studentet.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dd:01:d1:dd:7d:94:1c:37:84:4d:71:1e:e9:cd:62:c8:c9 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=studentet.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dd:01:d1:dd:7d:94:1c:37:84:4d:71:1e:e9:cd:62:c8:c9
Serial Number (int): 336541679795209239674974174653098494183625
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bf:00:ec:a3:57:d8:07:b2:18:0c:4a:86:82:79:9e:cf:ad:59:da:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ec:7e:d2:84:cf:43:ed:57:57:5e:e8:e6:43:e6:c3:08:13:1c:67:36
Fingerprint (sha256): e1:a3:5a:e9:a6:c7:20:40:64:49:3a:60:ec:2f:44:f7:cb:f0:f3:69:23:f9:4f:bc:81:de:46:2b:61:2d:29:bd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate studentet.org

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for studentet.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baba.audioqendra.com
cache.audioqendra.com
cache.studentet.mobi
cache.videoqendra.com
cufi.diar.selmani.info
d3rcqosvayhjn4.just5.org
m.audioqendra.com
studentet.mobi
studentet.org
up.audioqendra.com
ww.audioqendra.com
www.studentet.org

Other certificates including the domain name studentet.org

(limited to 100 certificates)
studentet.org
studentet.org
studentet.org
studentet.org
studentet.org
studentet.org
studentet.org
up.audioqendra.com
studentet.org
m.audioqendra.com
studentet.org
studentet.org
studentet.org
studentet.org
studentet.org
studentet.org
studentet.org
studentet.org
studentet.org
studentet.org
studentet.org
studentet.org
studentet.org
studentet.org

Certificate

The complete raw certificate details for studentet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG7DCCBdSgAwIBAgISA90B0d19lBw3hE1xHunNYsjJMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA1MTAxOTE3MDBaFw0x
NjA4MDgxOTE3MDBaMBgxFjAUBgNVBAMTDXN0dWRlbnRldC5vcmcwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQC8Sy7TUchJR8LrAK5NdT81LjYdJvlFwiBj
maVfvh+T6CeWV74jUpST3ui/PAfla9gCtX6nnrN6cpj+Kvn/PaCh0HQJqwoTr6NY
BoY364lTNmUN1Ym4LPd74hGJD9xMGM3rs3j/yRLR8u1bJToMZz+4uMLWkSS1BP0p
6LT2vXqqfZtz4UYiTddahKWemR7vKvMy0WEJOygUMInuciBBlnf9f1KL2/WaB5lN
MqV8WiLt+P1XDEpksve1UtmUTUgUUpdfdtKcHOdDeR6urAHWnynW84k7n3gNJCfh
5aYza8d7AxJylgthdkYVo9P/a/NPuyPyajW/47OOEBS/uBaBFZMy0+yzNSq8XTj7
h6qtQ9zy+MvnYeQPufQ8uwLOl1r0Xn6mlTmQMRucGKLgD7USJ0WpXn55SKmw0WV+
jp+BUchO2t+ncoVDNnTFu1JvdJPNR9Di3A3uWoMG+f1y3qua62JrvSkSiY/+RjS1
ehTBDJ8Rk9lKYLxwxKtCcA+zychaF2y8wZXF933v24ccu3E8ZjX21JvWIIZuAEjh
sCN0yAShQrZ+97Czru32RPkmQXM+SO/HKb4iVbf8yCHmqXBGe66pJ2J3ZUg9IewD
5C4ZABFAX02sf7PEOL4qZlarnT1KeMrawbuP7f8eXbgfpxggIjLHdFLGIl1tSgpZ
5Al6HhMgvwIDAQABo4IC/DCCAvgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS/AOyj
V9gHshgMSoaCeZ7PrVnaDzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzCCAQQGA1UdEQSB/DCB+YIUYmFiYS5hdWRpb3Fl
bmRyYS5jb22CFWNhY2hlLmF1ZGlvcWVuZHJhLmNvbYIUY2FjaGUuc3R1ZGVudGV0
Lm1vYmmCFWNhY2hlLnZpZGVvcWVuZHJhLmNvbYIWY3VmaS5kaWFyLnNlbG1hbmku
aW5mb4IYZDNyY3Fvc3ZheWhqbjQuanVzdDUub3JnghFtLmF1ZGlvcWVuZHJhLmNv
bYIOc3R1ZGVudGV0Lm1vYmmCDXN0dWRlbnRldC5vcmeCEnVwLmF1ZGlvcWVuZHJh
LmNvbYISd3cuYXVkaW9xZW5kcmEuY29tghF3d3cuc3R1ZGVudGV0Lm9yZzCB/gYD
VR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyB
m1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVs
eWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2Vy
dGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3Jn
L3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQBRNLAKCK1Q/mEALrCcYSeN
SpbKJ6a2V61iWFnJu1RNX57XGSEWyxINkqAGwGXjL4diMaEQ83PVIAgQXECSr2uz
z9fLEconjjBL1bVmhsjrMZ7BVOOyu1mcLFOCc8k6UB13CsC5EYkct/IHfP9ARc6Y
Zjt9FwqVt/8ne+4/QXQR0t4CYynffmNc73x0xq3aIBWcXY8kWqu3KSspypmKTokn
6ehGZSjTSG+bh7eddoNyXbrwQhMjorg6/4Sx0O2GHMZrGb13jAnKTArFog/76vyI
L5QbwtLlw8n5OL18/DiyAZ3tFMgml+3Jz8Axg06EX7ay/nExtpfw0QwAM5JlEbzH
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvEsu01HISUfC6wCuTXU/
NS42HSb5RcIgY5mlX74fk+gnlle+I1KUk97ovzwH5WvYArV+p56zenKY/ir5/z2g
odB0CasKE6+jWAaGN+uJUzZlDdWJuCz3e+IRiQ/cTBjN67N4/8kS0fLtWyU6DGc/
uLjC1pEktQT9Kei09r16qn2bc+FGIk3XWoSlnpke7yrzMtFhCTsoFDCJ7nIgQZZ3
/X9Si9v1mgeZTTKlfFoi7fj9VwxKZLL3tVLZlE1IFFKXX3bSnBznQ3kerqwB1p8p
1vOJO594DSQn4eWmM2vHewMScpYLYXZGFaPT/2vzT7sj8mo1v+OzjhAUv7gWgRWT
MtPsszUqvF04+4eqrUPc8vjL52HkD7n0PLsCzpda9F5+ppU5kDEbnBii4A+1EidF
qV5+eUipsNFlfo6fgVHITtrfp3KFQzZ0xbtSb3STzUfQ4twN7lqDBvn9ct6rmuti
a70pEomP/kY0tXoUwQyfEZPZSmC8cMSrQnAPs8nIWhdsvMGVxfd979uHHLtxPGY1
9tSb1iCGbgBI4bAjdMgEoUK2fvews67t9kT5JkFzPkjvxym+IlW3/Mgh5qlwRnuu
qSdid2VIPSHsA+QuGQARQF9NrH+zxDi+KmZWq509SnjK2sG7j+3/Hl24H6cYICIy
x3RSxiJdbUoKWeQJeh4TIL8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336541679795209239674974174653098494183625
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-10 19:17:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-08 19:17:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'studentet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768171207916190198348422146054292979209719589532976442102908177899264253324566127334879365763525225479686225738974714427083329224045858550691835390023709984843046519631004746762938702940226093688711424906586936892482463927999713914476458801213912687219831360005417852355505667586671135787435009183089930112789952421641829954980683792438902863371636325441209122403768573403731098140424717434408429243150743032057916086249187608797369215509193298345109711790032462589765204730964593786333269137341721119942104067581439509548570597632289960073629956578725170142324855236251042029533824955732802550441862953681555693446163738616600036966541967447964460061530356001807745177085548481644920063112408786122140854934461472536494904636656348156632587322234961403431232476790972811273995988107797511207485034406949177245018087020614727942606185125069537206848885060094058439596063099834561754261908229522646070332126602767598283460690574613034246642419156463489037674773726996131519393023119225577622806771992798686357142194725204941678622176677897824139599002815085404610244357259432434828464912459119327009790373115968067668872603382760163044654001471020907553164180217032978355582105580586379535021847698149467090032129179154547098657169599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf00eca357d807b2180c4a8682799ecfad59da0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (252 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baba.audioqendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache.audioqendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache.studentet.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache.videoqendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cufi.diar.selmani.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd3rcqosvayhjn4.just5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.audioqendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentet.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'up.audioqendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.audioqendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studentet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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