conexshack.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dc:c0:3a:02:38:57:cb:58:5c:9f:4e:c3:12:9e:19:b0:7b was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=conexshack.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:c0:3a:02:38:57:cb:58:5c:9f:4e:c3:12:9e:19:b0:7b
Serial Number (int): 336454491491324468102588910685077399777403
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 48:bb:78:29:de:a4:c3:89:d1:db:87:96:a6:53:24:2f:c9:f2:08:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ab:94:df:9e:58:c7:42:fa:aa:9d:d4:dd:8c:de:88:ab:c0:a7:7a:19
Fingerprint (sha256): 7f:78:1b:9a:05:30:1d:30:7e:ca:c6:3c:2e:1c:38:a0:f9:57:a3:12:8a:1d:34:de:27:65:c6:4b:fd:c3:ee:23

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate conexshack.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for conexshack.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

conexshack.apexgreenenergy.com
conexshack.com
happisteven.apexgreenenergy.com
happisteven.com
mail.conexshack.com
mail.happisteven.com
mail.saddlerealty.com
mail.tuscanyoftexas.com
mail.woodduckcellars.com
saddlerealty.apexgreenenergy.com
tuscanyoftexas.apexgreenenergy.com
tuscanyoftexas.com
woodduckcellars.apexgreenenergy.com
woodduckcellars.com
www.conexshack.apexgreenenergy.com
www.conexshack.com
www.happisteven.apexgreenenergy.com
www.happisteven.com
www.saddlerealty.apexgreenenergy.com
www.tuscanyoftexas.apexgreenenergy.com
www.tuscanyoftexas.com
www.woodduckcellars.apexgreenenergy.com
www.woodduckcellars.com

Other certificates including the domain name conexshack.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for conexshack.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIgjCCB2qgAwIBAgISA9zAOgI4V8tYXJ9OwxKeGbB7MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MTAyMDQzMzFaFw0x
ODEwMDgyMDQzMzFaMBkxFzAVBgNVBAMTDmNvbmV4c2hhY2suY29tMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tt1D7f4KCOdzvzDIPJhFb8OxmDc3RKR
TmXV24COHlLUcLEFolR8j5Ybp5j4HL/TMJ7dKH55W4JYN3l8NrvEyO3YeeErglH7
sN2yOmx9PIPPLZDVbFi674Hv5mfOzRkdNm55CXCJzgWVkpbnZ9p13avzV8jShli2
ECWcvmixfRmAurA9pKxvVFT0issfOEhV+KHVfG0Hrx2Apx5c3XDjde5sVwvagBFR
8m9Pj6Hv3xdwaglwdn1IpwPqnS+yIPk9BnAx1f7ix5t/WfHPOHSyGPquzs/I5TOI
/QZp97VL6SE15ErFQAxBvZDECJxiVwURogV7SFZ4pvwOVTgyg3FrEwIDAQABo4IF
kTCCBY0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRIu3gp3qTDidHbh5amUyQvyfII
GzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj
MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v
cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v
cmcvMIICkgYDVR0RBIICiTCCAoWCHmNvbmV4c2hhY2suYXBleGdyZWVuZW5lcmd5
LmNvbYIOY29uZXhzaGFjay5jb22CH2hhcHBpc3RldmVuLmFwZXhncmVlbmVuZXJn
eS5jb22CD2hhcHBpc3RldmVuLmNvbYITbWFpbC5jb25leHNoYWNrLmNvbYIUbWFp
bC5oYXBwaXN0ZXZlbi5jb22CFW1haWwuc2FkZGxlcmVhbHR5LmNvbYIXbWFpbC50
dXNjYW55b2Z0ZXhhcy5jb22CGG1haWwud29vZGR1Y2tjZWxsYXJzLmNvbYIgc2Fk
ZGxlcmVhbHR5LmFwZXhncmVlbmVuZXJneS5jb22CInR1c2NhbnlvZnRleGFzLmFw
ZXhncmVlbmVuZXJneS5jb22CEnR1c2NhbnlvZnRleGFzLmNvbYIjd29vZGR1Y2tj
ZWxsYXJzLmFwZXhncmVlbmVuZXJneS5jb22CE3dvb2RkdWNrY2VsbGFycy5jb22C
Ind3dy5jb25leHNoYWNrLmFwZXhncmVlbmVuZXJneS5jb22CEnd3dy5jb25leHNo
YWNrLmNvbYIjd3d3LmhhcHBpc3RldmVuLmFwZXhncmVlbmVuZXJneS5jb22CE3d3
dy5oYXBwaXN0ZXZlbi5jb22CJHd3dy5zYWRkbGVyZWFsdHkuYXBleGdyZWVuZW5l
cmd5LmNvbYImd3d3LnR1c2NhbnlvZnRleGFzLmFwZXhncmVlbmVuZXJneS5jb22C
Fnd3dy50dXNjYW55b2Z0ZXhhcy5jb22CJ3d3dy53b29kZHVja2NlbGxhcnMuYXBl
eGdyZWVuZW5lcmd5LmNvbYIXd3d3Lndvb2RkdWNrY2VsbGFycy5jb20wgf4GA1Ud
IASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtU
aGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlp
bmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRp
ZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9y
ZXBvc2l0b3J5LzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3ACk8UZZUyDlluqpQ
/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZIYmQXEAAAQDAEgwRgIhAKvxXXQuW9l4
lgGM1hcADxbtQOTpq/16FSMahSp3zm/yAiEA9fan5jdhusXuIMB0ktRTAmi2Or3e
M3gOz9+0zHDEyKQAdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAA
AWSGJkQDAAAEAwBGMEQCIDA58F+cRL98LJqi7vs50mOhfPjHdsljpNHiL9AmMaEH
AiAx53IbrrC/h9Z148PMfFEe3+LjoZ/hmvjERmvr17tABzANBgkqhkiG9w0BAQsF
AAOCAQEAc2r7lSExEvUak8xu5s0xLXwZiPA418vDTesv+HD4DeA2eQY6UxKvoAoU
FIlQmfTODnBUXOFajD6ZCWHZRRhXIVGfMnZhbl214jERiZqjb4BLrSox4kEAlSBs
9LsXvjsCE7u5NmEFsmv5NCTSqvipDpd0bTfxvTEg0T1VrpxvRz96YQPAQBs8af/p
U3wvXUNXVYM3IL+o/9ovMa996e7Ursn0tlbNP2q0h61PEIQtZyZlCepwbejw/X6G
Gb+y/jG7sKZmAQLyy5EbcRkOTcWw12o9GG/prnWfMqQ2sP802cnErP5rzlt/ss7R
QFvZ/NKw0VsXOVESJc8k6tniE7aehA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tt1D7f4KCOdzvzDIPJh
Fb8OxmDc3RKRTmXV24COHlLUcLEFolR8j5Ybp5j4HL/TMJ7dKH55W4JYN3l8NrvE
yO3YeeErglH7sN2yOmx9PIPPLZDVbFi674Hv5mfOzRkdNm55CXCJzgWVkpbnZ9p1
3avzV8jShli2ECWcvmixfRmAurA9pKxvVFT0issfOEhV+KHVfG0Hrx2Apx5c3XDj
de5sVwvagBFR8m9Pj6Hv3xdwaglwdn1IpwPqnS+yIPk9BnAx1f7ix5t/WfHPOHSy
GPquzs/I5TOI/QZp97VL6SE15ErFQAxBvZDECJxiVwURogV7SFZ4pvwOVTgyg3Fr
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336454491491324468102588910685077399777403
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-10 20:43:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-08 20:43:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'conexshack.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29647981775791293667735663630566134862825012330719091934216494693577300554472364602117912053404632075569519479823738084873802611065008524458080138383947569750482522428940474645947682714939323690158197046116818904047909085947180518375500341348974627311335875449351982067140667253858788924127618207532577036786100249999582640200727736017123974251105272776165060977182883874773698040059154188098846328517497277932447175573410079582418004664687908801908672072902371596934941675931962369149003142337945570079722802559247098892437434686032559161199460535800053708222683393430395146846310394774200396427195765951839851342611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48bb7829dea4c389d1db8796a653242fc9f2081b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (649 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conexshack.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conexshack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happisteven.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happisteven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.conexshack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.happisteven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.saddlerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tuscanyoftexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.woodduckcellars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saddlerealty.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuscanyoftexas.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuscanyoftexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodduckcellars.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodduckcellars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conexshack.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conexshack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happisteven.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happisteven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saddlerealty.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuscanyoftexas.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuscanyoftexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodduckcellars.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodduckcellars.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164862641710000040300483046022100abf15d742e5bd97896018cd617000f16ed40e4e9abfd7a15231a852a77ce6ff2022100f5f6a7e63761bac5ee20c07492d4530268b63abdde33780ecfdfb4cc70c4c8a40075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016486264403000004030046304402203039f05f9c44bf7c2c9aa2eefb39d263a17cf8c776c963a4d1e22fd02631a107022031e7721baeb0bf87d675e3c3cc7c511edfe2e3a19fe19af8c4466bebd7bb4007
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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