www.jubylee.marketplace.paris

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6b:9d:ff:03:d3:80:17:66:7f:68:9c:92:92:15:1c:cb:7e was issued on by Let's Encrypt.

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.jubylee.marketplace.paris

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6b:9d:ff:03:d3:80:17:66:7f:68:9c:92:92:15:1c:cb:7e
Serial Number (int): 297957083964462327175591380108269821152126
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 96:57:e8:c7:08:85:09:46:18:51:9e:15:09:67:8d:d9:70:fd:9f:68
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:f6:68:ab:43:48:a2:0c:1c:a6:6f:d6:aa:f3:de:e8:5a:ef:dc:11
Fingerprint (sha256): 8e:b5:4f:6d:d2:ba:41:c9:8e:91:8c:dc:0d:26:65:1b:24:29:2a:e0:13:fd:f7:da:6f:51:47:0e:ab:31:da:79

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.jubylee.marketplace.paris

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jubylee.marketplace.paris

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

101idees.marketplace.paris
backoffice.cifa-fashion.com
bestacces.marketplace.paris
cdn.cifa-fashion.com
cifa-fashion.com
cn.cifa-fashion.com
cron.cifa-fashion.com
eightparis.marketplace.paris
en.cifa-fashion.com
escandelle.marketplace.paris
forherparis.marketplace.paris
garconne-paris.marketplace.paris
hnathalie.marketplace.paris
intranet.cifa-fashion.com
invogue-paris.com
jaunerouge-paris.com
jubylee.marketplace.paris
kenzarro.marketplace.paris
ledesk.marketplace.paris
marketplace.paris
mg-monogram.marketplace.paris
michaelkors.marketplace.paris
misscop.marketplace.paris
old.cifa-fashion.com
pfs.cifa-fashion.com
pick-up.cifa-fashion.com
pro.ryujee.com
ryujee.marketplace.paris
sandbox.marketplace.paris
styleshoes-paris.com
v2.cifa-fashion.com
www.bestacces.marketplace.paris
www.cifa-fashion.com
www.escandelle.marketplace.paris
www.garconne-paris.marketplace.paris
www.intranet.cifa-fashion.com
www.jubylee.marketplace.paris
www.marketplace.paris
www.michaelkors.marketplace.paris
www.old.cifa-fashion.com
www.pfs.cifa-fashion.com
www.pick-up.cifa-fashion.com
www.sandbox.marketplace.paris

Other certificates including the domain name marketplace.paris

(limited to 100 certificates)
intranet.cifa-fashion.com
www.intranet.cifa-fashion.com
sni56923.cloudflaressl.com
crm.cifa-fashion.com
www.escandelle.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sandbox.marketplace.paris
cdn.marketplace.paris
tw.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
forherparis.com
sni56923.cloudflaressl.com
magazine.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
verzeichnis.parisfashionshops.com
sni56923.cloudflaressl.com
www.pick-up.cifa-fashion.com
sni56923.cloudflaressl.com
download.parisfashionshops.com
old.cifa-fashion.com
sni56923.cloudflaressl.com
forherparis.com
wsn.parisfashionshops.com
cdn.cifa-fashion.com
hnathalie.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
www.old.cifa-fashion.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
www.location.cifa-fashion.com
sni56923.cloudflaressl.com
annuaire.parisfashionshops.com
sandbox.marketplace.paris
marketplace.paris
intranet.cifa-fashion.com
cdn.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
event.cifa-fashion.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
forherparis.marketplace.paris
cn.cifa-fashion.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
ru.parisfashionshops.com
sni56923.cloudflaressl.com
directory.parisfashionshops.com
www.michaelkors.marketplace.paris
bestacces.marketplace.paris
www.intranet.cifa-fashion.com
sni56923.cloudflaressl.com
pick-up.cifa-fashion.com
kr.parisfashionshops.com
cn.cifa-fashion.com
tw.parisfashionshops.com
sms.marketplace.paris
sni56923.cloudflaressl.com
cn.cifa-fashion.com
ledesk.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
directory.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
cdn.marketplace.paris
sni56923.cloudflaressl.com
cdn.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
verzeichnis.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
marketplace.paris
sni56923.cloudflaressl.com
michaelkors.marketplace.paris
download.parisfashionshops.com

Certificate

The complete raw certificate details for www.jubylee.marketplace.paris in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297957083964462327175591380108269821152126
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-07 10:55:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-08 10:55:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jubylee.marketplace.paris'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 598617490216913352769135866175479361985995930651206995590075290011258263207647673727448977836939718887502882254255847884872467749304719484890052707394806692769438834197752728736499095573836217973070546239840070086851637287328898556238871461449887694477770828398870923576283797743794074737254196664699499235424330586969971742124193836045505254100206566722407343570825606426753493597659392839217163996429131526618073556075264414830007850054987102181996677803492083816455397423127536584544914449585182472801229650674154327451541127187893185934346460441772080365244884148355728603120405748795277412141347285016605690778512127778159862490924836484854176625572721267583338653145576174842799018826045753912257375838638499333677151721530224898963834799546334318537710893009938742969204609009915808973951861534485286104080530449000009403892621686119953593730043306038040979014947901630249871758840030114711287684143070899138854349639928166326873633893699627967320519354633094069818118268718217711972465878837714815209248788249042528864707873042658603116824882702228061362984658801515406898489489596472847515123971668639375737754832587274704233745309937435276636312496181688492762238895975618799327182914076178517312826828328806170360524183517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9657e8c70885094618519e1509678dd970fd9f68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1148 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '101idees.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestacces.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cron.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eightparis.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escandelle.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forherparis.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garconne-paris.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnathalie.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invogue-paris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaunerouge-paris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jubylee.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenzarro.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledesk.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mg-monogram.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelkors.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misscop.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.ryujee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryujee.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'styleshoes-paris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestacces.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escandelle.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garconne-paris.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jubylee.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michaelkors.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandbox.marketplace.paris'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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