www.michaelkors.marketplace.paris

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:91:c3:64:f5:20:95:07:66:a7:c6:9f:7d:b9:87:aa:e6:e0 was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.michaelkors.marketplace.paris

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:91:c3:64:f5:20:95:07:66:a7:c6:9f:7d:b9:87:aa:e6:e0
Serial Number (int): 310937524659452505528876242208696065255136
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0f:eb:5d:de:f9:55:6f:90:74:28:63:54:2f:8f:e2:3a:55:1c:00:65
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:a8:68:26:5f:38:18:21:8d:6e:ec:84:d6:85:47:9c:a5:63:2f:b0
Fingerprint (sha256): b0:76:59:27:1d:08:74:21:f3:e8:d7:68:69:5a:b4:f0:7b:6e:56:8e:d1:a5:bf:3f:92:eb:01:60:51:7c:f3:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.michaelkors.marketplace.paris

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.michaelkors.marketplace.paris

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

backoffice.cifa-fashion.com
bestacces.marketplace.paris
cdn.cifa-fashion.com
cifa-fashion.com
cn.cifa-fashion.com
cron.cifa-fashion.com
eightparis.marketplace.paris
en.cifa-fashion.com
escandelle.marketplace.paris
forherparis.marketplace.paris
garconne-paris.marketplace.paris
hnathalie.marketplace.paris
intranet.cifa-fashion.com
jubylee.marketplace.paris
kenzarro.marketplace.paris
ledesk.marketplace.paris
marketplace.paris
mg-monogram.marketplace.paris
michaelkors.marketplace.paris
misscop.marketplace.paris
old.cifa-fashion.com
pfs.cifa-fashion.com
pick-up.cifa-fashion.com
pro.ryujee.com
ryujee.marketplace.paris
sandbox.marketplace.paris
v2.cifa-fashion.com
www.bestacces.marketplace.paris
www.cifa-fashion.com
www.escandelle.marketplace.paris
www.garconne-paris.marketplace.paris
www.intranet.cifa-fashion.com
www.jubylee.marketplace.paris
www.marketplace.paris
www.michaelkors.marketplace.paris
www.old.cifa-fashion.com
www.pfs.cifa-fashion.com
www.pick-up.cifa-fashion.com
www.sandbox.marketplace.paris

Other certificates including the domain name marketplace.paris

(limited to 100 certificates)
intranet.cifa-fashion.com
www.intranet.cifa-fashion.com
sni56923.cloudflaressl.com
crm.cifa-fashion.com
www.escandelle.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sandbox.marketplace.paris
cdn.marketplace.paris
tw.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
forherparis.com
sni56923.cloudflaressl.com
magazine.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
verzeichnis.parisfashionshops.com
sni56923.cloudflaressl.com
www.pick-up.cifa-fashion.com
sni56923.cloudflaressl.com
download.parisfashionshops.com
old.cifa-fashion.com
sni56923.cloudflaressl.com
forherparis.com
wsn.parisfashionshops.com
cdn.cifa-fashion.com
hnathalie.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
www.old.cifa-fashion.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
www.location.cifa-fashion.com
sni56923.cloudflaressl.com
annuaire.parisfashionshops.com
sandbox.marketplace.paris
marketplace.paris
intranet.cifa-fashion.com
cdn.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
event.cifa-fashion.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
forherparis.marketplace.paris
cn.cifa-fashion.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
ru.parisfashionshops.com
sni56923.cloudflaressl.com
directory.parisfashionshops.com
www.michaelkors.marketplace.paris
bestacces.marketplace.paris
www.intranet.cifa-fashion.com
sni56923.cloudflaressl.com
pick-up.cifa-fashion.com
kr.parisfashionshops.com
cn.cifa-fashion.com
tw.parisfashionshops.com
sms.marketplace.paris
sni56923.cloudflaressl.com
cn.cifa-fashion.com
ledesk.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
directory.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
cdn.marketplace.paris
sni56923.cloudflaressl.com
cdn.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
verzeichnis.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
marketplace.paris
sni56923.cloudflaressl.com
michaelkors.marketplace.paris
download.parisfashionshops.com

Certificate

The complete raw certificate details for www.michaelkors.marketplace.paris in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310937524659452505528876242208696065255136
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-29 17:40:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-29 17:40:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.michaelkors.marketplace.paris'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 669667867883141835698762295647716581314352619123713873523589524321230862313386543342455317957414964659462527967167651279851376991899524282192576448415503578084444764121105686765758616006777941640805142641265560760319764144512084651108794581991957579910350522008546356965892606723012455579646438314485547058333308018790316697693994295652768168946308700105678879214947030352773521126407329862727241466970540098738770975226043636925512142531613503940812972527563725888601089050523086544062724843707214980195965590636403351903636185681582498797695582449680563290858439718818360458036002275912426813845523863368781724980108569177051148961652198253853129900205217054916435268024570275296454030396302432726536791759909607008582731461696498479696732595255802766414806117063335278369852455102199740372039576721140523569463114223184804413770144447302008266146901313785060673568363541051212702480220810956960114281878590939472085628973159373758051872813500984972617501518549991310058050440757771764632497688961439202068279326572836973354928132070080498692156273975449807446874328105462994879100777312014380719339069498107971092901458928321765602959128440928406821252102502471604440295176510795873374939930990440052431643914736390572048593678933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0feb5ddef9556f90742863542f8fe23a551c0065
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1057 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestacces.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cron.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eightparis.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escandelle.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forherparis.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garconne-paris.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnathalie.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jubylee.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenzarro.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledesk.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mg-monogram.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelkors.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misscop.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.ryujee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryujee.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestacces.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escandelle.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garconne-paris.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jubylee.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michaelkors.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandbox.marketplace.paris'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000472b8e87bceb752b4fe73de81142afea5c6b08ef2c336222fd2893e99df65c7b89c814dcf4045f539d5ec0509c8e4aa2b85bd54e75560714c20f2fcfa723b74bca6236daaf68afe0f17efe37fbf0d6a287eda2a2ed89f54593ff914f41965d60fbc24b57a3da891b8067a07e4c07f44f90dff1ea68af5ceffb8654a4afea66b1bf806f3e8f49b6c2f40a81f1eb6c9dc31e5624449fa2ea55b0584117ebdb118c454487fa3c9e640ea57a6eda32d58a0d5f786059a10431f38e483e995bcd9feab2d218cfe976163661c02da01705d6b0d4620d6b6ad224cf86a7cb8e782105eb68b8b03e7dc9d10e8919f067b377019376d7a7154c37919fce546f2e14fcb09