uk.prostart.slightlydifferent.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3e:c5:5d:d2:ba:5e:95:1d:96:42:cc:e4:3d:2e:d3:cc:fe was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=uk.prostart.slightlydifferent.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3e:c5:5d:d2:ba:5e:95:1d:96:42:cc:e4:3d:2e:d3:cc:fe
Serial Number (int): 282696709617228123695627165420259892251902
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0b:ee:7b:a3:5f:b3:ac:7d:7c:ef:8e:f0:e3:52:b1:bc:ea:8f:4e:6c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 96:86:fa:29:92:64:e1:87:e4:be:2a:29:9e:ae:05:e1:0f:84:81:e9
Fingerprint (sha256): b6:2f:f3:e6:16:f8:10:1e:51:e7:e7:66:d5:9c:51:7f:ae:18:ee:0a:6b:8f:d5:d3:a7:93:78:d9:ae:b2:9e:86

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate uk.prostart.slightlydifferent.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uk.prostart.slightlydifferent.co.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uk.prostart.slightlydifferent.co.nz
www.uk.prostart.slightlydifferent.co.nz

Other certificates including the domain name slightlydifferent.co.nz

(limited to 100 certificates)
uk.prostart.slightlydifferent.co.nz
status.slightlydifferent.co.nz
www.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
*.nz.webeasy.slightlydifferent.co.nz
uniquelynelson.nz
www.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
delaware.slightlydifferent.co.nz
www.slightlydifferent.co.nz
uniquelynelson.nz
uk.easystart.slightlydifferent.co.nz
www.slightlydifferent.co.nz
my.slightlydifferent.co.nz
www.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
o2bhealthy.co.nz
o2bhealthy.co.nz
delaware.slightlydifferent.co.nz
slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
medifoodsdb.slightlydifferent.co.nz
www.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
my.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
www.slightlydifferent.co.nz
techstatus.solano.edu
status.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
delaware.slightlydifferent.co.nz
*.dnsadmin.slightlydifferent.co.nz
www.slightlydifferent.co.nz
www.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
uk.webeasy.slightlydifferent.co.nz
uniquely.dev.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
status.slightlydifferent.co.nz
slightlydifferent.co.nz
uniquelynelson.nz
*.dev.slightlydifferent.co.nz
o2bhealthy.co.nz
status.slightlydifferent.co.nz
monitoring.carletoninc.com
uniquely.dev.slightlydifferent.co.nz
mars.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
www.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
www.slightlydifferent.co.nz
slightlydifferent.co.nz
status.aiacontracts.com
nz.webeasy.slightlydifferent.co.nz
o2bhealthy.co.nz
www.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
www.slightlydifferent.co.nz
dev.slightlydifferent.co.nz
status.reversinglabs.com
uk.easystart.slightlydifferent.co.nz
*.nz.easystart.slightlydifferent.co.nz
slightlydifferent.co.nz
slightlydifferent.co.nz
uniquelynelson.nz
nz.easystart.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
www.slightlydifferent.co.nz
www.slightlydifferent.co.nz
uniquely.dev.slightlydifferent.co.nz
slightlydifferent.co.nz
service-status.jola.co.uk
nz.easystart.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
status.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
status.slightlydifferent.co.nz
www.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
my.slightlydifferent.co.nz
slightlydifferent.co.nz
www.slightlydifferent.co.nz

Certificate

The complete raw certificate details for uk.prostart.slightlydifferent.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHWzCCBkOgAwIBAgISAz7FXdK6XpUdlkLM5D0u08z+MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA0MTkyMjQxNDlaFw0x
ODA3MTgyMjQxNDlaMC4xLDAqBgNVBAMTI3VrLnByb3N0YXJ0LnNsaWdodGx5ZGlm
ZmVyZW50LmNvLm56MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0V1r
PijDL1bA7eLUO5IPJKsspSLmwrGPQ7FCBFi6wWE3fqLpwLfr2ZFWi+S4WDj+Yiex
cG4XiyUSpQ0lOToWwrJgzu9uQ9rGZ5wyGWniTkZa62rXCfCRy6zvMgN4bJJLTM9z
C7zvFvGedjfzpmK5jIpSoFSZS/5pwpziHKCRCetvAh7FOkkZQg9K8tF8IpTsQx2c
4wNuVwkQ30ZSWErQOXMJufmykFj3GIqICPfl6MPv9FKMXS/tGbepkhz69hR+F1Ld
u90eSYYwSfyFn1lWa+5udGJsljfwDmvdFcg7RNJ9UhYFtEti849N6pHushnrOCiU
c02jeU/27bpSAaSFfRIrMl94BkdvB4Lr371lE62NjoMII0ZsrJqcx+h6BJzgD+tr
UCIho5P2wlNcQGWDSJOWxwlMM5KSEURV9xJ4K51TMClP1JX7zl6bayB2XGnqV6Zt
Db3MQ0PHJ8zYY40m2mnj15rs0SkM7vdlUYXa5cMA2nFps4Hd10CYJQoUfxNbE0EC
4cqcxnP6j3I0hdTj9JIMaCEhHshWkcLvTBR6iLvt9RktqgYzLIBxuBVhV/VAZOCx
jQRXxAa7q0JVvWd1XiUgA9oEWwbEVeeXQmkdajYwK5GbCyYGM9i1mhWQNFpVG7m/
79n780N4Utrh7i4aWFFiNx/cj5/ic6W4b+QbftkCAwEAAaOCA1UwggNRMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUC+57o1+zrH18747w41KxvOqPTmwwHwYDVR0jBBgw
FoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUF
BzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUF
BzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzBXBgNVHREE
UDBOgiN1ay5wcm9zdGFydC5zbGlnaHRseWRpZmZlcmVudC5jby5ueoInd3d3LnVr
LnByb3N0YXJ0LnNsaWdodGx5ZGlmZmVyZW50LmNvLm56MIH+BgNVHSAEgfYwgfMw
CAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0
aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRp
ZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQ
b2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9y
eS8wggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDbdK/uyynssf7KPnFtLOW5qrs2
94Rxg8ddnU83th+/ZAAAAWLgSRhQAAAEAwBIMEYCIQCSaNtLHUJS6z3KiVQXnqFK
8AlzRyGDrSQeVI/HwZ0iswIhALv99akV2TAxh/ltMJCtR0n6PzHL50hrNpRn5qFd
86HiAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFi4EkYZwAA
BAMARzBFAiEA6KNAiXFwm147Obt+92JgGEZaNTNhGKlfxC7DOIxNlz8CIG/Mmea7
l0q8x8xIMIoUgGffl6GYG/kpJvXjgFhnMIEXMA0GCSqGSIb3DQEBCwUAA4IBAQBw
LmfyQcZwbGsAYari84Df82U0n8zOxuT9jK0KYKt96PDj2R0gg7gnoXqN/sMssObn
8POmnTDYeUCIuxjYr6v1r9uwTUO7waKkrgY0z+k2ZQpi3yKaMoaz9p/jCY39ERbU
6LxtcvUF++X/QWjgFA0aN02Kll/E6yauzEoz/3Rvn0CbpHJjGIByYhmTZmqLf63y
zmWuOB0da60nBORXoVYTy5h5IBoIncZKAPR53UzY+u0xPGcbp0GMQ8Ll2K3GD3r3
M/j8PJkNwomJSzZlZoqWu+3zFKa6ulIIdXtDgO0oPAG9AjyxZ1ckpakMKV7dE+SS
kRYcpJgo55JfH4jiSmRI
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282696709617228123695627165420259892251902
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-19 22:41:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-18 22:41:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uk.prostart.slightlydifferent.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 854134344323612826442714484509994356032195818094217372486831537364797172515690674733761024234723607463657275639960304003800853080066715070862905503537593634717775150563183696170861451649065155284391205284036943576299565861628864546894864835618837886946232326771809504942526518154818624827892383288099339197383212536526361911384728791967346577716151147080974746497767051577003346468808369870790176738574633695280120584874215065343281778534424008527969464669003926846977359441242767648411144515265129945131281945949817852545643524192944333945473827978575077586529795206191490256222637952009616113965861217927389508717097070652878815198316935859950405661117291987894482477674871447207068703924705523716224023173616338348797166150009894975085751463428993253202764347926813450375484583266973269407433196839406033649965110228663039007043127590356687879303823470956692969071139644252236462201574253919818164791532293578238698939556629622894769932488841920426661552306857337884844253429914502030740109631888132725069933919164971726469250590820601777614864820429396400785730253333449557276039483527050260362830240357720493315859200152487037088305017441607502671645195645231826004704741552101126062342476778653953845733311686893260880949771993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0bee7ba35fb3ac7d7cef8ef0e352b1bcea8f4e6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.prostart.slightlydifferent.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uk.prostart.slightlydifferent.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162e049185000000403004830460221009268db4b1d4252eb3dca8954179ea14af00973472183ad241e548fc7c19d22b3022100bbfdf5a915d9303187f96d3090ad4749fa3f31cbe7486b369467e6a15df3a1e2007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162e04918670000040300473045022100e8a3408971709b5e3b39bb7ef7626018465a35336118a95fc42ec3388c4d973f02206fcc99e6bb974abcc7cc48308a148067df97a1981bf92926f5e3805867308117
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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