crm.lepidus.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:96:18:ab:c8:cd:99:26:a3:9d:3e:c8:52:04:c1:f3:c0:c1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=crm.lepidus.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:96:18:ab:c8:cd:99:26:a3:9d:3e:c8:52:04:c1:f3:c0:c1
Serial Number (int): 312412006260854248859940544337563190804673
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:5e:1e:9b:57:d3:c7:4d:b4:77:e7:0b:fa:ec:9f:a4:b6:2d:07:04
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 21:87:eb:bf:cb:3e:52:a0:03:3b:04:95:e4:f9:37:41:15:13:34:31
Fingerprint (sha256): 94:05:94:98:bd:12:03:b5:74:b8:fd:a8:e5:ad:87:91:70:d1:61:f3:9c:ee:3d:c9:13:cf:6c:7c:07:f1:ec:0d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate crm.lepidus.com.br

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crm.lepidus.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crm.lepidus.com.br

Other certificates including the domain name lepidus.com.br

(limited to 100 certificates)
maven.lepidus.com.br
domus.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
piwik.lepidus.com.br
maven.lepidus.com.br
wiki.lepidus.com.br
domus.lepidus.com.br
domus.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
redmine.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
maven.lepidus.com.br
jenkins.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
wiki.lepidus.com.br
oc.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
git.lepidus.com.br
lepidus.com.br
domus.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
wiki.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
domus.lepidus.com.br
crm.lepidus.com.br
nc.lepidus.com.br
redmine.lepidus.com.br
jenkins.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
www.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
domus.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
git.lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
wiki.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
jenkins.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
git.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
maven.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
lepidus.com.br

Certificate

The complete raw certificate details for crm.lepidus.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHDzCCBfegAwIBAgISA5YYq8jNmSajnT7IUgTB88DBMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MjQwMzAwMTFaFw0x
ODExMjIwMzAwMTFaMB0xGzAZBgNVBAMTEmNybS5sZXBpZHVzLmNvbS5icjCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMOIv2sEuy4qIN7+sfiQsbf41FvT
E+bua3kHf7hnUG7ppIpnC0a6xevXGMHBWWtTDtIm26FzjB5lufi2L3HFUkfXpjVC
oYjPTCjM0eDbfsdXT0PpFYFmsZnvQm54WtRRj55XP0gCgYag3xUN2fp9BEXRCZP4
aj5zHvpISP1+2xITn3SScmalA8VdoOGK1xEG1Do3pzQ4AQRNlpGNFDHTWI6teLd8
xDbgbUcKvykZEw6OH84w97YR5dASLw24guJjQ04+PTMUdm6Zae5fLa1ZcIgrtfpE
yazjCh4MFq4BnOLfFpwD/Lk0C/dYPBcCoY9RCEWJ6lQOY312dVxS+SBAlP8uxKIF
pD26bMQI+Cvxz3htNcV8C/5WciZJCvMcUdbEMnjQ176CXzmylVB2pYv9HA+nzutO
oHG8KO1zpeaWiQsZIhTdAtG6QWqqZhBCZVUQweX3/RXKE61ipcEjT0c/DmwrFr/o
0YUpxbbX8IFRZ1ksFEMwTquCDgu6j3HvsReRdP4QZF89cMub2qZQvBB10WzSQ7qq
5lka0RX+H+kSzm+d6tsmGyiwFkCSk786Q9thh/I5hsUrAQYS6sCfXOB2SZzyfxX6
lbmG3K9YfbseSpYUcLn791VoMpud7z1WJJTW1CDhvsXl1cTc9kDebM4upO03bE+c
sAeXkZGzTmHmNJNXAgMBAAGjggMaMIIDFjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FHteHptX08dNtHfnC/rsn6S2LQcEMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISY3JtLmxlcGlkdXMu
Y29tLmJyMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB
1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsG
AQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQg
dXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3
aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRz
ZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA
dgDBFkrgp3LS1DktyArBB3DU8MSb3pkaSEDB+gdRZPYzYAAAAWVqFuyjAAAEAwBH
MEUCIQDYdkex/4KRXke/DRCKNRXCbEc9oVdpn5trxZD9Y2aTcwIgcQm5yXYF2gjY
VVragbRCZKsHfM7ZsyD2h3udXExrJO8AdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily
3KTDDPTlRUf0eAAAAWVqFuy8AAAEAwBHMEUCIQDCpCg3wTN2e6NUIRWBBUr8FT7f
OdoLAjdrVa5u1p8c0gIgH6v3Nqd0jd2rdlpiUyH8FZVsXPqXm2wK+uoZPq16RrQw
DQYJKoZIhvcNAQELBQADggEBAG1/Q2UtvncEAiQ23FGasQs0BDav7FnVj57kusUy
wqQ5Rpf7gkWUL1/KuSRpRvIbr1hFBDGI4+MutHZPykScvlUpLhg3vnsuRGgQPTea
VOzp9a84N1Kt3eWNMeQDrdBHnI7g+r3+SsToJb8i3jF/qif+jqk0bVMbXVcGjQEW
bbvEsRlpM1FB8OrwAx4oDnvgvWOmGCrB5aevgpbAQCD/efpaBnTYufrxxkxm0Huo
BFU6f0/TJwje/QfXghX5U6UUNMY3VhCruR3+byJxhh4xmFt9qB19d9C6UcZNFgHd
oW+W1M+4G0r5qV1scycv8IxFGhHwMFBfM9SjdWne1sTe1XA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312412006260854248859940544337563190804673
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-24 03:00:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-22 03:00:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crm.lepidus.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 797709820030090375218679359594091464667553360048811790542509811395441343065449114979820714393954001540845895695349566781033137224495508282745919797330653313667236376380783656818678836941117964049319596202869801023353514743093450887275331068204146947378151571043544539490730038766060366256911007093372823122824355070262682862920027156764191301002644286810020890617809062507554912789749080027078494643185854084097179665265380319394441162964238947701160962692005925684181356853099281028865976871685432714773405561288518808674624793237389802676778787658972264112912860752537805552714763733846677718657334386882360002373401695680458585848370229013427375298369549147317356965317530591905227255916475076903765216607350717968651900508517924057853522575255680534609857088846721194259705511994364198914014838486894741183034814722014468114657842045262463191818447689039654162707302498953514165639317350411698191637497607282498607849637430451779464904856530210802262384010628129249537167854283563533427399729205039572637710880396550895866054933822610914912277682872746387610793386173197634311508626474080896129880242676204628868999446614339776572807548951788782402005845527558335088411830178537400095565974288920530202528162511751943341819073367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b5e1e9b57d3c74db477e70bfaec9fa4b62d0704
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.lepidus.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f63360000001656a16eca30000040300473045022100d87647b1ff82915e47bf0d108a3515c26c473da157699f9b6bc590fd6366937302207109b9c97605da08d8555ada81b44264ab077cced9b320f6877b9d5c4c6b24ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001656a16ecbc0000040300473045022100c2a42837c133767ba354211581054afc153edf39da0b02376b55ae6ed69f1cd202201fabf736a7748dddab765a625321fc15956c5cfa979b6c0afaea193ead7a46b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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