www.coverand.insure

Issued by R3

About this certificate

This digital certificate with serial number 04:c6:e7:0a:4b:2c:95:d0:f3:27:c8:74:f7:eb:d9:a6:78:d4 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.coverand.insure

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c6:e7:0a:4b:2c:95:d0:f3:27:c8:74:f7:eb:d9:a6:78:d4
Serial Number (int): 416132157492094828562966530724472602130644
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 20:83:e2:91:3e:77:6e:af:d6:fe:bc:2d:20:77:b4:f7:0a:af:73:84
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 65:a8:33:fd:46:63:7a:cd:75:f1:f2:87:a0:5b:13:21:4e:fa:a6:6c
Fingerprint (sha256): 97:e2:66:3a:86:7d:16:8e:cd:96:68:55:45:37:5a:04:23:6f:58:c5:88:8f:b6:e6:88:a7:ca:40:6d:19:82:2b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.coverand.insure

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.coverand.insure

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2s.consulting
485.me
adjudications.ca
aeropostale.org
coverand.insure
embargos.org
equippedchurch.org
gunnerking.band
hunterhouse.org
m2540.world
mccm.life
mineralmecca.world
needfulthings.org
quickcomps.org
rovenskypark.org
www.2s.consulting
www.485.me
www.adjudications.ca
www.aeropostale.org
www.coverand.insure
www.embargos.org
www.equippedchurch.org
www.gunnerking.band
www.hunterhouse.org
www.m2540.world
www.mccm.life
www.mineralmecca.world
www.needfulthings.org
www.quickcomps.org
www.rovenskypark.org

Other certificates including the domain name coverand.insure

(limited to 100 certificates)
islam-shop.com
sportsmedicinedoctors.org
micdropgenius.com
eak.life
springtideri.org
www.xn--gnl-sna5a.com
www.printacity.org
incoin.exchange
surfandwind.com
lemon.land
organicsoyformula.com
equilifenutrition.uk
incognitoitconsulting.com
infected.org
www.dontcryformeargentina.com
www.throwemail.com
www.coverand.insure
www.seattlestemcell.org
jointpainbaltimore.com
www.measurements.org
seattleresumeservice.com
www.40oldchurchstreet.co.uk
www.biogrow.org
worldwidewebi.com
herbninjas.com
www.bday.click
syfy.store
qldstrippers.com

Certificate

The complete raw certificate details for www.coverand.insure in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgISBMbnCkssldDzJ8h09+vZpnjUMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAyMjIxNDMwNTFaFw0yMzA1MjMxNDMwNTBaMB4xHDAaBgNVBAMT
E3d3dy5jb3ZlcmFuZC5pbnN1cmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDW1gDgckzZmDqMF2Iop5qznbz+Lo5rhohEvoFWtV5cJHwCD19bDadbxKmX
jag8fp82jE6V/v4Cwbqyi5I2y6hTpm6LSaOoHp/GGmmFyGzsWGku0YhkYwapGrtz
cN7xjZujrl1ucsrmRbRWxWgeEMqFRbtFLR6O4q4nIBV2UEJ5Citmt1xaH6kGPJLt
nt41KZDQ5GRiFE2Jh3fyLzAlkyOhssjk91m0kC1woMVxRAM8bANKNb+ROa60Ybuw
/RtmmezMAOH8J5fg/6ws05KOo3+rR7nZ2xxUL7JB1umiFxxDFcnHWkWFwz7N06ed
fj7vF9AqLjv+2SaCmjQu2yI12hs3AgMBAAGjggRcMIIEWDAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFCCD4pE+d26v1v68LSB3tPcKr3OEMB8GA1UdIwQYMBaAFBQusxe3
WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0
cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j
ci5vcmcvMIICKQYDVR0RBIICIDCCAhyCDTJzLmNvbnN1bHRpbmeCBjQ4NS5tZYIQ
YWRqdWRpY2F0aW9ucy5jYYIPYWVyb3Bvc3RhbGUub3Jngg9jb3ZlcmFuZC5pbnN1
cmWCDGVtYmFyZ29zLm9yZ4ISZXF1aXBwZWRjaHVyY2gub3Jngg9ndW5uZXJraW5n
LmJhbmSCD2h1bnRlcmhvdXNlLm9yZ4ILbTI1NDAud29ybGSCCW1jY20ubGlmZYIS
bWluZXJhbG1lY2NhLndvcmxkghFuZWVkZnVsdGhpbmdzLm9yZ4IOcXVpY2tjb21w
cy5vcmeCEHJvdmVuc2t5cGFyay5vcmeCEXd3dy4ycy5jb25zdWx0aW5nggp3d3cu
NDg1Lm1lghR3d3cuYWRqdWRpY2F0aW9ucy5jYYITd3d3LmFlcm9wb3N0YWxlLm9y
Z4ITd3d3LmNvdmVyYW5kLmluc3VyZYIQd3d3LmVtYmFyZ29zLm9yZ4IWd3d3LmVx
dWlwcGVkY2h1cmNoLm9yZ4ITd3d3Lmd1bm5lcmtpbmcuYmFuZIITd3d3Lmh1bnRl
cmhvdXNlLm9yZ4IPd3d3Lm0yNTQwLndvcmxkgg13d3cubWNjbS5saWZlghZ3d3cu
bWluZXJhbG1lY2NhLndvcmxkghV3d3cubmVlZGZ1bHRoaW5ncy5vcmeCEnd3dy5x
dWlja2NvbXBzLm9yZ4IUd3d3LnJvdmVuc2t5cGFyay5vcmcwTAYDVR0gBEUwQzAI
BgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nw
cy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgB6MoxU
2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYZ5v7JoAAAEAwBHMEUCID1s
BkPYSUrPqrRa0WUnGamqDlc9EgIodSUfzeAJL73aAiEAt63xIiC+k9Lu8ccSzkAY
KfD9bzkZvnMUvrOCJ1OGYIkAdwCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY0
69yCigAAAYZ5v7KHAAAEAwBIMEYCIQC0c3PGNguLU8TObUUcMBqHwGWTUNiWFlVs
2WgYTV9pXgIhAPW8BDjWYl9vq2aactULJ0Sm98EbWYYHQ6K9TPQNH6CvMA0GCSqG
SIb3DQEBCwUAA4IBAQAqPHQQlLdS8/CcsLj6lmARhxplNkAbjWAqHtwonWaBMVyC
xFFUaBjRM1I3Uy5KgcWWfPo/bFuO9sUNkD9I7jT26ka3m6Or7ms3bGV+FSOmhwjn
pUYi0Aud0EOQbyjDn0Y5kVSTPkhjgw1AIty4x6KfFTD8R+2U95JcAWJA2YvlBrkv
FNNzjkWcbgOKUtTk71qlszB7TSwbk6upa2KNy4RXQTC/NTuYDC77ZSOYRuMEgmyl
rC/B59KpgyaTnKEoQ6wYQnX78ZOgegx/HS4YtNGeVCf2Cr2AvoUhvE6ROUjT8KoH
EHwCRjSHCoFGEGbNi/yaQRYsZaA5UXYbYOV8l044
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tYA4HJM2Zg6jBdiKKea
s528/i6Oa4aIRL6BVrVeXCR8Ag9fWw2nW8Spl42oPH6fNoxOlf7+AsG6souSNsuo
U6Zui0mjqB6fxhpphchs7FhpLtGIZGMGqRq7c3De8Y2bo65dbnLK5kW0VsVoHhDK
hUW7RS0ejuKuJyAVdlBCeQorZrdcWh+pBjyS7Z7eNSmQ0ORkYhRNiYd38i8wJZMj
obLI5PdZtJAtcKDFcUQDPGwDSjW/kTmutGG7sP0bZpnszADh/CeX4P+sLNOSjqN/
q0e52dscVC+yQdbpohccQxXJx1pFhcM+zdOnnX4+7xfQKi47/tkmgpo0LtsiNdob
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416132157492094828562966530724472602130644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 14:30:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 14:30:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.coverand.insure'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27120526284616846497128419542963833330637256961071028601135342198378579748087391188171547349966264637117376581343275239968976247995777576922121479346493433229036268879484061721530108853545206345895009336454098728475014137391466956451962124995886236255632482933925364170082609156318303170290172133596746653713609203206399244482571764176217459663062225343207067969371971650036110913190383501747048215808932752914295799319452899237778840120989473984211001980942414426335491352089205851406939941204581278909587883064636289803793675147578477612599413861045473580365518068643576143242677887042224009514749732327719568022327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2083e2913e776eafd6febc2d2077b4f70aaf7384
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (544 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2s.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '485.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adjudications.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeropostale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coverand.insure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embargos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equippedchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunnerking.band'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hunterhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm2540.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccm.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineralmecca.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'needfulthings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickcomps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rovenskypark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2s.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.485.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adjudications.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aeropostale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coverand.insure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.embargos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equippedchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gunnerking.band'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hunterhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m2540.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mccm.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mineralmecca.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.needfulthings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quickcomps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rovenskypark.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018679bfb268000004030047304502203d6c0643d8494acfaab45ad1652719a9aa0e573d12022875251fcde0092fbdda022100b7adf12220be93d2eef1c712ce401829f0fd6f3919be7314beb3822753866089007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018679bfb2870000040300483046022100b47373c6360b8b53c4ce6d451c301a87c0659350d89616556cd968184d5f695e022100f5bc0438d6625f6fab669a72d50b2744a6f7c11b59860743a2bd4cf40d1fa0af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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