bestacces.marketplace.paris

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:84:1c:d3:cc:9b:f2:c7:10:7a:cc:ed:a6:91:15:ac:d4:c1 was issued on by Let's Encrypt.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bestacces.marketplace.paris

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:84:1c:d3:cc:9b:f2:c7:10:7a:cc:ed:a6:91:15:ac:d4:c1
Serial Number (int): 306292448337330805971197813995882614150337
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:02:83:de:57:ea:ec:6e:5f:78:2e:27:b9:ed:dd:c1:63:a1:b2:72
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bc:c5:4a:c5:6b:2c:7f:3a:a3:53:80:01:f5:9f:ab:f9:ab:00:82:cc
Fingerprint (sha256): b1:83:8c:36:cf:3b:b0:6b:66:01:03:74:a1:92:0e:d1:0e:e3:aa:00:d2:63:04:4c:75:72:9c:62:e8:50:eb:4f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate bestacces.marketplace.paris

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bestacces.marketplace.paris

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

101idees.marketplace.paris
backoffice.cifa-fashion.com
bestacces.marketplace.paris
cdn.cifa-fashion.com
cifa-fashion.com
cn.cifa-fashion.com
cron.cifa-fashion.com
eightparis.marketplace.paris
en.cifa-fashion.com
escandelle.marketplace.paris
forherparis.marketplace.paris
garconne-paris.marketplace.paris
hnathalie.marketplace.paris
intranet.cifa-fashion.com
jaunerouge-paris.com
jubylee.marketplace.paris
kenzarro.marketplace.paris
ledesk.marketplace.paris
marketplace.paris
mg-monogram.marketplace.paris
michaelkors.marketplace.paris
misscop.marketplace.paris
old.cifa-fashion.com
pfs.cifa-fashion.com
pick-up.cifa-fashion.com
pro.ryujee.com
ryujee.marketplace.paris
sandbox.marketplace.paris
styleshoes-paris.com
v2.cifa-fashion.com
www.bestacces.marketplace.paris
www.cifa-fashion.com
www.escandelle.marketplace.paris
www.garconne-paris.marketplace.paris
www.intranet.cifa-fashion.com
www.jubylee.marketplace.paris
www.marketplace.paris
www.michaelkors.marketplace.paris
www.old.cifa-fashion.com
www.pfs.cifa-fashion.com
www.pick-up.cifa-fashion.com
www.sandbox.marketplace.paris

Other certificates including the domain name marketplace.paris

(limited to 100 certificates)
intranet.cifa-fashion.com
www.intranet.cifa-fashion.com
sni56923.cloudflaressl.com
crm.cifa-fashion.com
www.escandelle.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sandbox.marketplace.paris
cdn.marketplace.paris
tw.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
forherparis.com
sni56923.cloudflaressl.com
magazine.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
verzeichnis.parisfashionshops.com
sni56923.cloudflaressl.com
www.pick-up.cifa-fashion.com
sni56923.cloudflaressl.com
download.parisfashionshops.com
old.cifa-fashion.com
sni56923.cloudflaressl.com
forherparis.com
wsn.parisfashionshops.com
cdn.cifa-fashion.com
hnathalie.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
www.old.cifa-fashion.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
www.location.cifa-fashion.com
sni56923.cloudflaressl.com
annuaire.parisfashionshops.com
sandbox.marketplace.paris
marketplace.paris
intranet.cifa-fashion.com
cdn.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
event.cifa-fashion.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
forherparis.marketplace.paris
cn.cifa-fashion.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
ru.parisfashionshops.com
sni56923.cloudflaressl.com
directory.parisfashionshops.com
www.michaelkors.marketplace.paris
bestacces.marketplace.paris
www.intranet.cifa-fashion.com
sni56923.cloudflaressl.com
pick-up.cifa-fashion.com
kr.parisfashionshops.com
cn.cifa-fashion.com
tw.parisfashionshops.com
sms.marketplace.paris
sni56923.cloudflaressl.com
cn.cifa-fashion.com
ledesk.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
directory.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
cdn.marketplace.paris
sni56923.cloudflaressl.com
cdn.marketplace.paris
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
verzeichnis.parisfashionshops.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
sni56923.cloudflaressl.com
marketplace.paris
sni56923.cloudflaressl.com
michaelkors.marketplace.paris
download.parisfashionshops.com

Certificate

The complete raw certificate details for bestacces.marketplace.paris in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306292448337330805971197813995882614150337
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-03 14:03:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-04 14:03:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bestacces.marketplace.paris'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 903454233078682602029398667346013572587777448238588921636060224842238139138599379865428842110120227766635871781118519006887835601790263854135557289161068969536917883902295487680987239321643696005936032622245159980733321982954103475961493458359727475960372256561328933612489780286779529429674542679698838292921759658186329626388493004665222755676462087855519979781375156914100673050517053956592698579464472425202220195549619517097585160458208912131418571344761982983766726979665407399944788060978598355228336611057372028844471156678542037369737166251387382564664691095503485189950433121785068844635419554775062678289593312980697469164671920281507680656898643870153322463424722641753778536798909040603654886449767976789331570993362871618845411870857525632048942293341288056064049043297620725547901724914264440345241862447901107945360528161685638350833252719437730086358787730568962503617805666855230111833139409730438681464469076707056001075017282770921176627287575252032368000254481429670581687533688309374202867975887594555602771280148530538679064907058015559988630687519062661090212886596892304502922731792035115738223137681239831514720854295118403486425010125432269540408238540498546920097049768641609337283613534505887454555794641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c0283de57eaec6e5f782e27b9edddc163a1b272
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '101idees.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestacces.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cron.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eightparis.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escandelle.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forherparis.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garconne-paris.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnathalie.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaunerouge-paris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jubylee.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenzarro.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledesk.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mg-monogram.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelkors.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misscop.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.ryujee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryujee.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'styleshoes-paris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestacces.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escandelle.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garconne-paris.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jubylee.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michaelkors.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandbox.marketplace.paris'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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