local.todmordennews.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:90:dd:30:fc:c5:75:39:99:4d:2d:80:ae:95:08:90:03:ad was issued on by Let's Encrypt.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.todmordennews.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:90:dd:30:fc:c5:75:39:99:4d:2d:80:ae:95:08:90:03:ad
Serial Number (int): 397743818307785248919257039037205465531309
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a2:a5:b5:65:02:1a:3a:46:76:cc:5a:ae:5c:aa:0a:f2:3f:8c:99:0d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f3:a2:a9:af:3f:87:f5:76:a3:4d:2d:10:4d:4b:d5:95:6e:c1:4c:5f
Fingerprint (sha256): 75:c5:06:42:2d:e0:7b:ec:3a:7c:f3:e9:20:8a:c9:f2:03:95:2e:17:73:a2:28:02:f4:13:92:ed:cc:28:c0:1b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate local.todmordennews.co.uk

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.todmordennews.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adsack.wanderful.ownlocal.com
annarborshopping.mlive.com
brighton.northumberlandnews.com
eastyorkbeach.toronto.com
local.abqjournal.com
local.amarillo.com
local.baystatebanner.com
local.brookingsregister.com
local.buchanobserver.co.uk
local.canalboat.co.uk
local.colerainetimes.co.uk
local.cotswoldlife.co.uk
local.dansvilleonline.com
local.essexlifemag.co.uk
local.exmouthherald.co.uk
local.fwbusinessweekly.com
local.gadsdentimes.com
local.janesvillemarketplace.com
local.letstalk24.co.uk
local.lisburntoday.co.uk
local.livingedge.co.uk
local.morleyobserver.co.uk
local.muskokaregion.com
local.northdevongazette.co.uk
local.observernewsonline.com
local.paducahsun.com
local.panolawatchman.com
local.petoskeynews.com
local.pinejournal.com
local.portsmouth.co.uk
local.postindependent.com
local.record-courier.com
local.redwoodfallsgazette.com
local.stjamesnews.com
local.thekansan.com
local.thewestonmercury.co.uk
local.timesreporter.com
local.todmordennews.co.uk
local.whtimes.co.uk
local.wigantoday.net
local.wisbechstandard.co.uk
mylocal.palmbeachpost.com
northbostondirectory.wickedlocal.com
orillia.simcoe.com
portperry.durhamregion.com
shopping.dallasnews.com
shopping.nj.com

Other certificates including the domain name todmordennews.co.uk

(limited to 100 certificates)
findit.todmordennews.co.uk
da.batleynews.co.uk
cmp.northamptonchron.co.uk
findit.todmordennews.co.uk
landing.todmordennews.co.uk
newsletters.todmordennews.co.uk
da.batleynews.co.uk
blog.todmordennews.co.uk
local.newportnewstimes.com
local.clintonnc.com
local.bridemagazine.co.uk
da.batleynews.co.uk
www.lep.co.uk
local.tabertimes.com

da.batleynews.co.uk
evenfall.memories.com.au
newsletters.todmordennews.co.uk
www.scotsman.com
mirfieldreporter.co.uk
da.batleynews.co.uk
beta.ballymoneytimes.co.uk
findit.todmordennews.co.uk
findit.todmordennews.co.uk
da.batleynews.co.uk
consent.aberdeenshireworld.com
landing.todmordennews.co.uk
da.batleynews.co.uk
findit.todmordennews.co.uk
cmp.northamptonchron.co.uk
www.yorkshireeveningpost.co.uk
blog.todmordennews.co.uk
local.argusobserver.com
landing.todmordennews.co.uk
admin.adforge.com
pulse.scotsman.com
www.scotsman.com
evenfall.memories.com.au
local.todmordennews.co.uk
morleyobserver.co.uk
newsletters.todmordennews.co.uk
findit.todmordennews.co.uk
da.batleynews.co.uk
local.wisbechstandard.co.uk
da.batleynews.co.uk
landing.todmordennews.co.uk
findit.todmordennews.co.uk
morleyobserver.co.uk
da.batleynews.co.uk
local.pratttribune.com
local.sentinelsource.com
www.lep.co.uk
local.devonlife.co.uk
mirfieldreporter.co.uk
consent.aberdeenshireworld.com
evenfall.memories.com.au
blog.todmordennews.co.uk
findit.todmordennews.co.uk
findit.todmordennews.co.uk
findit.todmordennews.co.uk
consent.aberdeenshireworld.com
blog.todmordennews.co.uk
morleyobserver.co.uk
consent.aberdeenshireworld.com
newsletters.todmordennews.co.uk
morleyobserver.co.uk
da.batleynews.co.uk
morleyobserver.co.uk
morleyobserver.co.uk
cmp.northamptonchron.co.uk

Certificate

The complete raw certificate details for local.todmordennews.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NIQFu7SyJVS7PRkOx8I
4a3O/eNnRqOO2IEDhCvI0UkrA1iiW3YU4OUz1FkbIi9PRg7V8ajEIczng7BavplX
j/JydWFxA3ee2oJfjoMLgHT7svQllKCpk9P3C7DSnvyFJ4sL+rfgo9lNVq9HcYnc
BkdDSZv1vwsdikWfzOpfrsOa85L8kEMrTfnJODyhhY5tQdiSYVDcR2bduJwTLT7z
eL58cdpK+AW4MHMG+PuFXTodR3R0qjEpH2swiywDe0uTbGZcs67CeaqYWwvnKOVa
E8E9KG3/uDntOPjyAKYCC8DEMfWSL8trT5a6jgFF9gRv91IZCPSKr46cFd8zDF02
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397743818307785248919257039037205465531309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-14 23:21:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 23:21:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.todmordennews.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29390872604122840228174194436480197676339979127748343467991349473228831817480054562754731159289073609877464456779192022251261367766152124247828396455232310766366665114028310568577901336155531198651366529695927558532034404191926584760476261079812884132025998363826707890291770132531869421038296370355466303831157498283007253040113095059789579471090315100963174240803113664482328594460926150131263540729981214765727838384574809461920105979151124447582198042768143326053454666167632099783205366059498962874429326009265128480293055423906385953090712134766523143855650526853339479263552335208069328988201405287899967862453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2a5b565021a3a4676cc5aae5caa0af23f8c990d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1234 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adsack.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annarborshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brighton.northumberlandnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastyorkbeach.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.abqjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.amarillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.baystatebanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.brookingsregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.buchanobserver.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.canalboat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.colerainetimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cotswoldlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dansvilleonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.essexlifemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.exmouthherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fwbusinessweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gadsdentimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.janesvillemarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.letstalk24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lisburntoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.livingedge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.morleyobserver.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northdevongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.observernewsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.paducahsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.panolawatchman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.petoskeynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.portsmouth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.postindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.record-courier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.redwoodfallsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.stjamesnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thekansan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thewestonmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.timesreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.todmordennews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.whtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wigantoday.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wisbechstandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.palmbeachpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northbostondirectory.wickedlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orillia.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portperry.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.dallasnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.nj.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016bf301c03f0000040300473045022100c2688370ccbbbc342e310292bf645e2ba793d1d09b560bec93e189ef0521108202207d3283f5d0ee2b0a41a1ba9e0e554554da9c3f310073086521b777f516945ff5007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bf301c01a0000040300483046022100a6212b72d8ff3cf6f0fb7e35de2eaa84ce3849dd382e086af12839348fd00f6b022100f71d902525356fd0a1e5a9ac8446f0d14571a6fa5752f6bc326e1f00a6876023
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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