www.michiganannuityalert.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:32:0e:f4:52:1d:bc:e1:9a:ec:bc:3c:4b:83:13:20:c9:e3 was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.michiganannuityalert.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:32:0e:f4:52:1d:bc:e1:9a:ec:bc:3c:4b:83:13:20:c9:e3
Serial Number (int): 278370853919215794567320344100031483136483
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6f:4e:76:26:58:d9:01:3f:eb:1a:d9:cc:57:ed:91:1d:6a:b6:ec:db
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:1e:90:c7:a6:fe:8f:b5:22:ea:d2:3d:63:17:8e:b6:57:46:7e:9b
Fingerprint (sha256): f7:8d:3f:c3:61:66:aa:25:2b:a5:d5:73:85:8f:e5:72:d1:40:f8:f1:b1:e2:e0:d2:f4:d8:c0:1d:a2:5e:e4:05

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.michiganannuityalert.com

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.michiganannuityalert.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alabamaannuityalert.com
annuity.frontporchsolutions.com
arizonaannuityalert.com
arkansasannuityalert.com
californiaannuityalert.com
georgiaannuityalert.com
hawaiiannuityalert.com
kansasannuityalert.com
kentuckyannuityalert.com
marylandannuityalert.com
michiganannuityalert.com
minnesotaannuityalert.com
missouriannuityalert.com
newcoloradoannuityalert.com
newjerseyannuityalert.com
newyorkannuityalert.com
northcarolinaannuityalert.com
northdakotaannuityalert.com
oklahomaannuityalert.com
pennsylvaniaannuityalert.com
rhodeislandannuityalert.com
southcarolinaannuityalert.com
texasannuityalerts.com
utahannuityalert.com
virginiaannuityalert.com
www.alabamaannuityalert.com
www.arizonaannuityalert.com
www.arkansasannuityalert.com
www.californiaannuityalert.com
www.georgiaannuityalert.com
www.hawaiiannuityalert.com
www.kansasannuityalert.com
www.kentuckyannuityalert.com
www.marylandannuityalert.com
www.michiganannuityalert.com
www.minnesotaannuityalert.com
www.missouriannuityalert.com
www.newcoloradoannuityalert.com
www.newjerseyannuityalert.com
www.newyorkannuityalert.com
www.northcarolinaannuityalert.com
www.northdakotaannuityalert.com
www.oklahomaannuityalert.com
www.pennsylvaniaannuityalert.com
www.rhodeislandannuityalert.com
www.southcarolinaannuityalert.com
www.texasannuityalerts.com
www.utahannuityalert.com
www.virginiaannuityalert.com

Other certificates including the domain name michiganannuityalert.com

(limited to 100 certificates)
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
www.michiganannuityalert.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
www.northdakotaannuityalert.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
www.michiganannuityalert.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
www.newyorkannuityalert.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
www.michiganannuityalert.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
sni212503.cloudflaressl.com
www.michiganannuityalert.com
www.newyorkannuityalert.com
www.missouriannuityalert.com
www.newyorkannuityalert.com

Certificate

The complete raw certificate details for www.michiganannuityalert.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCYeHRce6wIWUzqpXX1a
bDX+YaF386NxkdeSAFLqpinvlOgyCoQs0FwD3JJep68LEZ5hEkXdD8T+4B6Hnyot
QHSTXaf41Any+PjLiG7suiYjzUr4l0Eovit8rYqlpJwWhGEGP/W+xgUIUkLxApYl
K3ordUmCxQ/5Kwjnnz889BQPm8/a8JCuZsl7lBWjPIP8U5cl+vH8j6PWhfnP7gBI
CKQflgDQG8FE/R9bwZxN2r3ToZsjbrW+yoFiP/n6AiOstfrLWIgeauycsjCkJio7
iKbT5oRuIP9Z1S3N1DLNjoZpRy0dyv01C6hDN18tqU9glhA9YtVYy5kZH0D5SFEg
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278370853919215794567320344100031483136483
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-18 19:10:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-18 19:10:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.michiganannuityalert.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24761504277937761386256068741205125275510537037411091658753141509712238116560976427452166497852776846340864032390874048729336756533852703589119687137977535694856861546538376757341462056342363110341104677722143467876770414301822238163207713438971589702562811750815735628542015076051983980838493073207511783466616151787239966796362818301619939484844008728691648882951793007580495250592245809261313269687829219784186293718426803056906684164457768454618884216808776681387370922914676226482684926751806018854619449835384728257991891374616119057718273643022213112202919375710214004225325900251279982034188944503808248062133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f4e762658d9013feb1ad9cc57ed911d6ab6ecdb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1407 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alabamaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annuity.frontporchsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arizonaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkansasannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiiannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansasannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentuckyannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marylandannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michiganannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnesotaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missouriannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcoloradoannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newjerseyannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcarolinaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northdakotaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oklahomaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennsylvaniaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhodeislandannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcarolinaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasannuityalerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utahannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virginiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alabamaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arizonaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arkansasannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.californiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.georgiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiiannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kansasannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kentuckyannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marylandannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michiganannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minnesotaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missouriannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newcoloradoannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newjerseyannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newyorkannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcarolinaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northdakotaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oklahomaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennsylvaniaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rhodeislandannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcarolinaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texasannuityalerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utahannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virginiaannuityalert.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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