucy.co.nz
www.jucyworld.com.web2.nix.jucy.co.nz

Other certificates including the domain name jucy.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for loadbalancer.nix.jucy.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIRaDCCEFCgAwIBAgISBLTjD/J1qj5geks0xVkj9o/kMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MjQwNTI0MjBaFw0x
ODA4MjIwNTI0MjBaMCYxJDAiBgNVBAMTG2xvYWRiYWxhbmNlci5uaXguanVjeS5j
by5uejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKwoZVv+a8kmYSl/
Pwgmz1X9CTtfbQx23XOsRQiKZkONA5/YGr8+GVRaZTE989lcNeLW+tItDKt0ljdn
a0uZDlJ8cjYnjM+eILrmqrfSLwWYBxp3JY+At4en97JOVC0yHPGe7wDjdf3g3+tO
mx83IUX7rry4RWeWVlK51UQfeO2rciZrOKDv/egrw6WHwbkR7M+GmEWk4RWhNkG3
C1g2UZR1IcRDHIDCq+DXUW4geuOtDyB1JyRr4zQ4t8jm9tTwDYcLsdmouJTRepI3
gmxzoAm2DlObgk6NCVD6QJTAB9gK0LEWP0TjWcbhx6o+3xLkvUpIy68S6a9HDNfm
R7R0cSsCAwEAAaOCDmowgg5mMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUn76hjOfx
zyfASH8evuh09mizxAcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCCC2wGA1UdEQSCC2MwggtfghJhdXRoLmp1Y3l3b3Js
ZC5jb22CEWNwLm5peC5qdWN5LmNvLm56ghVlY290b3Vyc21pbGZvcmQuY28ubnqC
MWVjb3RvdXJzbWlsZm9yZC5jby5uei5sb2FkYmFsYW5jZXIubml4Lmp1Y3kuY28u
bnqCJWVjb3RvdXJzbWlsZm9yZC5jby5uei5wcm9kLmp1Y3kuY28ubnqCKWVjb3Rv
dXJzbWlsZm9yZC5jby5uei53ZWIxLm5peC5qdWN5LmNvLm56gillY290b3Vyc21p
bGZvcmQuY28ubnoud2ViMi5uaXguanVjeS5jby5ueoIKanVjeS5jby5ueoImanVj
eS5jby5uei5sb2FkYmFsYW5jZXIubml4Lmp1Y3kuY28ubnqCGmp1Y3kuY28ubnou
cHJvZC5qdWN5LmNvLm56gh5qdWN5LmNvLm56LndlYjEubml4Lmp1Y3kuY28ubnqC
Hmp1Y3kuY28ubnoud2ViMi5uaXguanVjeS5jby5ueoILanVjeS5jb20uYXWCJ2p1
Y3kuY29tLmF1LmxvYWRiYWxhbmNlci5uaXguanVjeS5jby5ueoIbanVjeS5jb20u
YXUucHJvZC5qdWN5LmNvLm56gh9qdWN5LmNvbS5hdS53ZWIxLm5peC5qdWN5LmNv
Lm56gh9qdWN5LmNvbS5hdS53ZWIyLm5peC5qdWN5LmNvLm56ghBqdWN5Y3J1aXNl
LmNvLm56gixqdWN5Y3J1aXNlLmNvLm56LmxvYWRiYWxhbmNlci5uaXguanVjeS5j
by5ueoIganVjeWNydWlzZS5jby5uei5wcm9kLmp1Y3kuY28ubnqCJGp1Y3ljcnVp
c2UuY28ubnoud2ViMS5uaXguanVjeS5jby5ueoIkanVjeWNydWlzZS5jby5uei53
ZWIyLm5peC5qdWN5LmNvLm56gg5qdWN5cmVudGFscy5kZYIqanVjeXJlbnRhbHMu
ZGUubG9hZGJhbGFuY2VyLm5peC5qdWN5LmNvLm56gh5qdWN5cmVudGFscy5kZS5w
cm9kLmp1Y3kuY28ubnqCImp1Y3lyZW50YWxzLmRlLndlYjEubml4Lmp1Y3kuY28u
bnqCImp1Y3lyZW50YWxzLmRlLndlYjIubml4Lmp1Y3kuY28ubnqCEGp1Y3lzbm9v
emUuY28ubnqCLGp1Y3lzbm9vemUuY28ubnoubG9hZGJhbGFuY2VyLm5peC5qdWN5
LmNvLm56giBqdWN5c25vb3plLmNvLm56LnByb2QuanVjeS5jby5ueoIkanVjeXNu
b296ZS5jby5uei53ZWIxLm5peC5qdWN5LmNvLm56giRqdWN5c25vb3plLmNvLm56
LndlYjIubml4Lmp1Y3kuY28ubnqCC2p1Y3l1c2EuY29tgidqdWN5dXNhLmNvbS5s
b2FkYmFsYW5jZXIubml4Lmp1Y3kuY28ubnqCG2p1Y3l1c2EuY29tLnByb2QuanVj
eS5jby5ueoIfanVjeXVzYS5jb20ud2ViMS5uaXguanVjeS5jby5ueoIfanVjeXVz
YS5jb20ud2ViMi5uaXguanVjeS5jby5ueoINanVjeXdvcmxkLmNvbYIpanVjeXdv
cmxkLmNvbS5sb2FkYmFsYW5jZXIubml4Lmp1Y3kuY28ubnqCHWp1Y3l3b3JsZC5j
b20ucHJvZC5qdWN5LmNvLm56giFqdWN5d29ybGQuY29tLndlYjEubml4Lmp1Y3ku
Y28ubnqCIWp1Y3l3b3JsZC5jb20ud2ViMi5uaXguanVjeS5jby5ueoIbbG9hZGJh
bGFuY2VyLm5peC5qdWN5LmNvLm56gg9wcm9kLmp1Y3kuY28ubnqCE3dlYjEubml4
Lmp1Y3kuY28ubnqCE3dlYjIubml4Lmp1Y3kuY28ubnqCGXd3dy5lY290b3Vyc21p
bGZvcmQuY28ubnqCNXd3dy5lY290b3Vyc21pbGZvcmQuY28ubnoubG9hZGJhbGFu
Y2VyLm5peC5qdWN5LmNvLm56gil3d3cuZWNvdG91cnNtaWxmb3JkLmNvLm56LnBy
b2QuanVjeS5jby5ueoItd3d3LmVjb3RvdXJzbWlsZm9yZC5jby5uei53ZWIxLm5p
eC5qdWN5LmNvLm56gi13d3cuZWNvdG91cnNtaWxmb3JkLmNvLm56LndlYjIubml4
Lmp1Y3kuY28ubnqCDnd3dy5qdWN5LmNvLm56gip3d3cuanVjeS5jby5uei5sb2Fk
YmFsYW5jZXIubml4Lmp1Y3kuY28ubnqCHnd3dy5qdWN5LmNvLm56LnByb2QuanVj
eS5jby5ueoIid3d3Lmp1Y3kuY28ubnoud2ViMS5uaXguanVjeS5jby5ueoIid3d3
Lmp1Y3kuY28ubnoud2ViMi5uaXguanVjeS5jby5ueoIPd3d3Lmp1Y3kuY29tLmF1
git3d3cuanVjeS5jb20uYXUubG9hZGJhbGFuY2VyLm5peC5qdWN5LmNvLm56gh93
d3cuanVjeS5jb20uYXUucHJvZC5qdWN5LmNvLm56giN3d3cuanVjeS5jb20uYXUu
d2ViMS5uaXguanVjeS5jby5ueoIjd3d3Lmp1Y3kuY29tLmF1LndlYjIubml4Lmp1
Y3kuY28ubnqCFHd3dy5qdWN5Y3J1aXNlLmNvLm56gjB3d3cuanVjeWNydWlzZS5j
by5uei5sb2FkYmFsYW5jZXIubml4Lmp1Y3kuY28ubnqCJHd3dy5qdWN5Y3J1aXNl
LmNvLm56LnByb2QuanVjeS5jby5ueoIod3d3Lmp1Y3ljcnVpc2UuY28ubnoud2Vi
MS5uaXguanVjeS5jby5ueoIod3d3Lmp1Y3ljcnVpc2UuY28ubnoud2ViMi5uaXgu
anVjeS5jby5ueoISd3d3Lmp1Y3lyZW50YWxzLmRlgi53d3cuanVjeXJlbnRhbHMu
ZGUubG9hZGJhbGFuY2VyLm5peC5qdWN5LmNvLm56giJ3d3cuanVjeXJlbnRhbHMu
ZGUucHJvZC5qdWN5LmNvLm56giZ3d3cuanVjeXJlbnRhbHMuZGUud2ViMS5uaXgu
anVjeS5jby5ueoImd3d3Lmp1Y3lyZW50YWxzLmRlLndlYjIubml4Lmp1Y3kuY28u
bnqCFHd3dy5qdWN5c25vb3plLmNvLm56gjB3d3cuanVjeXNub296ZS5jby5uei5s
b2FkYmFsYW5jZXIubml4Lmp1Y3kuY28ubnqCJHd3dy5qdWN5c25vb3plLmNvLm56
LnByb2QuanVjeS5jby5ueoIod3d3Lmp1Y3lzbm9vemUuY28ubnoud2ViMS5uaXgu
anVjeS5jby5ueoIod3d3Lmp1Y3lzbm9vemUuY28ubnoud2ViMi5uaXguanVjeS5j
by5ueoIPd3d3Lmp1Y3l1c2EuY29tgit3d3cuanVjeXVzYS5jb20ubG9hZGJhbGFu
Y2VyLm5peC5qdWN5LmNvLm56gh93d3cuanVjeXVzYS5jb20ucHJvZC5qdWN5LmNv
Lm56giN3d3cuanVjeXVzYS5jb20ud2ViMS5uaXguanVjeS5jby5ueoIjd3d3Lmp1
Y3l1c2EuY29tLndlYjIubml4Lmp1Y3kuY28ubnqCEXd3dy5qdWN5d29ybGQuY29t
gi13d3cuanVjeXdvcmxkLmNvbS5sb2FkYmFsYW5jZXIubml4Lmp1Y3kuY28ubnqC
IXd3dy5qdWN5d29ybGQuY29tLnByb2QuanVjeS5jby5ueoIld3d3Lmp1Y3l3b3Js
ZC5jb20ud2ViMS5uaXguanVjeS5jby5ueoIld3d3Lmp1Y3l3b3JsZC5jb20ud2Vi
Mi5uaXguanVjeS5jby5uejCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYB
BAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu
b3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkg
YmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFj
Y29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0
dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMIIBAwYKKwYBBAHWeQIE
AgSB9ASB8QDvAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFj
kNHVxwAABAMARzBFAiEAgxz61//ltKDUnF0MmS559tmJErSYwowa3X3H476JmtwC
IAb+eYt/11pGAOap5wGoyB9pGcjYusXIXoZf8CqV53ynAHUAVYHUwhaQNgFK6gub
VzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFjkNHV3gAABAMARjBEAiBXoMgOosx/p/uc
pfUdUv0uIxpLr4zRydcuj+tvRNzlcwIgPd0BEKTldni+IDpAdovCUf/Jn8ZTzbm0
aEvmC+gpGJ0wDQYJKoZIhvcNAQELBQADggEBADxiM0BSDYixmZsEDGDa2fVkDSVV
4Jl19eqaHHTyQH5o6r7o+pg5qgS+USwX9H7qyCNR6pOtIoXbkBwAgCJYvnGkSyZy
rqLZ/m6gakuU/Fg3OVACj2aLjbzBKDr6ugogOfE1O7HhcMXXYkiA4ZokmY7VJNli
zKKloV/p+LlIKvfFXb26vnO51t37rIx7lPRc4H62Lhqhnf0nJ5KEtixdYF74udmg
rs5zlkKzBpjiIwahRVFWZg/7OvEG1P0/ma5+NVMs0IllHQRI0eR+U6SgUdVRICTg
Q4d0Z4ZhsHq+FeVMCSBzo2UP2y0WCbb3zyMaVFKHgtiLZbejF7M/W7jQ4eE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArChlW/5rySZhKX8/CCbP
Vf0JO19tDHbdc6xFCIpmQ40Dn9gavz4ZVFplMT3z2Vw14tb60i0Mq3SWN2drS5kO
UnxyNieMz54guuaqt9IvBZgHGnclj4C3h6f3sk5ULTIc8Z7vAON1/eDf606bHzch
RfuuvLhFZ5ZWUrnVRB947atyJms4oO/96CvDpYfBuRHsz4aYRaThFaE2QbcLWDZR
lHUhxEMcgMKr4NdRbiB6460PIHUnJGvjNDi3yOb21PANhwux2ai4lNF6kjeCbHOg
CbYOU5uCTo0JUPpAlMAH2ArQsRY/RONZxuHHqj7fEuS9SkjLrxLpr0cM1+ZHtHRx
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410001787329971470894013338676065786564580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-24 05:24:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-22 05:24:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21732908432120814016824468668548265011694315148157931423451296735207732290904017187215384456924984974813211714296810592416128714435730360597508601968781859941773978018778784074395523549455805594809906337869978981337754466745340671123567151514046728910100663318634758425152760835644546005311513659326079192147938095456218220503016579555270160354186628774046886010924459828785853750160655859528092658901677879594845343503121569197147792925130302991352279366761692395108005189510991856210453588696921183013226287949928982619719107388905561745974858120319716212739310228196950655671561294060556420360232273456375526617387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9fbea18ce7f1cf27c0487f1ebee874f668b3c407
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2915 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotoursmilford.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotoursmilford.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotoursmilford.co.nz.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotoursmilford.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotoursmilford.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyrentals.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyrentals.de.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyrentals.de.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyrentals.de.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyrentals.de.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecotoursmilford.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecotoursmilford.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecotoursmilford.co.nz.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecotoursmilford.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecotoursmilford.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyrentals.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyrentals.de.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyrentals.de.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyrentals.de.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyrentals.de.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016390d1d5c70000040300473045022100831cfad7ffe5b4a0d49c5d0c992e79f6d98912b498c28c1add7dc7e3be899adc022006fe798b7fd75a4600e6a9e701a8c81f6919c8d8bac5c85e865ff02a95e77ca70075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016390d1d5de0000040300463044022057a0c80ea2cc7fa7fb9ca5f51d52fd2e231a4baf8cd1c9d72e8feb6f44dce57302203ddd0110a4e57678be203a40768bc251ffc99fc653cdb9b4684be60be829189d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003c623340520d88b1999b040c60dad9f5640d2555e09975f5ea9a1c74f2407e68eabee8fa9839aa04be512c17f47eeac82351ea93ad2285db901c00802258be71a44b2672aea2d9fe6ea06a4b94fc58373950028f668b8dbcc1283afaba0a2039f1353bb1e170c5d7624880e19a24998ed524d962cca2a5a15fe9f8b9482af7c55dbdbabe73b9d6ddfbac8c7b94f45ce07eb62e1aa19dfd27279284b62c5d605ef8b9d9a0aece739642b30698e22306a1455156660ffb3af106d4fd3f99ae7e35532cd089651d0448d1e47e53a4a051d5512024e0438774678661b07abe15e54c092073a3650fdb2d1609b6f7cf231a54528782d88b65b7a317b33f5bb8d0e1e1