2u.comovee.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7a:0c:2b:d6:70:2b:e5:91:17:cc:9d:74:ee:88:02:23:4d was issued on by Let's Encrypt.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=2u.comovee.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:0c:2b:d6:70:2b:e5:91:17:cc:9d:74:ee:88:02:23:4d
Serial Number (int): 302867484913672363238138518432680889164621
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:00:99:cd:3b:8d:e8:2c:21:99:ed:94:54:45:64:a8:e8:50:c1:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 41:de:e6:b6:de:50:41:81:d8:b5:c4:d5:f9:84:88:29:48:1c:7a:05
Fingerprint (sha256): ac:c1:8d:54:1e:9d:c8:45:63:8f:ea:b5:c0:7c:c5:a5:5d:8c:4e:5f:ef:52:e2:23:73:e5:35:1e:87:56:05:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate 2u.comovee.net

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 2u.comovee.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2u.comovee.net
adialon.comovee.net
alpina.comovee.net
amadeus.comovee.net
amgen.comovee.net
bae.comovee.net
baldor.comovee.net
bonafarm-zrt.comovee.net
centro-studi-erickson.comovee.net
comcast-corp.comovee.net
country-music-hall-of-fame-and-museum.comovee.net
cyracom1.comovee.net
daltex.comovee.net
edelweiss-energy-holding.comovee.it
eurotunnel1.comovee.net
exterionmedia.comovee.net
eybelgium.comovee.net
ferrero.comovee.net
flex.comovee.net
gogreen-france.comovee.net
keysight.comovee.net
kiwibank.comovee.net
lerum.comovee.net
lgt.comovee.net
libbey.comovee.mx
liechtensteinische.comovee.net
llv.comovee.net
man.comovee.de
martin-brower.comovee.fr
mckinsey.comovee.net
nuevo-pudahuel.comovee.net
ob---trkm.comovee.de
oerlikon.comovee.net
orpic.comovee.net
ospelt.comovee.net
pantaleon.comovee.net
pantaleon1.comovee.net
philips.comovee.nl
postobon.comovee.net
putignano.comovee.net
royalcaninrca.comovee.net
samusocial.comovee.fr
spgg.comovee.mx
swarovski.comovee.net
volkswagen.comovee.es
wupperinst.comovee.de

Other certificates including the domain name comovee.net

(limited to 100 certificates)
ace.dev.comovee.it
ab-impianti-srl.comovee.it
comovee.com
airliquide.comovee.nl
ab-impianti-srl.comovee.it
airliquide.comovee.nl
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
2u.comovee.net
8ktd.comovee.nl
airliquide.comovee.nl
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
altenbeken.comovee.de
altenbeken.comovee.de
altenbeken.comovee.de
ab-impianti-srl.comovee.it
comovee.com
comovee.com
8ktd.comovee.nl
ab-impianti-srl.comovee.it
airliquide.comovee.nl
airliquide.comovee.nl
altenbeken.comovee.de
ab-impianti-srl.comovee.it
comovee.com
adialon.comovee.net
airliquide.comovee.nl
8ktd.comovee.nl
altenbeken.comovee.de
comovee.com
airliquide.comovee.nl
adialon.comovee.net
8ktd.comovee.nl
altenbeken.comovee.de
ab-impianti-srl.comovee.it
altenbeken.comovee.de
8ktd.comovee.nl
ab-impianti-srl.comovee.it
airliquide.comovee.nl
8ktd.comovee.nl
comovee.com
comovee.com
airliquide.comovee.nl
airliquide.comovee.nl
altenbeken.comovee.de
altenbeken.comovee.de
*.comovee.net
airliquide.comovee.nl
airliquide.comovee.nl
ab-impianti-srl.dev.comovee.it
adialon.comovee.net
comovee.com
altenbeken.comovee.de
airliquide.comovee.nl
comovee.com
airliquide.comovee.nl
2u.comovee.net
altenbeken.comovee.de
ab-impianti-srl.comovee.it
adialon.comovee.net
ab-impianti-srl.comovee.it
adialon.comovee.net
comovee.com
ab-impianti-srl.comovee.it
airliquide.comovee.nl
adialon.comovee.net
ab-impianti-srl.comovee.it
ab-impianti-srl.dev.comovee.it
altenbeken.comovee.de
2u.comovee.net
airliquide.comovee.nl
ab-impianti-srl.comovee.it
altenbeken.comovee.de
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
2u.comovee.net
acme.dev.comovee.net
altenbeken.comovee.de
8ktd.comovee.nl
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
adialon.comovee.net
ab-impianti-srl.comovee.it

Certificate

The complete raw certificate details for 2u.comovee.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302867484913672363238138518432680889164621
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-16 11:01:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-14 11:01:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2u.comovee.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734213631728072311386117540713380143490059696286305183087252096007432743889083400306705427955813836461178041583666204001021856415710153001327162784952232408567167558363985180157355388315330033692994139330626322900506079406581366969627196252196842937219376650912506692455385244174408508608653884428336747835502700418939062173925642593404251105836485428160032399284379417128452965111512933921503657780983392520838346810075226723665715913165111854604189663742255122903931383186941864323691662246200493895617644374905348354362087164465503274615540137875661895664354204632119184424604470182659811145011606961081663313663173094128545509562389075742549601256150133080333506671045936355528234561889723515912367265280324585986766769377958245391449687847696667750957592323698538014065957792418319999871306404155774132489505915578500198762833736530793340452845050346487241969867791598673517806962975201683999674124001485792344152886990919106534350859999714575498186122054000191050101546597267944360827253558822300277868192041139146073534354640534978365698501749577725443258172525651487776664960700447285980674953191876734246748796364476921219200503397799435622889907323549963727829351401766259131020871728893039763787748077777674366813743173751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							150099cd3b8de82c2199ed94544564a8e850c130
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1068 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2u.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adialon.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpina.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amadeus.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amgen.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bae.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldor.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonafarm-zrt.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centro-studi-erickson.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comcast-corp.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'country-music-hall-of-fame-and-museum.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyracom1.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daltex.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edelweiss-energy-holding.comovee.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurotunnel1.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exterionmedia.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eybelgium.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferrero.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flex.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogreen-france.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysight.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwibank.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lerum.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgt.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libbey.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liechtensteinische.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llv.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'man.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martin-brower.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckinsey.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuevo-pudahuel.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ob---trkm.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oerlikon.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orpic.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ospelt.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantaleon.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantaleon1.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philips.comovee.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postobon.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'putignano.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcaninrca.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samusocial.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spgg.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swarovski.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volkswagen.comovee.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wupperinst.comovee.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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