pundziala.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:df:97:3e:00:19:b1:90:62:28:db:6c:04:24:d1:29:bc:e6 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pundziala.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:df:97:3e:00:19:b1:90:62:28:db:6c:04:24:d1:29:bc:e6
Serial Number (int): 337420860970454426206784286846482662407398
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5f:44:b4:03:a3:3b:6d:e7:15:a2:a5:9b:53:e6:0f:e1:8a:dd:6c:35
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b8:73:60:71:2b:34:2c:8a:5b:79:29:26:b4:16:76:83:e0:00:da:f0
Fingerprint (sha256): 53:89:45:ea:11:f2:26:91:cf:5a:90:e4:d9:b0:c9:42:3f:0c:c6:89:5f:85:df:23:31:f4:e3:90:82:94:8f:d1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pundziala.pl

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pundziala.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.poetycko.zxy.me
mail.pundziala.pl
mail.rozmawiamy.pl
mail.samochody-zastepcze.pl
mail.tekstypoetycko.pl
poetycko.zxy.me
pundziala.pl
pundziala.poetycko.zxy.me
rozmawiamy.pl
rozmawiamy.poetycko.zxy.me
samochody-zastepcze.pl
samochody-zastepcze.poetycko.zxy.me
tekstypoetycko.pl
tekstypoetycko.poetycko.zxy.me
www.poetycko.zxy.me
www.pundziala.pl
www.pundziala.poetycko.zxy.me
www.rozmawiamy.pl
www.rozmawiamy.poetycko.zxy.me
www.samochody-zastepcze.pl
www.samochody-zastepcze.poetycko.zxy.me
www.tekstypoetycko.pl
www.tekstypoetycko.poetycko.zxy.me

Other certificates including the domain name pundziala.pl

(limited to 100 certificates)
pundziala.pl
pundziala.pl
pundziala.pl
pundziala.pl
abcseo.pl
pundziala.poetycko.zxy.me
pundziala.pl
pundziala.poetycko.zxy.me

Certificate

The complete raw certificate details for pundziala.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHMzCCBhugAwIBAgISA9+XPgAZsZBiKNtsBCTRKbzmMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEwMTIxODUxMzFaFw0x
ODAxMTAxODUxMzFaMBcxFTATBgNVBAMTDHB1bmR6aWFsYS5wbDCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAPYYTptno5AvizswrFwTu0Og2KXbBq1G0anj
DZ6JuF6zy5ZSBegtXmPU9owcgRUVKOAmcDe30wIBTQ0X2nbSBMGawcuMMPYxtfEE
YPzGjyvMXnYw7JRU4dQygYi6ng8m27FCiaoDP9wp51DYuJhbEXOWwTg2lPiZZQuf
XoJI+LyRG+zwdOw/ewyAuvPO0qQ1j2DkjdtfcfBdHpeBZTvkt42Rpwl5RFnOkmDe
n5Uz2bnl4t2urR5b+hb2jPSktAvvE1WNuqmNCmqFOzxUXvw/WjoOVdfzYASGeOPi
9b4UoiS8nyI8cweoNTj/a/QoXLc4lAnlx8bZczbmcoxdXBsXMiECAwEAAaOCBEQw
ggRAMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUX0S0A6M7becVoqWbU+YP4YrdbDUw
HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh
MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
LzCCAk0GA1UdEQSCAkQwggJAghRtYWlsLnBvZXR5Y2tvLnp4eS5tZYIRbWFpbC5w
dW5kemlhbGEucGyCEm1haWwucm96bWF3aWFteS5wbIIbbWFpbC5zYW1vY2hvZHkt
emFzdGVwY3plLnBsghZtYWlsLnRla3N0eXBvZXR5Y2tvLnBsgg9wb2V0eWNrby56
eHkubWWCDHB1bmR6aWFsYS5wbIIZcHVuZHppYWxhLnBvZXR5Y2tvLnp4eS5tZYIN
cm96bWF3aWFteS5wbIIacm96bWF3aWFteS5wb2V0eWNrby56eHkubWWCFnNhbW9j
aG9keS16YXN0ZXBjemUucGyCI3NhbW9jaG9keS16YXN0ZXBjemUucG9ldHlja28u
enh5Lm1lghF0ZWtzdHlwb2V0eWNrby5wbIIedGVrc3R5cG9ldHlja28ucG9ldHlj
a28uenh5Lm1lghN3d3cucG9ldHlja28uenh5Lm1lghB3d3cucHVuZHppYWxhLnBs
gh13d3cucHVuZHppYWxhLnBvZXR5Y2tvLnp4eS5tZYIRd3d3LnJvem1hd2lhbXku
cGyCHnd3dy5yb3ptYXdpYW15LnBvZXR5Y2tvLnp4eS5tZYIad3d3LnNhbW9jaG9k
eS16YXN0ZXBjemUucGyCJ3d3dy5zYW1vY2hvZHktemFzdGVwY3plLnBvZXR5Y2tv
Lnp4eS5tZYIVd3d3LnRla3N0eXBvZXR5Y2tvLnBsgiJ3d3cudGVrc3R5cG9ldHlj
a28ucG9ldHlja28uenh5Lm1lMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsr
BgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw
dC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25s
eSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4g
YWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQg
aHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQEL
BQADggEBACgRYWOmgTXEhxLG0aTGv7ajASNbKUaCp6QEiMlZ04vxlFsSsmXhF3Hu
qoG+SMAmahjHdZCfwLzm1jSMCFuPHWPBlH2YMzTUETgec28whprb8n2kLfBK7Amz
XVmroiC7aunL6qCneuqgnv+VKgpQF66TGX8iv5gLWlhR1wqoCPQnh7myOyFQgGUu
tq9A2fNR0soZ+o8FalQ+6uwGYcMfa7JlKPJBFmcUgOu2s6KDZYUvsRd4BeQzVycZ
mnQgRDpe264ZK0xx6MH9Bf8qZ65wY4ZMAS/lduQZN+w48/gb0qSxM2xxypmqIFsf
ws1VsRxc3XsIZThH6Wb/nP7jy+DQc1c=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hhOm2ejkC+LOzCsXBO7
Q6DYpdsGrUbRqeMNnom4XrPLllIF6C1eY9T2jByBFRUo4CZwN7fTAgFNDRfadtIE
wZrBy4ww9jG18QRg/MaPK8xedjDslFTh1DKBiLqeDybbsUKJqgM/3CnnUNi4mFsR
c5bBODaU+JllC59egkj4vJEb7PB07D97DIC6887SpDWPYOSN219x8F0el4FlO+S3
jZGnCXlEWc6SYN6flTPZueXi3a6tHlv6FvaM9KS0C+8TVY26qY0KaoU7PFRe/D9a
Og5V1/NgBIZ44+L1vhSiJLyfIjxzB6g1OP9r9ChctziUCeXHxtlzNuZyjF1cGxcy
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337420860970454426206784286846482662407398
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-12 18:51:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-10 18:51:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pundziala.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31066609279073537193804206448009137208622341748086639294308832576506998214635933333573245453451516154506582683351224432239783464424676932603744426360934974681320615210128996779538914855367196984194318795326977370329493586687993595445163023393266562109996048591598174668640094593189387401098660932717329828324580171550316318223001905740675240886142241284685624459591803448320135734210123748356380730264255992939880148207236120280085462411768924158445001657721859143320385898852781325125279229042793730870460217244923162001441785645875124538819452254066593037854827767606751967656732972244615385228321678841981387092513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f44b403a33b6de715a2a59b53e60fe18add6c35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (580 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.poetycko.zxy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pundziala.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.rozmawiamy.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.samochody-zastepcze.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tekstypoetycko.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poetycko.zxy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pundziala.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pundziala.poetycko.zxy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rozmawiamy.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rozmawiamy.poetycko.zxy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samochody-zastepcze.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samochody-zastepcze.poetycko.zxy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekstypoetycko.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekstypoetycko.poetycko.zxy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poetycko.zxy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pundziala.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pundziala.poetycko.zxy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rozmawiamy.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rozmawiamy.poetycko.zxy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samochody-zastepcze.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samochody-zastepcze.poetycko.zxy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekstypoetycko.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekstypoetycko.poetycko.zxy.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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