debusk.greenek12.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fe:9d:fb:fc:0e:b6:fa:78:88:10:d5:d0:b7:86:4f:7a:cf was issued on by Let's Encrypt.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=debusk.greenek12.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fe:9d:fb:fc:0e:b6:fa:78:88:10:d5:d0:b7:86:4f:7a:cf
Serial Number (int): 347978576167381877161206491922671508355791
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:39:83:af:2a:21:4f:f2:07:8f:57:28:0d:fc:70:29:12:5c:ac:4f
Fingerprint (sha256): 34:62:36:56:55:ec:8a:e5:ce:38:82:f5:00:0b:fc:a8:28:49:a1:fb:fd:71:2c:f5:f5:a0:0a:80:a9:07:c1:35

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate debusk.greenek12.org

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for debusk.greenek12.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.arcataschooldistrict.org
admin.bbel.bbrook.org
admin.bbrook.org
admin.bereanchristian.com
admin.cheathamcountyschools.net
admin.cheathamhighccs.net
admin.eastcheathamccs.net
admin.harpethmiddleccs.net
admin.pegramccs.net
admin.westcheathamccs.net
bbhs.bbrook.org
bereanchristian.com
central.bpusd.net
deanza.bpusd.net
debusk.greenek12.org
elwin.bpusd.net
foster.bpusd.net
geddes.bpusd.net
grandcenterartsacademy.org
healthystartacademy.com
heath.bpusd.net
holland.bpusd.net
incarnatewordhs.org
jones.bpusd.net
kenmore.bpusd.net
lisanorthhigh.org
mhs.molineschools.org
phs.parlierunified.org
pleasantview.bpusd.net
santafe.bpusd.net
sierravistajr.bpusd.net
sttheresaschoolpalmsprings.org
tracy.bpusd.net
vineland.bpusd.net
wolcs.org
www.ashlandcityccs.net
www.bereanchristian.com
www.ccprep-academy.org
www.cheathammiddleccs.net
www.friendshaverford.org
www.kingstonspringsccs.net
www.lisanorthhigh.org
www.pleasantviewccs.net
www.saltlakespa.org
www.sttheresaschoolpalmsprings.org
www.sycamoremiddleccs.net

Other certificates including the domain name greenek12.org

(limited to 100 certificates)
admin.cdms.greenek12.org
admin.ljef.ljsd.org
www.cranburyschool.org
baileyton.greenek12.org
edcenter.greenek12.org
admin.cdhs.greenek12.org
admin.adultlearning.sunrisesd.ca
admin.hs.wvsd208.org
admin.cdms.greenek12.org
www.holyfamilycatholicacademy.net
admin.sghs.greenek12.org
ashlandcityccs.net
www.healthystartacademy.com
ps.bsd29j.com
cdms.greenek12.org
1.southampton.k12.nj.us
debusk.greenek12.org
admin.avrlacademy.org
benchmarkbobcats.org
1.southampton.k12.nj.us
www.crawfordschools.org
cra.freeholdtwp.k12.nj.us
1.southampton.k12.nj.us
admin.campcreek.greenek12.org
admin.bands.dekalbcentral.net
admin.aes.acsc.net
admin.adultlearning.sunrisesd.ca
www.holynamesf.com
2.southampton.k12.nj.us
admin.es.lorenaisd.net
1.southampton.k12.nj.us
admin.benchmarkbobcats.org
edcenter.greenek12.org
admin.coahomak12.org
mdm.greenek12.org
admin.adultlearning.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
sghs.greenek12.org
admin.adultlearning.sunrisesd.ca
jh.iasd.cc
www.southernwakeacademy.org
shs.lskysd.ca
nphs.bpusd.net
lacountycharterselpa.org
church.faithmarietta.org
admin.ersk.acsc.net
www.colegioangloamericanohgo.edu.mx
grandview.adsb.on.ca
admin.glenknoll.org
www.cristoreysanjose.org
admin.acsc.net
admin.bands.dekalbcentral.net
admin.chuckey.greenek12.org
*.greenek12.org
2.southampton.k12.nj.us
preschool.shelbycs.org
msdurham.org
1.southampton.k12.nj.us
debusk.greenek12.org
sachs.org
admin.ps17queens.com
admin.ups.lskysd.ca
*.greenek12.org
bcsdk12.org
harpethhighccs.net
campcreek.greenek12.org
coahomak12.org
admin.aes.lammersvilleschooldistrict.net
www.rosemont78.org
admin.acsc.net
1.southampton.k12.nj.us
admin.ike.iasd.cc
www.mstmaatroosevelt.org
www.ps17queens.com
bronxdalehs.org
cranburyschool.org
www.ckchicago.org
2.southampton.k12.nj.us
westcheathamccs.net
admin.kauffmanschool.org
sh.iasd.cc
admin.colegioedlio.org
1.southampton.k12.nj.us
1.southampton.k12.nj.us
admin.benchmarkbobcats.org
www.sainte-school.org
colonies.sunrisesd.ca
admin.avrlacademy.org
admin.bronxdalehs.org
oglesby.cps.edu
www.bsd29j.com
ckcs.lskysd.ca
faithmarietta.org
2.southampton.k12.nj.us
sunnybraemiddleschool.org
1.southampton.k12.nj.us
1.southampton.k12.nj.us
southbayadult.org
www.annaleeelementaryandsteammagnet.org
admin.rosemont78.org

Certificate

The complete raw certificate details for debusk.greenek12.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347978576167381877161206491922671508355791
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-10 00:57:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-09 00:57:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'debusk.greenek12.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1063 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arcataschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bbel.bbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bereanchristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cheathamcountyschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cheathamhighccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastcheathamccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harpethmiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pegramccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westcheathamccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbhs.bbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bereanchristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deanza.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debusk.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elwin.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foster.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geddes.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandcenterartsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthystartacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heath.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holland.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incarnatewordhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jones.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenmore.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisanorthhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.parlierunified.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pleasantview.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santafe.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierravistajr.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttheresaschoolpalmsprings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracy.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vineland.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashlandcityccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bereanchristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccprep-academy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheathammiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendshaverford.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingstonspringsccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lisanorthhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pleasantviewccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltlakespa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttheresaschoolpalmsprings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sycamoremiddleccs.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165c1325f41000004030046304402201bd05cca6e04b19b17e07fea4f1ad7cc0ac93c1c75ce31edc4cd4d3c420cf400022075a67070f43216be777a96b597ca2713b30082382dc997b7437e9b70ec028082007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165c1325f7e000004030047304502202fc334f13a6ef1c2dc1192876ae86db127bdc690ccb09497e9340751fc81b4a1022100c1a3d7c8d7ac903e08fd4d6c518e56b1b19bbb7b778ee8f202bb0363de573ed2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004495a42972dbe71e9bb8e9b6c2d5a20feef5e81511a1de56b57b6b7e9b68186e49a3122167a827c4123764606f2b0b9e0c879f8823552e56d4c1de7fdbf6c7c3c310730f3b3b96bfc74f4e51af88b5b50de2eb148a29518ca6caa7a1570b0a982cc6c02f9ed90c6fed67db04cd8f0c6b7e6876ac8f083c4c8a90a590cc3b741878280d98c6c93071408be77ef0fd0b90343bea4855108474f4a2af026218f3e1e2d74fa93df148b307217813e17ec35b9f0c582168bf7a58352690c88d3bcadc8934eb61120b56d2b7cb73411bcceed75148ea16f76b6ba481939dd846fbc1ec0983767fcf9b5efd96090384b3d6ff67dc6b653784a8652a6b35d728ab399788