sitntheatre.com

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 01:b0:68:31:cf:77:87:02:c6:8b:9f:3c:f0:44:1c:33:28:c8 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sitntheatre.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:b0:68:31:cf:77:87:02:c6:8b:9f:3c:f0:44:1c:33:28:c8
Serial Number (int): 147140480851881838800388514427923430844616
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 2e:4a:66:b6:56:c3:bd:da:55:db:eb:e9:87:b3:88:20:9b:53:36:df
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ee:f6:18:38:aa:72:74:a2:c9:ae:78:51:f7:aa:02:b9:e7:95:49:15
Fingerprint (sha256): 96:ed:86:de:2e:da:c1:d7:79:d8:dc:3d:e8:b9:9c:79:ad:cf:d4:d5:94:d7:f7:d9:c0:23:2e:60:33:f2:d4:8b

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate sitntheatre.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sitntheatre.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sittelmozzaz.com
sittinginspiltink.com
sittingcomfortably.org
sittingfrogyoga.com
sittingpigeon.com
situatedaction.com
situationalmidwifery.com
sittersaruba.com
sittingatagreenlight.me
sittingatthefootoftheblues.com
sitskiben.com
sitstaysniffplay.com
sittenontheporch.com
sitterbugs.ch
sittersister.com
siton.is
sitronurogsalvia.com
sitsomnium.com
sittingbull.edu
sittinginthewoods.com
sittingonthebaby.com
sittingprettyinthequeencity.com
sittysitty.com
sitntheatre.com
sitonmecock.com
mediacenter.sittercity.com
situational-lefty.com
situationrichard.com
sittingonanatomicbomb.com
sittingpreppy.com
sittingunderthefamilytree.com
situatededucation.com
situationsigetin.com
sitorimon.com
sitspike.com
sitte.be
sittherelookpretty.com
blog.sittingduckdenver.com
sittingontheswings.com
sittingprettyinseattle.com
sittingwithtommy.com
sitorsitumorang.org
sitstayhometucson.com
sittableside.com
sittingonthehilltop.com
sittsen.com
situationcares.org
sitter2you.com
sittingbytheriverside.com
sittingdownwith.com

Other certificates including the domain name sitntheatre.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
sitntheatre.com
www.sitbackwithme.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
sitntheatre.com
tls.automattic.com

Certificate

The complete raw certificate details for sitntheatre.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxnPaRx8+pH7vJQgiCdl
5edp3ar1Jspp66/AW08shIeLvueUwpkNJNBW+0VfedtjaH2wE1CgNiSeQUeZCx34
ZaKOyaJ68M27HfbFCqDPg/ZxNtLc5jlvcfG9k3XB9uCXbWlclwI3aRy+wFM13nEz
8CrKtB08Ln7JQZIsE0iQFPXLNB2tU7NGQp/M8oM7l1TcbW9mRicq6HWwMGnetTz+
HHMmMAe3WFke7hYL2ijSnCCv56P6omtB5pOUfs6Fkk0FCgJEFBODWlu/4VHIEeQ4
O6u8B2ECb3vH9XY2JLQRavSDD54dUTgs+EUvYg2RIdg7xW6rOIhqQW64uyQrnq06
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 147140480851881838800388514427923430844616
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-27 23:33:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-26 23:33:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sitntheatre.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26144056610780771349848200961222598957081307993209084727691867901495915950792321392459319948312478818796072263365430390983696280059104905365587566442497795604938733108381808946375839162057324800138016310852969240644150677842479070512926675153274731471162334797843967751942776982713010535489968091277124542132526284342738316753136793869039312278103206907611819238380541746226811347241066952294148577111509394800337571981609187888452275882476429311101487528147436489215132996148685683465341405910225636634133498749660783610983547298622207886994145969053665529109994623672595278723852981340049053142354970848919957617379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e4a66b656c3bdda55dbebe987b388209b5336df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1059 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittelmozzaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittinginspiltink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingcomfortably.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingfrogyoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingpigeon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situatedaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situationalmidwifery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittersaruba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingatagreenlight.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingatthefootoftheblues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitskiben.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitstaysniffplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittenontheporch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitterbugs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittersister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siton.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitronurogsalvia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitsomnium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingbull.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittinginthewoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingonthebaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingprettyinthequeencity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittysitty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitntheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitonmecock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediacenter.sittercity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situational-lefty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situationrichard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingonanatomicbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingpreppy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingunderthefamilytree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situatededucation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situationsigetin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitorimon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitspike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitte.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittherelookpretty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.sittingduckdenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingontheswings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingprettyinseattle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingwithtommy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitorsitumorang.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitstayhometucson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittableside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingonthehilltop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situationcares.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitter2you.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingbytheriverside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingdownwith.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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