leiden-status.inqdoconnect.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d3:9c:06:c0:6c:d1:7f:c0:f1:8f:4c:ab:96:72:16:12:6c was issued on by Let's Encrypt.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leiden-status.inqdoconnect.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d3:9c:06:c0:6c:d1:7f:c0:f1:8f:4c:ab:96:72:16:12:6c
Serial Number (int): 333343831839566476080225883644770632733292
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:b7:e7:63:48:65:5d:eb:ad:b0:d5:73:49:ae:85:a4:69:4d:22:2b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b1:ec:84:f7:cc:68:f8:46:64:c8:06:31:c7:fb:34:13:6c:26:e6:43
Fingerprint (sha256): 43:7a:40:9e:c4:6c:42:21:0b:62:13:3d:f9:dc:d0:57:da:67:1d:91:45:08:e0:6f:69:50:73:34:bd:65:37:75

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leiden-status.inqdoconnect.nl

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leiden-status.inqdoconnect.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

leiden-status.inqdoconnect.nl
status-simforthings.bics.com
status.brrice.edu
status.churchdesk.com
status.clearhaus.com
status.clipchamp.com
status.cloudhelix.io
status.eikplatform.io
status.flying-sphinx.com
status.forepaas.io
status.free.gg
status.futureproofs.net
status.gini.net
status.keli.kellpro.com
status.kvamnet.no
status.notebowl.com
status.pandascore.co
status.peoplecert.org
status.pressburst.help
status.scripturaengage.com
status.seatscouts.com
status.signalsciences.net
status.slimpay.com
status.spotmyphotos.com
status.tave.com
status.tekna.no
status.uploadcare.com
status.weecare.co
status.wegift.io
status.wlf.com.au
status.xi.nutanix.com
uvahva-status.inqdoconnect.nl

Other certificates including the domain name inqdoconnect.nl

(limited to 100 certificates)
leiden-status.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
bildstatus.de
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
bildstatus.de
bildstatus.de
leiden-status.inqdoconnect.nl
bildstatus.de
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
bildstatus.de
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
leiden-status.inqdoconnect.nl
*.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
*.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
*.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
bildstatus.de
*.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
bildstatus.de
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
*.inqdoconnect.nl
bildstatus.de
*.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
leiden-status.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
*.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
bildstatus.de
cloudstatus.azeti.net
bildstatus.de
*.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
*.inqdoconnect.nl
bildstatus.de
cloudstatus.azeti.net
cloudstatus.azeti.net
bildstatus.de
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net

Certificate

The complete raw certificate details for leiden-status.inqdoconnect.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IkLvSudjpkP4yB4X/iU
pOe9aGl3KWHnJV2JNAa0javZmLqf9CQxV/cK37Fn+EPFswADstbtNb1V6XGlKQny
c9u6XPVfcGiRZNYrgPbT3mTtw8NCEvEsciAFnL02jIM4dil6pHHboIcPET30oWP9
wD/75aRQmJOgD7ZI4o44qM3fiPrM4bNWxbQ2PPpcC+3lv2taFrnCuGFqPIt28BRw
spkkBKJuaHikh2MGw1EE1vvT00vUqtYXU6ustTmiNWJkJb7pEhkLOUYau/xzO4aD
Hzk47Ghhq9RB47mgouO+4TlaH7jwwc9JTtwDJMDtF5iDdWq8FOdpqkWDBgkwQaBs
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333343831839566476080225883644770632733292
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-08 12:29:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-06 12:29:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leiden-status.inqdoconnect.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26830100482768292376086880108029591115164054479407238160223906271740116350390561768909341831490480747657056035297235797748532440068746151133807674297291464483700202467314988845521444103625640109152227512028860315996797160914702968058594292384946445417198334496757352309326834425264145777953709143691344388665094073476864532101121028802694792058104980794587710967717752959316432174114923696959568695354128799006186507153711961771795914495761188360792110390313351327096176450261846954835948512059997894693803822510183731890132929141983513710246634489030713919141812973435482775538811600439497981001481035265945381137443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7cb7e76348655debadb0d57349ae85a4694d222b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (724 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leiden-status.inqdoconnect.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-simforthings.bics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.brrice.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.churchdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.clearhaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.clipchamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cloudhelix.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.eikplatform.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.flying-sphinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.forepaas.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.free.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.futureproofs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gini.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.keli.kellpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.kvamnet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.notebowl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.pandascore.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.peoplecert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.pressburst.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.scripturaengage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.seatscouts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.signalsciences.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.slimpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.spotmyphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.tave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.tekna.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.uploadcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.weecare.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.wegift.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.wlf.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.xi.nutanix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uvahva-status.inqdoconnect.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166f383d8bc00000403004630440220473425e184534c86e925c6d796648e3634a4f44f7638606f12ad59a7b52d143502202dbe3ec10773c05d78218fefdd57abf1f5ef93830bd57e145ecaa7dcda7c8028007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166f383d98100000403004730450221008987c84c3602f6735902f714067c14ac1e03d7d336b919de4658b78b7b9c333f022050a562c09abcb4ea74c0db99cf67bec9e724a797a51c8c2c6e1c424016848a3e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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