vnpay.vntopup.vn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3a:f9:11:26:cc:a6:4b:cc:bf:84:e8:5f:e8:9b:03:73:8d was issued on by Let's Encrypt.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vnpay.vntopup.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3a:f9:11:26:cc:a6:4b:cc:bf:84:e8:5f:e8:9b:03:73:8d
Serial Number (int): 281404301903637786204806041706309265617805
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4f:f4:1c:e9:1a:62:0e:57:7d:dc:dd:6a:64:6b:db:16:9d:d6:d1:11
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a0:06:1e:91:be:ff:15:39:25:a6:1c:c5:5c:26:4f:bb:b8:41:1b:bf
Fingerprint (sha256): 5e:da:05:37:1a:fd:8f:85:2f:64:68:c2:b2:e0:65:5c:5f:ef:4f:19:62:bf:8c:3c:75:91:1e:74:39:be:bd:57

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate vnpay.vntopup.vn

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vnpay.vntopup.vn

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abbank.vntopup.vn
agribank.vntopup.vn
bankweb.vntopup.vn
baovietbank.vntopup.vn
bidc.vntopup.vn
bidv.vntopup.vn
bidvsmartbanking.vn
dongabank.vntopup.vn
eximbank.vntopup.vn
ficombank.vntopup.vn
gpbank.vntopup.vn
hdbank.vntopup.vn
indovinabank.vntopup.vn
lienvietpostbank.vntopup.vn
maritime.vntopup.vn
mb.vntopup.vn
nagios.vnpay.vn
namabank.vntopup.vn
namamobilebanking.vn
navibank.vntopup.vn
ocb.vntopup.vn
oceanbank.vntopup.vn
pgbank.vntopup.vn
sacombank.vntopup.vn
scb.vntopup.vn
seabank.vntopup.vn
shb.vntopup.vn
simdanang.vn
techcombank.vntopup.vn
tienphongbank.vntopup.vn
vib.vntopup.vn
vid.vntopup.vn
vietabank.vntopup.vn
vnpay.vntopup.vn
vnticket.vntopup.vn
vpbank.vntopup.vn
www.bidvsmartbanking.vn
www.simdanang.vn

Other certificates including the domain name vntopup.vn

(limited to 100 certificates)
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn
vnpay.vntopup.vn

Certificate

The complete raw certificate details for vnpay.vntopup.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6iwCmIk1AY6c9YYru/Ah
hP8NhC0qz5mAy3jJWJtWEO7iNpRK2k6H5sU0v//7F0EquFpcoNYy7hkJ1MIza1U+
FZw1rPoDvPwW/XYWzBwBwLR+d9rNhxlVtggtH8zYP2NN6nqXAkmOFbaVXw4KLdGv
uVK+ae5djoNIiOVEkiJ3rOcdJifnXqkuDqQPp1GKTWKI4vZTIVf+1ZoY3lpQ6e+U
YstrMz9Kxkw4t4mD+Iv8ymAyqjY3CzI2YsUpoJqPBDoNk3gMdDkcaQLJQCRK36CE
REj0WxRLUF2lp++VIss3q7muxdBdMsAJvt7pKfOv6pTQ+sGFmbCLwCu++WyYsPTJ
0CTjokWrwJf4RqeFcvRkAlc7Ov+KeFMDnkVgSpkVB8TJyDt9jgEDo54V4N5RoAkx
3Zls646RYuMwwSX2BqmypQrSasD0metuqNKWiv8VFEBUaHDeoN/wgSX1fphr3uzE
vZkjQn79Megy8zA7NbZAPkKmrkFB9KF1+0j7qlqGkHHva2iN12E3krvKM+p3MqJq
9miQq8HWc0GuUI09FbTjKSasPE4on4wMvzHo45wK94sRZb0AvV2aysf9AKktUtDs
6YheQiVf/2eN8lawO/b3h6CCm/NW22lvni5zoIF9BGkvuSDOkkBdYqKMovSAnLVx
oP4LyIONm91kgwnYY4wCOpsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281404301903637786204806041706309265617805
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-10 08:48:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-08 08:48:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vnpay.vntopup.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 955338062333277371769256347965762092857893432119884732628709012488998501824960515567212820518156092588826182182204472322663901981046591665485331383706805801088488663524160321673165035303822680656061337543418206124110847223306386483160625910805464061406926235589973351655030774536747795273934693634740692617634054267476122309504079876510609237971930787084069437496388498397456863980974540717318099373628975419582581731854062220980932325432680163690374131798764989669131035218567024193241260524250566358054470587657264999240792679179577212727551154013744001681448662218833013380983797232103330767535373148526871831959310763467020116761104852043487426868422246198141896116115094135184933232570666861681246932966789316653246004893284320625794784845517313675502938377074688809944782430034682942443164910653691851750973747070851112018378467231103710120444432089196838500376983975714717546061639829622973121458884126394275575119909740348871861521604809201098730306335421119857985992087705393321215893379108505186009728863946054172402724903950288698750067855105500957291995693119800699244887568949488315199995242344957205179637638672710843344291165868325244841428868641462952271057396597493969264181956732590936942230872205394035992906840731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ff41ce91a620e577ddcdd6a646bdb169dd6d111
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (767 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agribank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankweb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baovietbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidc.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidv.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidvsmartbanking.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dongabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eximbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ficombank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indovinabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lienvietpostbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maritime.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagios.vnpay.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namamobilebanking.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navibank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacombank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simdanang.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techcombank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tienphongbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vib.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vid.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnpay.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnticket.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bidvsmartbanking.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simdanang.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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