recoveringminnesotan.com

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 01:ed:11:8e:5f:af:eb:90:19:c6:16:77:28:5e:0e:67:42:9a was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=recoveringminnesotan.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ed:11:8e:5f:af:eb:90:19:c6:16:77:28:5e:0e:67:42:9a
Serial Number (int): 167782543014871661974050523671286906307226
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 13:57:a4:77:7f:ce:6b:b8:fe:5e:cb:c4:33:0d:73:9c:d2:23:23:0a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1f:e4:4b:3d:ee:16:7a:c3:8e:5b:58:ab:0e:04:04:e5:bc:ed:a7:4f
Fingerprint (sha256): 84:42:b0:ca:51:23:d8:cc:a7:8d:b8:77:a2:cf:72:18:24:ed:3d:75:12:1a:88:e3:e3:80:ab:7e:c9:73:e8:4c

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate recoveringminnesotan.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for recoveringminnesotan.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recoveryforall.org
recoverygolf.com
recoveryinbalance.com
recoveryingsanityblog.com
recoveryrevelation.org
recoveryrevolution.me
recoverwithcbt.com
recoverychurchncblog.com
recoverystartsnow.org
recoverymama.com
recoverywellness.org
recoveringwarriors.com
recoveryhomescollaborative.org
recovery-massage.com
recoverybus.com
recoveringparalegal.com
recoveringstagemanager.com
recoveryallthewayaround.org
recoverycoachingidaho.com
recoveryexpo.org
recoveryhealth.me
recoveringsanity.com
recovery4real.com
recoveryallthewayaround.com
recoverydiva.com
recoveryinchristnow.com
recoverymeditation.org
recoverynotrocketscience.com
recoveryrd.com
blog.recovery.gov
recovery77snk.com
recoverylands.com
recoveryofthemind.com
recoveryrevalation.org
recoveryrocky.com
recoveringtechnologist.com
recoverybookpress.com
recoveringtheplot.com
recoverspiritually.com
recoveryispossibleblog.com
recoveringminnesotan.com
recoveringthegifts.com
recoveringworkaholicblog.com
recoveryalongroute66.com
recoverybozeman.com
recoverybuddyco.me
recoverymum.me
recoveryvoice.org
recoveringracistdocumentary.com
recoveringrepublicanwoman.com

Other certificates including the domain name recoveringminnesotan.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
www.recoveringanonymously12.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
recoveringminnesotan.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for recoveringminnesotan.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hAJrqyQjP5KD/d7hN0Z
HvT+ytz1SEab+ZkhEFgHHB+trRL/3dp6YP0efDxeJA9pD3uudXb5O9DjrOkHkjzy
IprCe+uVc29qrR9rUquUZyHxHzvk/5RnSGflWcREeR018AB0a/f5WzBbAQD/2Z8Y
ViQYDvCX1Bnl5BJDLFTltCO/ZODyrEfOV0u/FCSZlhK37/yjnXHigTNf+sDcIeD4
Tv9gMgewLAV8yJvAXdJSFvOIW042Xe9vZ6uBGwplWSL7qmVeMugQgKZA/qsb2yj5
0UdCqQn4MetT3WOxV0wm6le5oau3WqT24S8MpBufVPxCC2CRklqUqTvDYK26rtgy
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167782543014871661974050523671286906307226
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-27 23:20:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-26 23:20:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'recoveringminnesotan.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30557578346355356879481653559877331858304778220704959652958973177608343067505920796847629523654561047320408632664755204178355701263942465221206803469838980550966149121355210840097900802002286854299672134577966137618038826980001741646042267361367780990246914958567034082874455928347110634990223550811083438274987971796970357148416910650100324675300175700414634702978161649368777138388869275112856960456780369134435892228319542163978104307946244591228634703360252203233672539764277533126113852678348291609093416675704129956688021191046549529004997499128257442883833595846098924202507655172778109297803493643018500059701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1357a4777fce6bb8fe5ecbc4330d739cd223230a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryforall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverygolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryinbalance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryingsanityblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryrevelation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryrevolution.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverwithcbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverychurchncblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverystartsnow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverymama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverywellness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringwarriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryhomescollaborative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recovery-massage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverybus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringparalegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringstagemanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryallthewayaround.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverycoachingidaho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryexpo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryhealth.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringsanity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recovery4real.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryallthewayaround.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverydiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryinchristnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverymeditation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverynotrocketscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryrd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.recovery.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recovery77snk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverylands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryofthemind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryrevalation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryrocky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringtechnologist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverybookpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringtheplot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverspiritually.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryispossibleblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringminnesotan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringthegifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringworkaholicblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryalongroute66.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverybozeman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverybuddyco.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverymum.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryvoice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringracistdocumentary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringrepublicanwoman.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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