desafioconsorcios.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c3:32:7e:b4:5d:9e:bd:8f:63:38:ee:3b:5f:15:c1:11:96 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=desafioconsorcios.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c3:32:7e:b4:5d:9e:bd:8f:63:38:ee:3b:5f:15:c1:11:96
Serial Number (int): 327759038632308237063943808540068305506710
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:15:99:37:27:de:0d:68:d7:6f:10:32:c8:0f:74:87:71:31:e4:2c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 69:2c:5e:f1:d7:a6:83:17:4a:b0:77:7a:08:c6:82:63:36:c4:98:2e
Fingerprint (sha256): 9a:f2:9d:3b:0e:71:03:94:95:0d:87:6c:b5:07:bb:90:1b:50:28:7c:94:1f:fd:98:c0:c9:f0:3e:dd:aa:08:6a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate desafioconsorcios.com.br

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for desafioconsorcios.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.bguerra.com.br
autodiscover.desafioconsorcios.com.br
bguerra.com.br
bguerra.portaldotavinho.com.br
cpanel.bguerra.com.br
cpanel.desafioconsorcios.com.br
desafioconsorcios.com.br
desafioconsorcios.portaldotavinho.com.br
mail.bguerra.com.br
mail.desafioconsorcios.com.br
webdisk.bguerra.com.br
webdisk.desafioconsorcios.com.br
webmail.bguerra.com.br
webmail.desafioconsorcios.com.br
www.bguerra.com.br
www.bguerra.portaldotavinho.com.br
www.desafioconsorcios.com.br
www.desafioconsorcios.portaldotavinho.com.br

Other certificates including the domain name desafioconsorcios.com.br

(limited to 100 certificates)
desafioconsorcios.com.br
agenciafirefly.com.br
desafioconsorcios.com.br
desafioconsorcios.com.br
desafioconsorcios.com.br
desafioconsorcios.com.br
desafioconsorcios.com.br
bguerra.com.br
desafioconsorcios.com.br
desafioconsorcios.com.br

Certificate

The complete raw certificate details for desafioconsorcios.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIIzCCBwugAwIBAgISA8MyfrRdnr2PYzjuO18VwRGWMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MDkwNTQ1MzdaFw0x
ODExMDcwNTQ1MzdaMCMxITAfBgNVBAMTGGRlc2FmaW9jb25zb3JjaW9zLmNvbS5i
cjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJnBzAcp1YUnIXio2fHZ
YxC/GiRgZyFrb/sS9j9yJ6jRCB+3vqmQJkFYqbydERKwEqr05WY6EJio7w9FLUlt
I3kn8gxPpZuNxftVQrdH7JmirOEsHLeJsG+NBAlZsXHdteRstz4bpRzLjJNlIcSq
f8KclmiOW5hGe+u/xNkmF17RNGcumJm++/qiOPWrtxngvFl5AKqWBcX0Zxe6lXp1
dimctTBfRquy44neebXEFQyePV+fv/35wT2kf5qXszQSHHEn+Ik/6rak5J7sVANF
4lgtHrm6n7D0YxiucSdM9B6aqKi5/L7ppz8XA2s8AXxChc/xmfeZ6L2Cm7SPLkik
QVkCAwEAAaOCBSgwggUkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUBhWZNyfeDWjX
bxAyyA90h3Ex5CwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzCCAikGA1UdEQSCAiAwggIcghthdXRvZGlzY292ZXIuYmd1
ZXJyYS5jb20uYnKCJWF1dG9kaXNjb3Zlci5kZXNhZmlvY29uc29yY2lvcy5jb20u
YnKCDmJndWVycmEuY29tLmJygh5iZ3VlcnJhLnBvcnRhbGRvdGF2aW5oby5jb20u
YnKCFWNwYW5lbC5iZ3VlcnJhLmNvbS5icoIfY3BhbmVsLmRlc2FmaW9jb25zb3Jj
aW9zLmNvbS5icoIYZGVzYWZpb2NvbnNvcmNpb3MuY29tLmJygihkZXNhZmlvY29u
c29yY2lvcy5wb3J0YWxkb3RhdmluaG8uY29tLmJyghNtYWlsLmJndWVycmEuY29t
LmJygh1tYWlsLmRlc2FmaW9jb25zb3JjaW9zLmNvbS5icoIWd2ViZGlzay5iZ3Vl
cnJhLmNvbS5icoIgd2ViZGlzay5kZXNhZmlvY29uc29yY2lvcy5jb20uYnKCFndl
Ym1haWwuYmd1ZXJyYS5jb20uYnKCIHdlYm1haWwuZGVzYWZpb2NvbnNvcmNpb3Mu
Y29tLmJyghJ3d3cuYmd1ZXJyYS5jb20uYnKCInd3dy5iZ3VlcnJhLnBvcnRhbGRv
dGF2aW5oby5jb20uYnKCHHd3dy5kZXNhZmlvY29uc29yY2lvcy5jb20uYnKCLHd3
dy5kZXNhZmlvY29uc29yY2lvcy5wb3J0YWxkb3RhdmluaG8uY29tLmJyMIH+BgNV
HSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcC
ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGb
VGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5
aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0
aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcv
cmVwb3NpdG9yeS8wggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBVgdTCFpA2AUrq
C5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWUdbv6RAAAEAwBHMEUCIFkNsg4oVhgk
WH7sUt64R2UL7JlmvVLTaKRvQKaIEbWZAiEA3h1cHov62knpNCLJBnVZw46BOqxf
GNpbW4WPsryM7zgAdgCkUBJpBVoVVF5iEas3vBA/Yq5VdqReSxcURT4bIhBqJQAA
AWUdbv4FAAAEAwBHMEUCIQDaVQ/3RXxBXknnFj+ZzdKrXv6upldKrZenK4NegsnL
yAIgWyUuaG9bEj1+SWc0H8SfVg9bhH3Gmva3k+P9txm8vrwwDQYJKoZIhvcNAQEL
BQADggEBAHJGBuFxX8VTZX1Cg5NTa02rSAV/I1R6o4YIS5QoR52fKCZHL3SuUHkQ
U0VoV7FNi7schAwVugEtqD/EZ6YHPlr53zJrF6rA8EDYQccDL70pWkbFerV2k18G
Xv2scxlUpbAe/i+MTKsQp3VtDLng27EquwsCva8eeRFira6mW1iXaxfAPgdQZk/I
QBOKbTRA4Za8h85ycXUWxirIw2edInXqcAL5nuy6UX6SDgwwEzewktd+/lfjwMz3
SuvpD2ECHaGLlpQdeB2vBVi4iLuR4mA9lBjWzHl+JWG6YZuW9KV8KffUNsRrvt5O
SnurCvnDvw37ujC8VdmMq2HoQjv2lqU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcHMBynVhScheKjZ8dlj
EL8aJGBnIWtv+xL2P3InqNEIH7e+qZAmQVipvJ0RErASqvTlZjoQmKjvD0UtSW0j
eSfyDE+lm43F+1VCt0fsmaKs4Swct4mwb40ECVmxcd215Gy3PhulHMuMk2UhxKp/
wpyWaI5bmEZ767/E2SYXXtE0Zy6Ymb77+qI49au3GeC8WXkAqpYFxfRnF7qVenV2
KZy1MF9Gq7Ljid55tcQVDJ49X5+//fnBPaR/mpezNBIccSf4iT/qtqTknuxUA0Xi
WC0eubqfsPRjGK5xJ0z0HpqoqLn8vumnPxcDazwBfEKFz/GZ95novYKbtI8uSKRB
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327759038632308237063943808540068305506710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-09 05:45:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-07 05:45:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'desafioconsorcios.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19410025514518690256694915711786266912111901978885612123848137551143983672775839050475278718862237534833537621638964039224164604066919941169262437856557093808885412468673649384408928903966403337521454531732925470656929291021782937756767777512119790900608425862219953004402530193440681522250351243798786690536902516055061960669231225476917638210504278176275428276441655084538987174844894641150142983120149170215191489572321615549758618401162830069874601588201640077624467253013351481027102778309712607757290866190330497870998218780687501998151930676288506559555450498691069896795080955361951094337009582984971363303769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0615993727de0d68d76f1032c80f74877131e42c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (544 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bguerra.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.desafioconsorcios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bguerra.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bguerra.portaldotavinho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.bguerra.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.desafioconsorcios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desafioconsorcios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desafioconsorcios.portaldotavinho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bguerra.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.desafioconsorcios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.bguerra.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.desafioconsorcios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bguerra.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.desafioconsorcios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bguerra.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bguerra.portaldotavinho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desafioconsorcios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desafioconsorcios.portaldotavinho.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001651d6efe9100000403004730450220590db20e28561824587eec52deb847650bec9966bd52d368a46f40a68811b599022100de1d5c1e8bfada49e93422c9067559c38e813aac5f18da5b5b858fb2bc8cef38007600a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a25000001651d6efe050000040300473045022100da550ff7457c415e49e7163f99cdd2ab5efeaea6574aad97a72b835e82c9cbc802205b252e686f5b123d7e4967341fc49f560f5b847dc69af6b793e3fdb719bcbebc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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