staging.k-way.lu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:79:b3:b0:04:8d:e4:73:34:b6:6a:38:a9:30:f4:ac:8b:4f was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=staging.k-way.lu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:b3:b0:04:8d:e4:73:34:b6:6a:38:a9:30:f4:ac:8b:4f
Serial Number (int): 302749869940578407276606923076720241969999
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:34:b2:48:db:4c:6c:76:c5:18:db:56:40:f2:37:62:04:84:3a:3a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 88:25:0f:39:28:63:75:0a:ff:22:6d:23:3d:ad:24:78:cf:17:e7:25
Fingerprint (sha256): 8b:89:42:a5:42:2f:2d:11:d4:65:95:a7:57:a1:95:d9:7b:13:27:7b:d9:b1:3e:a9:ec:24:f2:1b:52:a4:43:39

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate staging.k-way.lu

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging.k-way.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2011.hypemoz.be
2012.hypemoz.be
api.bedream-wavre.be
arborex.hypemoz.be
blubird-skillbench.hypemoz.be
cubanacafe.hypemoz.be
geretti-diamonds.com
geretti.be
geretti.hypemoz.be
geretti.staging.hypemoz.be
horlogerie-bijouterie-demaret.be
hypemoz.be
klaxon.hypemoz.be
lesgrandsvalats.com
lesgrandsvalats.hypemoz.be
pilatestime.be
staging.hypemoz.be
staging.k-way.be
staging.k-way.lu
staging.klaxn.com
staging.pilatestime.be
staging.youbric.be
stopimmo.hypemoz.be
thermiko.hypemoz.be
tv-data.hypemoz.be
velodudimanche.hypemoz.be
vttdudimanche.hypemoz.be
wavre-ephemere.hypemoz.be
www.api.bedream-wavre.be
www.arborex.hypemoz.be
www.cubanacafe.be
www.cubanacafe.hypemoz.be
www.geretti-diamonds.com
www.geretti.be
www.geretti.staging.hypemoz.be
www.horlogerie-bijouterie-demaret.be
www.hypemoz.be
www.klaxon.hypemoz.be
www.lesgrandsvalats.com
www.pilatestime.be
www.staging.k-way.be
www.staging.k-way.lu
www.staging.youbric.be
www.yvans.be
www.yvans.hypemoz.be
www.yvans.staging.hypemoz.be
yvans.be
yvans.hypemoz.be
yvans.staging.hypemoz.be

Other certificates including the domain name k-way.lu

(limited to 100 certificates)
hypemoz.be
hypemoz.be
hypemoz.be
hypemoz.be
hypemoz.be
hypemoz.be
hypemoz.be
hypemoz.be
hypemoz.be
www.staging.k-way.be
hypemoz.be
www.yvans.staging.hypemoz.be
hypemoz.be
hypemoz.be
staging.k-way.lu
hypemoz.be
hypemoz.be
hypemoz.be
hypemoz.be
hypemoz.be
hypemoz.be
hypemoz.be
hypemoz.be
hypemoz.be
hypemoz.be
hypemoz.be
hypemoz.be

Certificate

The complete raw certificate details for staging.k-way.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302749869940578407276606923076720241969999
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-10 04:48:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-08 04:48:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.k-way.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787479424978004924829600026743536432882072128355863521085940379914466136818985943867232935907342408896289175287657994797502506121650984697781035985317806145354331489829721841876053289941382275662765296051612832628196334715611629408400489662988785739681051934259755583533394006023973865542259422683304908098033189569270800209737543871418404707577420025621855510538498818368489426176118490743329048027750469507296624195898862591967866037985825834864917269911772254188264389560168866899912193819689395799730340937088890556909165675364227052852511916070591949115229457195618597430219223252133315411529887064279255344049334948732254852010473906931382536583404618016319447507715855230901643815068621857270398904198811989079904263250098866777657849302105674327662246593872217116329483299447358002690896914639210983875136842991254617243726824234888662397682721117122454208507289913923851294941812142764047917704658273260747028644105947357249831538953824442112557561520566732850658770748835665150071928785029912194006427405729382698141566246287565573451311037037078872070110390861663888038732344399950091577860406508200952356925988840562751216435578002479536134109069648386370913691082830374426876221031413982957630147159063214729705471625739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b134b248db4c6c76c518db5640f2376204843a3a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1087 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2011.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2012.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bedream-wavre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arborex.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blubird-skillbench.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cubanacafe.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geretti-diamonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geretti.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geretti.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geretti.staging.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horlogerie-bijouterie-demaret.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klaxon.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesgrandsvalats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesgrandsvalats.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilatestime.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.k-way.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.k-way.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.klaxn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pilatestime.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.youbric.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopimmo.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermiko.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv-data.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velodudimanche.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vttdudimanche.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavre-ephemere.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.bedream-wavre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arborex.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cubanacafe.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cubanacafe.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geretti-diamonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geretti.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geretti.staging.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horlogerie-bijouterie-demaret.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klaxon.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lesgrandsvalats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pilatestime.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.k-way.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.k-way.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.youbric.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvans.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvans.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvans.staging.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvans.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvans.hypemoz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvans.staging.hypemoz.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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