pro.geovina.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:db:71:3d:30:be:5e:36:3c:dd:c1:60:80:15:f4:b0:9c:d0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pro.geovina.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:db:71:3d:30:be:5e:36:3c:dd:c1:60:80:15:f4:b0:9c:d0
Serial Number (int): 336009216633236498569814731902467357842640
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:52:79:37:b8:d5:f5:23:11:16:ee:56:ea:ea:ff:59:eb:9d:c7:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:22:6f:a5:ef:c5:eb:7e:c3:b9:8c:d0:a0:dc:19:a0:37:4f:ac:be
Fingerprint (sha256): 9c:bb:77:b9:6f:61:62:37:95:89:d5:ce:74:f0:fd:7a:e4:f0:e2:48:5e:13:08:8b:48:53:3b:2b:66:76:00:de

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pro.geovina.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pro.geovina.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pro.geovina.com

Other certificates including the domain name geovina.com

(limited to 100 certificates)
geovina.com
blog.geovina.com
learning.ovb.at
geovina.com
app.geovina.com
app.geovina.com
geovina.com
pro.geovina.com
pokemonbrowser.com
geovina.com
isehararenkei.info
pro.geovina.com
pro.geovina.com
pro.geovina.com
pro.geovina.com
geovina.com
dariuszczajka.com
connect.geovina.com
pro.geovina.com
geovina.com
geovina.com
blog.geovina.com
connect.geovina.com
geovina.com
pro.geovina.com
geovina.com
backoffice.geovina.com
app.geovina.com
connect.geovina.com
app.geovina.com
geovina.com
geovina.com
pro.geovina.com
backoffice.geovina.com
geovina.com
app.geovina.com
connect.geovina.com
pro.geovina.com
pro.geovina.com
backoffice.geovina.com
geovina.com
geovina.com
pro.geovina.com
connect.geovina.com
idanbirman.dev
pro.geovina.com
pro.geovina.com
geovina.com
pro.geovina.com
backoffice.geovina.com
connect.geovina.com
connect.geovina.com
connect.geovina.com
connect.geovina.com
pro.geovina.com
geovina.com
connect.geovina.com
app.geovina.com
srauto-stagging.poolkargo.com
pro.geovina.com
pro.geovina.com
app.geovina.com
geovina.com
pro.geovina.com
geovina.com
backoffice.geovina.com
geovina.com
backoffice.geovina.com
backoffice.geovina.com
pinhasov.com
geovina.com
geovina.com
backoffice.geovina.com
pro.geovina.com

Certificate

The complete raw certificate details for pro.geovina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgISA9txPTC+XjY83cFggBX0sJzQMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA0MDUwMDA0NTVaFw0x
ODA3MDQwMDA0NTVaMBoxGDAWBgNVBAMTD3Byby5nZW92aW5hLmNvbTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAMcLQ0HCbvBcv+h/rK32WlhRBueYnOib
Cvj9pai0Bg26NM82XtdfpK0sAHmcN1JtNFoGiWYVeeaCDQF4/Q+DqRXrD4ecvh19
XftbEPCwJKW39M0PVJjgkyo9fSBcELRY4OS4rUYNU0QVjW/2pF6kwbIAvAg5GdZZ
pp1lN1QEzMCEsC+5NuuDyI5VdSzaZTxDROe2Z0SkBgYtf99nPETvoF8FW0PK0IHq
TIKH054keALwql+LpSQ2kaY99i5qEMs49Z6RytajvBPSKA2nNBrRDOc/9WdCsKcI
naT6e+fKlIkCqC47k9+h+hkQS8SNRLpTTvJmBn/VGpYMCnRM6y3nOi7NTmMyRysj
x0sfh0B6axkCSLlhoPUwts/mf749rvKxkoXhXi9FiIBJOuQtk+fygRe7nXhlmP23
NgIg6pKeC3nE2lCixH9H2ERBSV9Yqsa25Nl2SdMmN1FcOYqbeiterMtGRrlL+rU4
bVCH0VGpFSDvqp6tebQCeN/QUYaSILtZNQuMnIQ/fyQqaV2d7ezgy11MnA2y1YTk
HGb9GoOps2ojHqo78lHyxewRloo403mO8owp2AjXjLYKcm91SyILCss/Y88bw4ga
Yl+ftjd4M2cUAWEGlKiQDvjTaSSIQkxU3KnpzIClBP4OHORfxOfMf7TRPfitjM91
EOP53YBwuYA3AgMBAAGjggMXMIIDEzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGJS
eTe41fUjERbuVurq/1nrnceuMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPcHJvLmdlb3ZpbmEuY29t
MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggr
BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwIC
MIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBi
eSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRo
ZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlw
dC5vcmcvcmVwb3NpdG9yeS8wggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQDbdK/u
yynssf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWKTVccXAAAEAwBGMEQCICMJ
FV9ghvm43rTZmx6uC+0ASBtJkLJzxFdG3p5zwm/VAiBMlYU2m/WgUwOUUfUE7AoC
+bUixcqE2lfS4UUECWWehgB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVF
R/R4AAABYpNVxx4AAAQDAEgwRgIhAMA1iWxk81FTlZQPyj1hNEOFhpogUsifrHB3
J8bx+Yx2AiEAyoTcCv0rqRXjY+yju8wNKOYXwD/nPt2E8hH+k3oH2iowDQYJKoZI
hvcNAQELBQADggEBAImh/fJwOKWcUsRMrJZkJj5/Op1QKLYwQRrDCJmmRAMb+96U
NWQXBYfXUoeUY7YceiGpgYzoEcluII4hSKgrwGvIz7NRM6+DuM8bS3AuHQXDw6uU
MJ7v2FnGQU4duKEX5LrRlQAhNuAPD6lf2WJcywIEA3dAwnVjnfeo6+jv/926jm1T
Vz6mwT0Pw1QFmoyAjks9aY60cVTYsnVQGDOiySv7o5YfbUhlblj4gvr3HL9cGeKb
oc6oNaQwmT8z5KHKRgl1Zkp0RykfVrFLXx9GXqW5Lf2vwsWnhtdCE20eR9uZQVNy
Jp5RMQ7Szw/lR1a4Bt/E0GbJkEeftN6607WbQ6M=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxwtDQcJu8Fy/6H+srfZa
WFEG55ic6JsK+P2lqLQGDbo0zzZe11+krSwAeZw3Um00WgaJZhV55oINAXj9D4Op
FesPh5y+HX1d+1sQ8LAkpbf0zQ9UmOCTKj19IFwQtFjg5LitRg1TRBWNb/akXqTB
sgC8CDkZ1lmmnWU3VATMwISwL7k264PIjlV1LNplPENE57ZnRKQGBi1/32c8RO+g
XwVbQ8rQgepMgofTniR4AvCqX4ulJDaRpj32LmoQyzj1npHK1qO8E9IoDac0GtEM
5z/1Z0KwpwidpPp758qUiQKoLjuT36H6GRBLxI1EulNO8mYGf9UalgwKdEzrLec6
Ls1OYzJHKyPHSx+HQHprGQJIuWGg9TC2z+Z/vj2u8rGSheFeL0WIgEk65C2T5/KB
F7udeGWY/bc2AiDqkp4LecTaUKLEf0fYREFJX1iqxrbk2XZJ0yY3UVw5ipt6K16s
y0ZGuUv6tThtUIfRUakVIO+qnq15tAJ439BRhpIgu1k1C4ychD9/JCppXZ3t7ODL
XUycDbLVhOQcZv0ag6mzaiMeqjvyUfLF7BGWijjTeY7yjCnYCNeMtgpyb3VLIgsK
yz9jzxvDiBpiX5+2N3gzZxQBYQaUqJAO+NNpJIhCTFTcqenMgKUE/g4c5F/E58x/
tNE9+K2Mz3UQ4/ndgHC5gDcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336009216633236498569814731902467357842640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-05 00:04:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-04 00:04:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pro.geovina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 812028653511206506389417656912633162849792567483702829572022593264011429812694980252695975922546737401802037426438017353557174146828427741199815110165509398078227014150532934601779900165777059899990599962944830728131409025177569898132918658665848536354398118784306608002901296559837218675039309422816166721396538222937953285893068320838212408849474821651034438542202728146464543694426869299872633359955616185954960609143964437095253795661066423487461021396791084584237468106592859306066386826685612670459149210315754669988942807710015741249368808742856307830757961693078883667535248194002637406263053845095138364320178127548674976686282796690010806417129801556586482667356907009766308079651096064923168452783970171637496425903061478273153900438689335265966346840618966649496496488594690754670142623342056597949370317802353600939895235406841854918167734878829573166511853955582842742982327429304611829113145120208425898186193159002431698466218635751162000283862823466866577910243182213054996238611712087044441199759343902460613683026876885495465448743700534908264839896308845086576998565652873273090384142675766527998513412987828882998934361516648196513388572015612221957351222527296465394128531215464644707493448075037059503428829239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62527937b8d5f5231116ee56eaeaff59eb9dc7ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.geovina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001629355c717000004030046304402202309155f6086f9b8deb4d99b1eae0bed00481b4990b273c45746de9e73c26fd502204c9585369bf5a053039451f504ec0a02f9b522c5ca84da57d2e1450409659e86007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001629355c71e0000040300483046022100c035896c64f3515395940fca3d61344385869a2052c89fac707727c6f1f98c76022100ca84dc0afd2ba915e363eca3bbcc0d28e617c03fe73edd84f211fe937a07da2a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0089a1fdf27038a59c52c44cac9664263e7f3a9d5028b630411ac30899a644031bfbde943564170587d752879463b61c7a21a9818ce811c96e208e2148a82bc06bc8cfb35133af83b8cf1b4b702e1d05c3c3ab94309eefd859c6414e1db8a117e4bad195002136e00f0fa95fd9625ccb0204037740c275639df7a8ebe8efffddba8e6d53573ea6c13d0fc354059a8c808e4b3d698eb47154d8b275501833a2c92bfba3961f6d48656e58f882faf71cbf5c19e29ba1cea835a430993f33e4a1ca460975664a7447291f56b14b5f1f465ea5b92dfdafc2c5a786d742136d1e47db99415372269e51310ed2cf0fe54756b806dfc4d066c990479fb4debad3b59b43a3