vinhomes1thanglong.tankienland.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:68:41:83:01:5c:cf:47:93:28:d4:eb:ca:20:7d:88:13:45 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vinhomes1thanglong.tankienland.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:41:83:01:5c:cf:47:93:28:d4:eb:ca:20:7d:88:13:45
Serial Number (int): 296813303993308378214892028508472649192261
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:74:36:12:ac:9d:fc:af:2b:70:d2:be:54:ec:ec:94:ae:69:02:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:c8:b3:fe:9e:f4:80:bc:c7:0e:34:9a:a4:a1:1f:2f:d6:fc:0c:c5
Fingerprint (sha256): 51:47:f4:3c:98:3b:ac:f7:9d:34:0f:0e:56:8a:bc:6a:bb:02:28:58:a7:1c:5c:28:1d:a5:f3:0b:35:fc:88:1e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate vinhomes1thanglong.tankienland.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vinhomes1thanglong.tankienland.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.tankienland.vn
mail.timescityt10parkhillpremium.com
mail.vinhomes1thanglong.net
mail.vinhomesthanglonghn.com
tankienland.com
tankienland.tankienland.com
tankienland.vn
timescityt10parkhillpremium.com
timescityt10parkhillpremium.tankienland.com
vinhomes1thanglong.net
vinhomes1thanglong.tankienland.com
vinhomesthanglonghn.com
vinhomesthanglonghn.tankienland.com
www.tankienland.com
www.tankienland.tankienland.com
www.tankienland.vn
www.timescityt10parkhillpremium.com
www.timescityt10parkhillpremium.tankienland.com
www.vinhomes1thanglong.net
www.vinhomes1thanglong.tankienland.com
www.vinhomesthanglonghn.com
www.vinhomesthanglonghn.tankienland.com

Other certificates including the domain name tankienland.com

(limited to 100 certificates)
tankienland.com
tankienland.com
tankienland.com
tankienland.com
tankienland.com
tankienland.com
vinhomes1thanglong.tankienland.com
westlake.tankienland.com
westlake.tankienland.com
sni.cloudflaressl.com
sni.cloudflaressl.com
tankienland.com
tankienland.com
tankienland.com
tankienland.com
mx.tankienland.com
tankienland.com
www.tankienland.com
sni.cloudflaressl.com
tankienland.com
www.data.tankienland.com
tankienland.com
tankienland.com

Certificate

The complete raw certificate details for vinhomes1thanglong.tankienland.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHsDCCBpigAwIBAgISA2hBgwFcz0eTKNTryiB9iBNFMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjEyMjQwMzQyMDBaFw0x
NzAzMjQwMzQyMDBaMC0xKzApBgNVBAMTInZpbmhvbWVzMXRoYW5nbG9uZy50YW5r
aWVubGFuZC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIu46x
/K/gkrqYY9bAGL1x91/wegnOKALh2sy1bqAwlFHd20eX0PiAoJ2g5Ifhgzjo5k0C
HYrUYnJ3zbjqiqQyGzN6AjFXNw4SXHDUWOUyKOranG9m+zE5enmzx9+GBpc0yVDU
hjoxCmoVU7ZSRKR9WFWdbFc5HLmB9it3cAGCcEe5FBnDWoDdpejYtqL5T1SXhjp6
UD+Bs/HtBpB9cXaZbBkL7qKPjyAlOt1WaImcb3kgvcKspqc0JaYUad2j7hx0GgGB
DqtYnZl9/Uu3QY6EVYnmisYkWBfVjQ7FVua/7luKp7158x7uSlfLwxOJcYnshXFg
hmvlOpXOYhtc+QapAgMBAAGjggSrMIIEpzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FGt0NhKsnfyvK3DSvlTs7JSuaQJmMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIICswYDVR0RBIICqjCCAqaCE21haWwu
dGFua2llbmxhbmQudm6CJG1haWwudGltZXNjaXR5dDEwcGFya2hpbGxwcmVtaXVt
LmNvbYIbbWFpbC52aW5ob21lczF0aGFuZ2xvbmcubmV0ghxtYWlsLnZpbmhvbWVz
dGhhbmdsb25naG4uY29tgg90YW5raWVubGFuZC5jb22CG3RhbmtpZW5sYW5kLnRh
bmtpZW5sYW5kLmNvbYIOdGFua2llbmxhbmQudm6CH3RpbWVzY2l0eXQxMHBhcmto
aWxscHJlbWl1bS5jb22CK3RpbWVzY2l0eXQxMHBhcmtoaWxscHJlbWl1bS50YW5r
aWVubGFuZC5jb22CFnZpbmhvbWVzMXRoYW5nbG9uZy5uZXSCInZpbmhvbWVzMXRo
YW5nbG9uZy50YW5raWVubGFuZC5jb22CF3ZpbmhvbWVzdGhhbmdsb25naG4uY29t
giN2aW5ob21lc3RoYW5nbG9uZ2huLnRhbmtpZW5sYW5kLmNvbYITd3d3LnRhbmtp
ZW5sYW5kLmNvbYIfd3d3LnRhbmtpZW5sYW5kLnRhbmtpZW5sYW5kLmNvbYISd3d3
LnRhbmtpZW5sYW5kLnZugiN3d3cudGltZXNjaXR5dDEwcGFya2hpbGxwcmVtaXVt
LmNvbYIvd3d3LnRpbWVzY2l0eXQxMHBhcmtoaWxscHJlbWl1bS50YW5raWVubGFu
ZC5jb22CGnd3dy52aW5ob21lczF0aGFuZ2xvbmcubmV0giZ3d3cudmluaG9tZXMx
dGhhbmdsb25nLnRhbmtpZW5sYW5kLmNvbYIbd3d3LnZpbmhvbWVzdGhhbmdsb25n
aG4uY29tgid3d3cudmluaG9tZXN0aGFuZ2xvbmdobi50YW5raWVubGFuZC5jb20w
gf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIw
gZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5
IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhl
IENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0
Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAheMKYi9nLWMnmGGQ
Xi454lvCvC1lUJjeSeTtMv2q4MtOmc5GWUDBG3QslM+Gq0U60H+/G3AhTipmQuL4
oE50ZwvaOR3Hf9eS9JpMmiX92wO9TDRt2mzkG32UsNXDa1A49e69cTlAdZYvO7Y2
zPiA8+Mt8dgnIFvAa5qgrXc9j/bfqzEvb1fQrIin1y35xaGEgBPsiPgu+6NQOTHu
Kh+Ev8qT1Kzn0kgU0OpmhnfW+M6a8cgm/i4B9Hk8hfvtCETYKkk8KBcfPtqFTxeW
ZVAfeQMV8IT2i+xU6rcFrfCZFTbZfKROdgt0fD5bC6dZi/yvhKiWwkN4Xo7RxZzb
B9CYzw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLuOsfyv4JK6mGPWwBi9
cfdf8HoJzigC4drMtW6gMJRR3dtHl9D4gKCdoOSH4YM46OZNAh2K1GJyd8246oqk
MhszegIxVzcOElxw1FjlMijq2pxvZvsxOXp5s8ffhgaXNMlQ1IY6MQpqFVO2UkSk
fVhVnWxXORy5gfYrd3ABgnBHuRQZw1qA3aXo2Lai+U9Ul4Y6elA/gbPx7QaQfXF2
mWwZC+6ij48gJTrdVmiJnG95IL3CrKanNCWmFGndo+4cdBoBgQ6rWJ2Zff1Lt0GO
hFWJ5orGJFgX1Y0OxVbmv+5biqe9efMe7kpXy8MTiXGJ7IVxYIZr5TqVzmIbXPkG
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296813303993308378214892028508472649192261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-24 03:42:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-24 03:42:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vinhomes1thanglong.tankienland.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25340148995887050298299314172323404669289640179280555995231397123786369623950091780117653016890957861901323623118981632774009754086338986524354734038301882348769729748013882152086944147219839386826990606009846908854710837469406664713533361034273561207470211149446894067985380544650242448080957893656414274080348601303972811042092836698275405756218798091864337752267074987677651123876761366282326999838184538641055665332104900153848477647713838243431209333532135866998031765034427001930172598984659250957759784964421164457205270081122947302105359363541680187773994214957208704933397737756417741529438796022169162286761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b743612ac9dfcaf2b70d2be54ecec94ae690266
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (682 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tankienland.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.timescityt10parkhillpremium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vinhomes1thanglong.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vinhomesthanglonghn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tankienland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tankienland.tankienland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tankienland.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timescityt10parkhillpremium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timescityt10parkhillpremium.tankienland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinhomes1thanglong.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinhomes1thanglong.tankienland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinhomesthanglonghn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinhomesthanglonghn.tankienland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tankienland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tankienland.tankienland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tankienland.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timescityt10parkhillpremium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timescityt10parkhillpremium.tankienland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinhomes1thanglong.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinhomes1thanglong.tankienland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinhomesthanglonghn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinhomesthanglonghn.tankienland.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0085e30a622f672d63279861905e2e39e25bc2bc2d655098de49e4ed32fdaae0cb4e99ce465940c11b742c94cf86ab453ad07fbf1b70214e2a6642e2f8a04e74670bda391dc77fd792f49a4c9a25fddb03bd4c346dda6ce41b7d94b0d5c36b5038f5eebd71394075962f3bb636ccf880f3e32df1d827205bc06b9aa0ad773d8ff6dfab312f6f57d0ac88a7d72df9c5a1848013ec88f82efba3503931ee2a1f84bfca93d4ace7d24814d0ea668677d6f8ce9af1c826fe2e01f4793c85fbed0844d82a493c28171f3eda854f179665501f790315f084f68bec54eab705adf0991536d97ca44e760b747c3e5b0ba7598bfcaf84a896c243785e8ed1c59cdb07d098cf