www.magicreindeerfood.waringstewartassociates.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:51:5a:db:ad:01:66:b9:8b:05:86:49:c2:6c:b5:71:93:83 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.magicreindeerfood.waringstewartassociates.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:51:5a:db:ad:01:66:b9:8b:05:86:49:c2:6c:b5:71:93:83
Serial Number (int): 289020500657477298409259537425863577539459
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 66:c3:c6:5b:91:54:d7:a0:b9:a5:ec:f9:cd:2a:1f:78:8f:58:0c:57
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 55:74:1e:c7:62:0d:ed:2f:bf:88:1c:3f:50:59:e9:7c:0e:82:8c:fd
Fingerprint (sha256): 79:2c:6a:ec:b8:19:52:c9:18:00:6f:28:70:0f:e7:36:59:b6:cf:e0:e7:16:ec:5a:ce:40:29:71:3e:2c:d1:b0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.magicreindeerfood.waringstewartassociates.co.uk

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.magicreindeerfood.waringstewartassociates.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alstonhouse.waringstewartassociates.co.uk
alstonhousehotel.co.uk
averysgardencentre.co.uk
averysgardencentre.waringstewartassociates.co.uk
booking.alstonhousehotel.co.uk
farmersboilercompany.co.uk
farmersboilercompany.waringstewartassociates.co.uk
magicreindeerfood.waringstewartassociates.co.uk
mail.alstonhousehotel.co.uk
mail.averysgardencentre.co.uk
mail.farmersboilercompany.co.uk
mail.northumbriangardener.co.uk
northumbriangardener.co.uk
northumbriangardener.waringstewartassociates.co.uk
www.alstonhouse.waringstewartassociates.co.uk
www.alstonhousehotel.co.uk
www.averysgardencentre.co.uk
www.averysgardencentre.waringstewartassociates.co.uk
www.booking.alstonhousehotel.co.uk
www.farmersboilercompany.co.uk
www.farmersboilercompany.waringstewartassociates.co.uk
www.magicreindeerfood.waringstewartassociates.co.uk
www.northumbriangardener.co.uk
www.northumbriangardener.waringstewartassociates.co.uk

Other certificates including the domain name waringstewartassociates.co.uk

(limited to 100 certificates)
owllanenurseries.co.uk
loyaltymadesimple.co.uk
www.farmersboilercompany.waringstewartassociates.co.uk
www.cramdennursery.co.uk
www.eastfield-gardencentre.co.uk
stats.waringstewartassociates.co.uk
waringstewartassociates.co.uk
loyaltymadesimple.co.uk
*.waringstewartassociates.co.uk
www.gardencentrebloc.waringstewartassociates.co.uk
waringstewartassociates.co.uk
4x4s.waringstewartassociates.co.uk
kershawgardencentre.co.uk
plantoholic.co.uk
stats.waringstewartassociates.co.uk
www.kershaw.waringstewartassociates.co.uk
plantoholic.co.uk
plantoholic.co.uk
plantoholic.co.uk
www.gardencentreblog.com
waringstewartassociates.co.uk
plantoholic.co.uk
waringstewartassociates.co.uk
loyaltymadesimple.co.uk
owllanefireworks.co.uk
plantoholic.co.uk
waringstewartassociates.co.uk
gardencentreblog.co.uk
www.magicreindeerfood.waringstewartassociates.co.uk
alstonhousehotel.co.uk
stats.waringstewartassociates.co.uk
clients.waringstewartassociates.co.uk
loyaltymadesimple.co.uk
alstonhousehotel.co.uk
owllanefireworks.co.uk
waringstewartassociates.co.uk
plantoholic.co.uk
waringstewartassociates.co.uk
loyaltymadesimple.co.uk
plantoholic.co.uk
mail.plantenthusiastblog.co.uk
plantoholic.co.uk
waringstewartassociates.co.uk
waringstewartassociates.co.uk
plantoholic.co.uk
clients.waringstewartassociates.co.uk
plantoholic.co.uk
peasantfood.org.uk
plantoholic.co.uk
stats.waringstewartassociates.co.uk
waringstewartassociates.co.uk
www.eastfield-gardencentre.co.uk
farmersboilercompany.co.uk
www.magicreindeerfood.waringstewartassociates.co.uk
peasantfood.waringstewartassociates.co.uk
alstonhousehotel.co.uk
www.averyplantcentre.co.uk
loyaltymadesimple.co.uk
peasantfood.org.uk
farmersboilercompany.waringstewartassociates.co.uk
alstonhousehotel.co.uk
stats.waringstewartassociates.co.uk
www.plantoholic.waringstewartassociates.co.uk
www.alstonhousehotel.co.uk
stats.waringstewartassociates.co.uk
www.loyaltymadesimple.waringstewartassociates.co.uk
avery.waringstewartassociates.co.uk
www.designworks.waringstewartassociates.co.uk
owllanefireworks.co.uk
www.ljmodernpilates.co.uk
*.waringstewartassociates.co.uk
www.loyaltymadesimple.waringstewartassociates.co.uk
stats.waringstewartassociates.co.uk
www.alstonhouse.waringstewartassociates.co.uk
stats.waringstewartassociates.co.uk
stats.waringstewartassociates.co.uk
stats.waringstewartassociates.co.uk
*.waringstewartassociates.co.uk
plantoholic.co.uk
waringstewartassociates.co.uk
www.email.waringstewartassociates.co.uk
owllanefireworks.co.uk
peasantfood.org.uk
owllanefireworks.co.uk
clients.waringstewartassociates.co.uk
avery.waringstewartassociates.co.uk
owllanenurseries.co.uk
stats.waringstewartassociates.co.uk
loyaltymadesimple.co.uk
owllanefireworks.co.uk
alstonhousehotel.co.uk
www.avery.waringstewartassociates.co.uk
alstonhousehotel.co.uk
loyaltymadesimple.co.uk
owllane.waringstewartassociates.co.uk
clients.waringstewartassociates.co.uk
waringstewartassociates.co.uk
plantoholic.waringstewartassociates.co.uk
www.northumbriangardener.waringstewartassociates.co.uk
stats.waringstewartassociates.co.uk

Certificate

The complete raw certificate details for www.magicreindeerfood.waringstewartassociates.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sS2W1eSTwAnftK8Y5kZ
sFa7O2Vq/tIyZwChadsWXUXZCPVn+xoM7ilI8Ntuiv74M3pvtbe4owt2lBp/2NsL
4efe3Drq21VGw6/FBMCZdBNizEI/hOUkP02SAbTsXPiZb/7GvsiW48HJDY8b52qb
97fKClk5B/TTfGnn5tVHuohQDxXvs8dMuxT4UFvT/Uyy1Q2g9YTikwJ6zTCov4jr
/sOdRzt4UzOSmm98QJ4mjWyRJXelsjMpGioamEZxg8uJim6XPI1D2SZeu+zLhihF
OktIHKTZUme9EX+XjYjprcqguwUgUy+eCGiQF4LwlVPAVlT+EWeY4wv7pAnDRXIj
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289020500657477298409259537425863577539459
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-11 23:36:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-12 23:36:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.magicreindeerfood.waringstewartassociates.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28626859388209640026382179944936705612757153943941945408165208300985633622755018469329514566839862609073983356670734019794059382317986437311521395130113372102990750711012193111429382731312952006360579376879544841451494280878691727966224007878440368265821656729154058555349323148091017909996860382972163190838370170031488342121973542879306759295546955945640799709082877641481675043050279918747329399359163028559180948161575922524445792829466759334300313301759097627580000653781407876967452586476534588929828370493745337261016028494153291508719966628148576639330287050973349177196903655213981553507645002963851949515671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66c3c65b9154d7a0b9a5ecf9cd2a1f788f580c57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (938 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alstonhouse.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alstonhousehotel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'averysgardencentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'averysgardencentre.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.alstonhousehotel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmersboilercompany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmersboilercompany.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicreindeerfood.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.alstonhousehotel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.averysgardencentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.farmersboilercompany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.northumbriangardener.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northumbriangardener.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northumbriangardener.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alstonhouse.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alstonhousehotel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.averysgardencentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.averysgardencentre.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booking.alstonhousehotel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmersboilercompany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmersboilercompany.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicreindeerfood.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northumbriangardener.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northumbriangardener.waringstewartassociates.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003d679ffb0eeb9ac250c5be9fd153cbb25c8d0335673a9259bd33d0057532830991a3a09b635c6274a1bd7291a1321ace23ab5bcf579f85886697dcc71f6982498c079b8eba7901e1a26a0efb540e202a2ff5889fd6d77d7b3824460d3e9d653cbaed813e7a2fbc75bd45bb408c632930079eaf2a226d43223fa1ee9cb4c46ca567333594fc48e5d04a8fb020d75c25974ae339c199745bb222569c4f5c17575723797f5253ee233af751ff751813d587c2fdf6850c417cd79be1ad355e5a82604c22c3502332732954ec9d00f21365c252175facaa29308f03f31baed019b701bac3639dd0323f1132f77ec9123c7c666e19013df3ec4f80761e29ee413c5d0f