dev103.mci.smith-and-williams.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e1:64:d8:33:c3:07:8a:f1:22:98:d1:54:b6:59:05:71:72 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev103.mci.smith-and-williams.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e1:64:d8:33:c3:07:8a:f1:22:98:d1:54:b6:59:05:71:72
Serial Number (int): 338034435738046545171266245505135721935218
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: be:d9:95:f5:44:79:41:e8:c5:55:07:5b:7a:a7:6d:3b:01:9c:d3:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 56:df:2f:f8:6d:33:a6:26:9d:ce:39:38:e3:f7:e1:8f:bf:26:a6:2b
Fingerprint (sha256): 7f:74:bc:26:20:cb:19:6a:dd:bd:7a:c2:90:77:ce:15:d9:dd:6d:c9:bc:c8:f0:6a:07:a0:d3:94:76:7b:3e:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dev103.mci.smith-and-williams.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev103.mci.smith-and-williams.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev103.mci.smith-and-williams.com
sandiego2019.smartcitiesweek.com

Other certificates including the domain name smith-and-williams.com

(limited to 100 certificates)
cs.mci-brussels.com
dev135.mci.smith-and-williams.com
dev104.mci.smith-and-williams.com
dev114.mci.smith-and-williams.com
dev135.mci.smith-and-williams.com
dev116.mci.smith-and-williams.com
dev116.mci.smith-and-williams.com
arvr18.org
washington2019.smartcitiesweek.com
dev135.mci.smith-and-williams.com
dev114.mci.smith-and-williams.com
dev116.mci.smith-and-williams.com
smartcitiesweek.com
dev142.mci.smith-and-williams.com
dev112.mci.smith-and-williams.com
dev124.mci.smith-and-williams.com
dev125.mci.smith-and-williams.com
ilca2018.org
dev125.mci.smith-and-williams.com
dev156.mci.smith-and-williams.com
dev104.mci.smith-and-williams.com
dev104.mci.smith-and-williams.com
haveagoodride.atvea.org
dev116.mci.smith-and-williams.com
belgian-dermatology-days.be
australia2019.smartcitiesweek.com
dev153.mci.smith-and-williams.com
dev131.mci.smith-and-williams.com
dev116.mci.smith-and-williams.com
dev101.mci.smith-and-williams.com
atvea.org
www.scdm2018.org
dev103.mci.smith-and-williams.com
dev156.mci.smith-and-williams.com
ilca2018.org
slaseurope2018.org
4dhybrid.eu
dev103.mci.smith-and-williams.com
dev123.mci.smith-and-williams.com
dev123.mci.smith-and-williams.com
www.scdm2018.org
australia2019.smartcitiesweek.com
dev114.mci.smith-and-williams.com
dev103.mci.smith-and-williams.com
dev112.mci.smith-and-williams.com
smartcitiesweek.com
smartcitiesweek.com
logos-pa.com
dev114.mci.smith-and-williams.com
dev135.mci.smith-and-williams.com
dev134.mci.smith-and-williams.com
www.slaseurope2020.org
arvr18.org
smartcitiesweek.com
dev121.mci.smith-and-williams.com
washington2019.smartcitiesweek.com
www.scdm2018.org
dev153.mci.smith-and-williams.com
ilca2018.org
dev156.mci.smith-and-williams.com
dev123.mci.smith-and-williams.com
dev125.mci.smith-and-williams.com
dev123.mci.smith-and-williams.com
haveagoodride.atvea.org
ilca2018.org
belgian-dermatology-days.be
haveagoodride.atvea.org
dev131.mci.smith-and-williams.com
dev144.mci.smith-and-williams.com
dev104.mci.smith-and-williams.com
dev114.mci.smith-and-williams.com
haveagoodride.atvea.org
arvr18.org
dev112.mci.smith-and-williams.com
australia2019.smartcitiesweek.com
ilca2019.org
cs.mci-brussels.com
dev103.mci.smith-and-williams.com
dev124.mci.smith-and-williams.com
dev154.mci.smith-and-williams.com
cs.mci-brussels.com
logos-eu.com
dev153.mci.smith-and-williams.com
dev156.mci.smith-and-williams.com
dev156.mci.smith-and-williams.com
atvea.org
smartcitiesweek.com
cs.mci-brussels.com
smartcitiesweek.com
dev156.mci.smith-and-williams.com
dev123.mci.smith-and-williams.com
dev125.mci.smith-and-williams.com
dev131.mci.smith-and-williams.com
dev156.mci.smith-and-williams.com
smith-and-williams.com
dev103.mci.smith-and-williams.com
www.scdm2018.org
cs.mci-brussels.com
dev153.mci.smith-and-williams.com
www.scdm2018.org

Certificate

The complete raw certificate details for dev103.mci.smith-and-williams.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgISA+Fk2DPDB4rxIpjRVLZZBXFyMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMDYxMTQzMDJaFw0x
OTAxMDQxMTQzMDJaMCwxKjAoBgNVBAMTIWRldjEwMy5tY2kuc21pdGgtYW5kLXdp
bGxpYW1zLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALD0154M
loY08WkJAw8kTglFDnKPJIpiDnZA0X7sTgquh5RLpHbVFfi7wBmK1/0Xk3FGV20g
lLE3MF5riXozc5d2ZQWuSkf2Igk+1uw+tOrM0PWIcGOdiDZCwU+znht4RauOcAfY
mLTvggVNnEhm1Jj57/RWGSfrcaWqb18o4TAkEWnEsfHk3iasA3Be2gnQVvTEyNmn
qfcjIt9S4T1aLx4NV7O52zwPmW8pTr9n5MxKdSMBpIJef5j6ZQiB4O0GVGaaFZRL
CxtRKkaV37t/IQ4ME0SStclRfSvuZinUBb2mDmwW9JLxsN10jAqWFuaVg+xx47Ro
eGnqJxXAVb64LoUCAwEAAaOCA0owggNGMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
vtmV9UR5QejFVQdbeqdtOwGc03QwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzBOBgNVHREERzBFgiFkZXYxMDMubWNpLnNt
aXRoLWFuZC13aWxsaWFtcy5jb22CIHNhbmRpZWdvMjAxOS5zbWFydGNpdGllc3dl
ZWsuY29tMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB
1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsG
AQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQg
dXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3
aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRz
ZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8A
dQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWZJZw2dAAAEAwBG
MEQCIEo3fl377irlEaCpxSG/GsL61R0J05qUP1xZi3SrdzD1AiBMWRGlwI+tKRYm
RmzEp4VKrOOKKDV/iYC3SqOIWOGQBAB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLc
pMMM9OVFR/R4AAABZklnD1oAAAQDAEcwRQIgKGREWM5MiUpmPEWM8xJoBpO1WsI5
K4HXVWRhEKuBZucCIQCxYkTZ2CxtI94JZPPRGOAk3nKapgBtEdOZnBdNTbcwzDAN
BgkqhkiG9w0BAQsFAAOCAQEAcnpy7cOrOMYOdUnhVL1jsyvluw85xHnia8UGr/bE
jBchSwvRNysMnkR50xgx9rMwPOVgAKE3lIKLsE+uqL4F39wNscI9+fjKzj8hzXK4
GlyWVggtR2eTS2VowO+VXtsOyIm+Ggzyjyo9tPF/xZAExyu6agyF4oykI7WAjAU/
Q9RfvtCeqmZQTZGIHXz5qXmWcrfb9grCQKCAPj5Inixe8Z4c6u8qkykb+hKaNDmo
KuLh+r1lVaE4BlMQ82XeqTAvpX/93BdtpL9Q108tV4dIqeFFPw4Qm1tNE+SHm1cz
S9ek2ekkwACmHoe2IFM+WZRHA9PMNP79wWazxPq3WnHWxg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPTXngyWhjTxaQkDDyRO
CUUOco8kimIOdkDRfuxOCq6HlEukdtUV+LvAGYrX/ReTcUZXbSCUsTcwXmuJejNz
l3ZlBa5KR/YiCT7W7D606szQ9YhwY52INkLBT7OeG3hFq45wB9iYtO+CBU2cSGbU
mPnv9FYZJ+txpapvXyjhMCQRacSx8eTeJqwDcF7aCdBW9MTI2aep9yMi31LhPVov
Hg1Xs7nbPA+ZbylOv2fkzEp1IwGkgl5/mPplCIHg7QZUZpoVlEsLG1EqRpXfu38h
DgwTRJK1yVF9K+5mKdQFvaYObBb0kvGw3XSMCpYW5pWD7HHjtGh4aeonFcBVvrgu
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338034435738046545171266245505135721935218
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-06 11:43:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-04 11:43:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev103.mci.smith-and-williams.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22338677890059016519092743112217409077822237799780915601766726064606724030007030565971641971777809184060781890236830784652686498449012613522103642060583520613406373567478269772975328765712529547161814610156867484708569706284062162957561616108035721588621448331130393064857462206464832060898714164847065388151415183190767183422505246201795599809100623702382538509303011647074457142550794721645292279917842339840127889697556189967775376007382451637297692662273742099288283346151641791545631843816434017215790095012714763797001376568392934247492413454755189968099453459609090941948090879041193011467890752897397263183493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bed995f5447941e8c555075b7aa76d3b019cd374
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev103.mci.smith-and-williams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiego2019.smartcitiesweek.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016649670d9d000004030046304402204a377e5dfbee2ae511a0a9c521bf1ac2fad51d09d39a943f5c598b74ab7730f502204c5911a5c08fad291626466cc4a7854aace38a28357f8980b74aa38858e19004007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016649670f5a0000040300473045022028644458ce4c894a663c458cf312680693b55ac2392b81d755646110ab8166e7022100b16244d9d82c6d23de0964f3d118e024de729aa6006d11d3999c174d4db730cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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