www.michiganannuityalert.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b7:5b:5c:86:1c:ea:f9:fb:ff:fa:9f:fc:ca:d9:06:39:ea was issued on by Let's Encrypt.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.michiganannuityalert.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:5b:5c:86:1c:ea:f9:fb:ff:fa:9f:fc:ca:d9:06:39:ea
Serial Number (int): 323729971100873888446831806336112190175722
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:94:f5:a1:d5:7e:32:c9:5e:c2:bf:99:61:08:aa:e6:5f:6d:7f:d9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): be:e6:dc:b7:13:f4:3e:4f:18:24:b6:30:6b:9f:c1:a4:b9:f9:2e:b1
Fingerprint (sha256): d5:e7:0b:8f:9e:2f:95:9e:f7:40:84:78:bc:f0:0d:02:76:6e:c1:d7:bf:6a:97:aa:84:a0:8f:ff:63:fa:ae:fa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.michiganannuityalert.com

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.michiganannuityalert.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alabamaannuityalert.com
annuity.frontporchsolutions.com
arizonaannuityalert.com
arkansasannuityalert.com
californiaannuityalert.com
georgiaannuityalert.com
hawaiiannuityalert.com
kansasannuityalert.com
kentuckyannuityalert.com
marylandannuityalert.com
michiganannuityalert.com
minnesotaannuityalert.com
missouriannuityalert.com
newcoloradoannuityalert.com
newjerseyannuityalert.com
newyorkannuityalert.com
northcarolinaannuityalert.com
northdakotaannuityalert.com
pennsylvaniaannuityalert.com
rhodeislandannuityalert.com
southcarolinaannuityalert.com
texasannuityalerts.com
utahannuityalert.com
virginiaannuityalert.com
www.alabamaannuityalert.com
www.arizonaannuityalert.com
www.arkansasannuityalert.com
www.californiaannuityalert.com
www.georgiaannuityalert.com
www.hawaiiannuityalert.com
www.kansasannuityalert.com
www.kentuckyannuityalert.com
www.marylandannuityalert.com
www.michiganannuityalert.com
www.minnesotaannuityalert.com
www.missouriannuityalert.com
www.newcoloradoannuityalert.com
www.newjerseyannuityalert.com
www.newyorkannuityalert.com
www.northcarolinaannuityalert.com
www.northdakotaannuityalert.com
www.pennsylvaniaannuityalert.com
www.rhodeislandannuityalert.com
www.southcarolinaannuityalert.com
www.texasannuityalerts.com
www.utahannuityalert.com
www.virginiaannuityalert.com

Other certificates including the domain name michiganannuityalert.com

(limited to 100 certificates)
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
www.michiganannuityalert.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
www.northdakotaannuityalert.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
www.michiganannuityalert.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
www.newyorkannuityalert.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
www.michiganannuityalert.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
www.michiganannuityalert.com
www.newyorkannuityalert.com
www.missouriannuityalert.com
www.newyorkannuityalert.com

Certificate

The complete raw certificate details for www.michiganannuityalert.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuYLdtcBk7VZE8yML+of
y260hAmoAaAIMXazZgIavopfB8qVR5hMpgGkWjew20ilLeDu2Rw/bJw0NQfYdxOp
aM9ftlslyPLdUIk3uEC9OrPV17JfUKmLUvECPD8zm909GK+g10dzqvR+8rIACLAN
0gxsWaYy/8LaIjoVBNeotIGdpSaJrI3gjpNIZgIjYy49h4obBa2m9gNOCiSBgCSt
fEcFVk4J0L5H+hmMESQINjuqO0YI/ucZfgT73zRPjx9F97KLODeTClrFjggHbnc5
CjFgxogvNsoJdGgqMv2ubrov9CkBe79f6utiMFmqm6UEGMygfVwOf1MKXhlCYicb
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323729971100873888446831806336112190175722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-27 17:33:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-25 17:33:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.michiganannuityalert.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23593764033682617668557195595872153314566265312628344047786789664831924989346999894683983903027437214437379149195181037410752069854581132568305342220755912567539151595922426586017668904280088528896427874648977150865377054510438322087159783255620688916879518832516874405078291611324666814064098531484737112660561558994821742310472673451100772458729497662548604395078654818271185555103910276791580810020033356549754481921486500232288082549569592702198288019235118154788606707782601668632548785981582524620746729523012933356882771892790195169453407595261449111004098547534310705904254741675301385888246724246997708512067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b94f5a1d57e32c95ec2bf996108aae65f6d7fd9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1351 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alabamaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annuity.frontporchsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arizonaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkansasannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiiannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansasannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentuckyannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marylandannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michiganannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnesotaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missouriannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcoloradoannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newjerseyannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcarolinaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northdakotaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennsylvaniaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhodeislandannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcarolinaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasannuityalerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utahannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virginiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alabamaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arizonaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arkansasannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.californiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.georgiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiiannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kansasannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kentuckyannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marylandannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michiganannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minnesotaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missouriannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newcoloradoannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newjerseyannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newyorkannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcarolinaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northdakotaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennsylvaniaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rhodeislandannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcarolinaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texasannuityalerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utahannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virginiaannuityalert.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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