gewis.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:db:84:83:d2:de:2a:19:9c:f4:ef:b7:2c:2e:e6:67:10:60 was issued on by Let's Encrypt.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gewis.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:db:84:83:d2:de:2a:19:9c:f4:ef:b7:2c:2e:e6:67:10:60
Serial Number (int): 336034838714206038575776286600562225909856
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:f0:5d:1a:3a:3d:17:cd:49:b7:c9:46:49:3d:26:c7:49:9d:4a:f0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 53:97:5a:92:a2:90:af:b1:5d:57:df:8a:93:e2:3d:e4:62:0f:dc:1f
Fingerprint (sha256): 88:88:09:3d:0f:2d:64:25:10:70:08:69:76:f2:55:5c:64:fa:29:7f:bc:e2:89:ff:d0:71:51:74:74:95:8e:e6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gewis.nl

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gewis.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ameezing.gewis.nl
barcommissie.nl
bestwiki.gewis.nl
ceb.gewis.nl
database.gewis.nl
dispuutathena.nl
eapc.gewis.nl
fotowb.gewis.nl
gehack.gewis.nl
gehack.nl
gelimbo.nl
gepwnage.nl
gew.is
gewis.nl
imap.gewis.nl
inf.gewis.nl
info.gewis.nl
infoscherm.gewis.nl
inschrijven.gewis.nl
intro.gewis.nl
introwiki.gewis.nl
kanboard.gewis.nl
llama.gewis.nl
mail.gewis.nl
odc.gewis.nl
opendagws.gewis.nl
orconference.com
pm.gewis.nl
rex.gewis.nl
saffa.nl
secure.gewis.nl
smtp.gewis.nl
test.gewis.nl
webcommissie.nl
webmail.gewis.nl
wiki.gehack.gewis.nl
www.gewis.nl

Other certificates including the domain name gewis.nl

(limited to 100 certificates)
judge.gewis.nl
webhost.gewis.nl
sni46910.cloudflaressl.com
gewis.nl
sni46910.cloudflaressl.com
*.gew.is
sni46910.cloudflaressl.com
*.gewis.nl
secure.gewis.nl
gewis.nl
sni46910.cloudflaressl.com
gewis.nl
sni46910.cloudflaressl.com
webhost.gewis.nl
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
gewis.nl
gewis.nl
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
*.gewis.nl
gewis.nl
*.gewis.nl
gewis.nl
sni46910.cloudflaressl.com
gewis.nl
gewis.nl
gehack.nl
gewis.nl
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
*.gewis.nl
gewis.nl
gewis.nl
gewis.nl
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
judge.gewis.nl
gewis.nl
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
gehack.nl
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
gehack.nl
sni.cloudflaressl.com
gelimbo.gewis.nl
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
*.gewis.nl
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
gewis.nl
gewis.nl
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
gewis.nl
sni46910.cloudflaressl.com
status.gewis.nl
sni46910.cloudflaressl.com
gewis.nl
gewis.nl
sni46910.cloudflaressl.com
gewis.nl
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
www.gewis.nl
sni46910.cloudflaressl.com
gewis.nl
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
*.gewis.nl
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
sni46910.cloudflaressl.com
gewis.nl
athena.gewis.nl
sni46910.cloudflaressl.com

Certificate

The complete raw certificate details for gewis.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA+KpMvi+pwM6l3WZNw7
n9+7fq+/yJ29018mjdU5JfoEiPx2oZxc/XEd63duvqct3hcRjcMjKVaEgylLWKzc
9RFiWYzq8a5vfgJTStLE9NWW7arzRsQeTJZWEM72d/CzbP+PgyoKLBaDrcQy9cQu
K9EiX2EQ8J0Heuv3ReMagbb8VWmiC6KdKunYYxS63Q37Q1ImcGBvQijysF2BTLrp
zR9ujGVCBiKYZpMK6rCMZDaq7Q6XQ1bGX2cdg0fNFNfkOCo+SHmWnphz89/wUyJB
fqSZbh0/7E8Awi+09KJcC6bP9k1WvdVG7b/RgYXF/XaB7YN3TYhzpqo5gQYmJ4Bg
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336034838714206038575776286600562225909856
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-25 18:54:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-23 18:54:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gewis.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25760278050376136592282599406394219256896776318281353326273810493876569897403082937962102983045997762595319261706760499983670869458323284959527729206552387008902735143671132734053498467458752272963847985638878356645502577724568164871080984956489803456534070785676431285824601230686164908456466826748246909358228885833817001835286077339805348322897058571763109688436846522729158360748983148904522385536871810274841258245345518395291857068325167959167306830417561716518460052122350159055094632894965007886390521668838875172164304640250723414679844166011170769097559384941485532040120387418262296708300599268129026105531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9f05d1a3a3d17cd49b7c946493d26c7499d4af0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (593 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameezing.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barcommissie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestwiki.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceb.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'database.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dispuutathena.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eapc.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotowb.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gehack.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gehack.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gelimbo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gepwnage.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gew.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infoscherm.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inschrijven.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intro.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'introwiki.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanboard.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llama.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odc.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendagws.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pm.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rex.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saffa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcommissie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.gehack.gewis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gewis.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006c1cc0463d0c49d0d233bde2310e9fa123d21ba642030cf6e122d180566e5fc7d6ea0c94b5ba2e1314556652e351a5c1660fbac2eb8d8c8ac2131448b81fbd51d859350bc06d5d25aa5431d0728f7b6c28d17bddb70654bb318385fa3e549930f89ba54aa010a1ff45af45e1260a8cc3fe3babc0e89328a70a8947a5c5b661d4246f2f4f337b03e2d63016e06a8804421e371adb7251cfdea2e373fddd806f08d03d5e760be9eecc47f411a52343a4eeeeb07cd1f1c10580fcb378d458d9ac1cb5addc239e2ad8abd2e898ecc677d0fc5a93a3eddcbdf5b015d53eb02e7aaedf5bad5f36e57e2da34f16cd0336de7ac01199b1ffdbe504062bed8083c78642a0