files.atljewishacademy.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d8:01:c3:5a:ef:2e:84:ac:bc:40:b4:72:99:90:d6:75:14 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=files.atljewishacademy.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d8:01:c3:5a:ef:2e:84:ac:bc:40:b4:72:99:90:d6:75:14
Serial Number (int): 334840192620453439129160252227980912653588
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 43:ae:d4:d5:cb:94:84:52:23:55:46:9a:5c:6c:45:fb:02:87:65:47
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:52:a1:fd:7d:05:80:80:d1:0f:6e:76:d4:e8:5a:6f:11:13:d6:59
Fingerprint (sha256): 34:99:ac:72:36:0d:4d:cb:a1:2d:81:93:da:00:ba:e2:dc:a0:7b:79:5e:72:f9:55:21:f6:9b:60:cc:2b:05:d0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate files.atljewishacademy.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for files.atljewishacademy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

files.atljewishacademy.org

Other certificates including the domain name atljewishacademy.org

(limited to 100 certificates)
survey.atljewishacademy.org
admin.stes.todd.kyschools.us
nolacollegeprep.org
survey.atljewishacademy.org
survey.atljewishacademy.org
admin.wq.mtpcsd.org
admin.waldorfhighschool.org
it.atljewishacademy.org
topazschool.org
remote.atljewishacademy.org
survey.atljewishacademy.org
survey.atljewishacademy.org
vpms.icefps.org
admin.arroyo.scsdk8.org
www.bayheadschool.org
bcas.burke.k12.ga.us
castaichighschool.org
survey.atljewishacademy.org
atljewishacademy.org
admin.stuart.hcisd.org
columbian.tiffincityschools.org
www.atljewishacademy.org
lisawesthigh.lisaacademy.org
admin.vandenberg.southredford.org
elms.swartzcreek.org
www.cumbresbogota.edu.co
admin.idlewildelementaryschool.wearecms.com
admin.mes150.org
files.atljewishacademy.org
admin.tms.tiffincityschools.org
files.atljewishacademy.org
admin.tierralinda.scsdk8.org
central.scsdk8.org
admin.atljewishacademy.org
admin.bayheadschool.org
admin.arroyo.scsdk8.org
addams.southredford.org
www.villagetechschools.org
files.atljewishacademy.org
lisanorth.lisaacademy.org
remote.atljewishacademy.org
www.glenviewbulldogs.org
admin.dieck.swartzcreek.org
files.atljewishacademy.org
admin.stes.todd.kyschools.us
admin.abccs.org
admin.cano.hcisd.org
www.nawahi.org
admin.washington.tiffincityschools.org
atljewishacademy.org
admin.jctes.org
admin.nawahi.org
admin.cumbresbogota.edu.co
www.atljewishacademy.org
www.thecije.org
www.stegbert.org
admin.arroyo.scsdk8.org
wshs.masd209.org
atljewishacademy.org
survey.atljewishacademy.org
files.atljewishacademy.org
admin.noble.tiffincityschools.org
www.swartzcreek.org
washington.tiffincityschools.org
it.atljewishacademy.org
admin.atljewishacademy.org
www.collegeachievecentralcharterschool.org
remote.atljewishacademy.org
admin.hawthorneacad.org
files.atljewishacademy.org
www.hirschmetrohs.org
krout.tiffincityschools.org
tiffincityschools.org
wps.burke.k12.ga.us
tcchs.todd.kyschools.us
admin.lisachenal.lisaacademy.org
ntes.todd.kyschools.us
atljewishacademy.org
www.ahs.alcoaschools.net
admin.bclc.burke.k12.ga.us
burney.hattiesburgpsd.com
remote.atljewishacademy.org
admin.arroyo.scsdk8.org
admin.scvlc.swartzcreek.org
*.ad.atljewishacademy.org
admin.collegeachievecentralcharterschool.org
lisaspringdale.lisaacademy.org
abccs.org
www.abccs.org
it.atljewishacademy.org
www.biglagoon.org
it.atljewishacademy.org
admin.cumbresbogota.edu.co
admin.colegiosmadison.edu.mx
admin.shacademy.org
mams.masd209.org
addams.southredford.org
www.latcdace.com
lisachenal.lisaacademy.org
admin.castaichighschool.org

Certificate

The complete raw certificate details for files.atljewishacademy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGHjCCBQagAwIBAgISA9gBw1rvLoSsvEC0cpmQ1nUUMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMzAxNTU2NTFaFw0x
OTAxMjgxNTU2NTFaMCUxIzAhBgNVBAMTGmZpbGVzLmF0bGpld2lzaGFjYWRlbXku
b3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19KBixtpr2bcOHNc
/o5OWnaW//38aMb85L4DZ/l5nu2QtwyAtA50AbLzNtiB+RgKtkifg6HE9efuNj4G
Dpc6vsMC7jP+BXCF6YHXviOGrn9Ul+YNrQGnhs1Bwk7qctiGnxZZyDSwRoE2w1Cp
BOW4AI2OB6xZ70oxHCd2kc2zOD2vO2jpZHNYCHbvNWSuxNL0bCwKv7cpDP1slGDg
sujLy/3Nq9edY/dli+q4sMKWtYsm2wDz70QcuROwQXTNIgcRgd7l88uIplhmcKfU
fBtTcacbDQEXvXlrkq0tIDPLzTYs75fV62kIR4QnhdErn9FUkWfLeev5hi+svvpZ
TVipsQIDAQABo4IDITCCAx0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRDrtTVy5SE
UiNVRppcbEX7AodlRzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMCUGA1UdEQQeMByCGmZpbGVzLmF0bGpld2lzaGFjYWRl
bXkub3JnMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB
1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsG
AQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQg
dXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3
aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRz
ZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8A
dQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWbF6AyTAAAEAwBG
MEQCIEmDY2glov02+gvoX9L0aWjpUYhY+cOBB0Ouh/4Fp2pkAiB+Tol71s+/V3dU
TV7bjgS6BAbbLgbzIZTEUlIIMi+11AB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEA
KQaNsgiaN9kTAAABZsXoDd0AAAQDAEcwRQIgOBsLiqrxiv7zhuZ7STWgAo/USgjt
Dw65VgeAbZpfo9sCIQDepB1tlreI0ViZGL167MnuC7SdHVQX30nrrErDJdxqnTAN
BgkqhkiG9w0BAQsFAAOCAQEAftYQHRS+0vExQIfUqXHY2g5OLB3r1+ms2BwUZC5V
IZHgJAbShFrqNvBePcUmOq/AhdH9cD1yRGj/s4+pGF8d0QBcLWJlYh9ApGGHs4f5
vNIlO7KiqPw5b/kxuaRQMIUqrV/wA4m1DHhPie1YUszFm+wJ27CFX7QjgVu/vckF
RU9ApopvXLEBW3tOXxZVWZZ6Zz9vstCP5/daU0GjtQFuuZVNZ9iq+K0gA1U1cZVZ
Bz8hILqvYedRKbUnBkmODhTvLh7gG6rKP1Myhucaf/dEulXJDlHRY9Bqq9bmfMyD
BnMdgnFWSWQa2J1ELCn4+StjgYzWeUVfQOqyQoKdbGbY2g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19KBixtpr2bcOHNc/o5O
WnaW//38aMb85L4DZ/l5nu2QtwyAtA50AbLzNtiB+RgKtkifg6HE9efuNj4GDpc6
vsMC7jP+BXCF6YHXviOGrn9Ul+YNrQGnhs1Bwk7qctiGnxZZyDSwRoE2w1CpBOW4
AI2OB6xZ70oxHCd2kc2zOD2vO2jpZHNYCHbvNWSuxNL0bCwKv7cpDP1slGDgsujL
y/3Nq9edY/dli+q4sMKWtYsm2wDz70QcuROwQXTNIgcRgd7l88uIplhmcKfUfBtT
cacbDQEXvXlrkq0tIDPLzTYs75fV62kIR4QnhdErn9FUkWfLeev5hi+svvpZTVip
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334840192620453439129160252227980912653588
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-30 15:56:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-28 15:56:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'files.atljewishacademy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27245039959373965756103351460497301075865458472640979684928892966541919900309584634582332430233828077064669412610950634218402603366682152100866662760186694792361031336244316967923735920695684150601721278473390959399022850052412334645630280324816376209673005699577861656521973918159073598000439214258228703808536184581206773748066280815668724493129224565170182605621609236205506289450731096391817069941714433569758050914988247654650408816092751933872966838208817814906597382618477262031871053165026477184556883780162525568229035375997991032440641698897982699552148934680329629186438371486001142902892538040036175161777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43aed4d5cb9484522355469a5c6c45fb02876547
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.atljewishacademy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166c5e80c93000004030046304402204983636825a2fd36fa0be85fd2f46968e9518858f9c3810743ae87fe05a76a6402207e4e897bd6cfbf5777544d5edb8e04ba0406db2e06f32194c4525208322fb5d40076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000166c5e80ddd00000403004730450220381b0b8aaaf18afef386e67b4935a0028fd44a08ed0f0eb95607806d9a5fa3db022100dea41d6d96b788d1589918bd7aecc9ee0bb49d1d5417df49ebac4ac325dc6a9d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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