www.newyorkannuityalert.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:bb:29:3b:bd:c6:e4:d9:64:59:ff:69:9e:0f:e8:7a:f0 was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.newyorkannuityalert.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:bb:29:3b:bd:c6:e4:d9:64:59:ff:69:9e:0f:e8:7a:f0
Serial Number (int): 315350251499869840387531367637766254394096
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:69:7a:08:c7:9c:8d:64:5c:84:3e:c7:a3:87:d2:86:0c:54:c5:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 10:2a:30:0a:bf:cc:8b:9c:1d:fb:c3:ca:69:24:44:1a:e6:ac:e8:3c
Fingerprint (sha256): fc:5d:ab:bb:44:7c:d0:df:e2:f2:57:32:4b:08:6b:a3:68:0f:07:36:de:8e:84:59:64:ed:6e:c5:dc:bc:34:32

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.newyorkannuityalert.com

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.newyorkannuityalert.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alabamaannuityalert.com
annuity.frontporchsolutions.com
arizonaannuityalert.com
arkansasannuityalert.com
californiaannuityalert.com
georgiaannuityalert.com
hawaiiannuityalert.com
kansasannuityalert.com
kentuckyannuityalert.com
marylandannuityalert.com
michiganannuityalert.com
minnesotaannuityalert.com
missouriannuityalert.com
newcoloradoannuityalert.com
newjerseyannuityalert.com
newyorkannuityalert.com
northcarolinaannuityalert.com
northdakotaannuityalert.com
oklahomaannuityalert.com
pennsylvaniaannuityalert.com
rhodeislandannuityalert.com
southcarolinaannuityalert.com
texasannuityalerts.com
utahannuityalert.com
virginiaannuityalert.com
www.alabamaannuityalert.com
www.arizonaannuityalert.com
www.arkansasannuityalert.com
www.californiaannuityalert.com
www.georgiaannuityalert.com
www.hawaiiannuityalert.com
www.kansasannuityalert.com
www.kentuckyannuityalert.com
www.marylandannuityalert.com
www.michiganannuityalert.com
www.minnesotaannuityalert.com
www.missouriannuityalert.com
www.newcoloradoannuityalert.com
www.newjerseyannuityalert.com
www.newyorkannuityalert.com
www.northcarolinaannuityalert.com
www.northdakotaannuityalert.com
www.oklahomaannuityalert.com
www.pennsylvaniaannuityalert.com
www.rhodeislandannuityalert.com
www.southcarolinaannuityalert.com
www.texasannuityalerts.com
www.utahannuityalert.com
www.virginiaannuityalert.com

Other certificates including the domain name newyorkannuityalert.com

(limited to 100 certificates)
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
www.michiganannuityalert.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
www.michiganannuityalert.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
www.newyorkannuityalert.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
www.michiganannuityalert.com
sni10692.cloudflaressl.com
www.michiganannuityalert.com
www.newyorkannuityalert.com
www.missouriannuityalert.com
www.newyorkannuityalert.com
sni10692.cloudflaressl.com

Certificate

The complete raw certificate details for www.newyorkannuityalert.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl/GEEbylTBwuKaM0uu/
SZlas1vrr4TIIZS59O1spk5NddLaXuOWrfzoH5FpYlb1PQhkIZIrDAc1kfUARCMV
q3wFxMPDHx9UBPmF+LTpaxRkWJ2jXyJJ2omlR14OrSFjmncE4urLeyYy8aNMhvSD
IbJJIoKFc99VNsOZYbtyHVFEjg5S5DeSCcSIiYpU1XlcdcWpY5K4XtI0a2h2mI1f
mKuDv7BHAhmSv8/HV8Pn6RtCeiRrQ8UzdYf3gW7d4Ax4FS3TQ27GC1dbMZh+7vKe
T8grOBdyIoajFy3d3Iif3UKeoeHimENGiuIafJoC9S47aWm6IACVVsivUx+xkez4
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315350251499869840387531367637766254394096
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-06 19:14:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-07 19:14:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.newyorkannuityalert.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22517646048663546909518240790717892000037058593071353368602994285391667925266387096484173499194240364525877669261150210624084135559406993996640761227061684561546336821303649372107945109365703702543844378150247332113763202725296180495352505834757366417165848759289966549845607776954247431934975047589234705290907294797329869494622229024934272484818942108763190243011719778961682658816285772890502120916404795168156299579542621414960669120743489207893975877334415598784447557570582960790099066669270028270391020429422090241452025928788922195641736669215389577095801839583461196892652905655125126767906504304094352308387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a697a08c79c8d645c843ec7a387d2860c54c51b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1407 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alabamaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annuity.frontporchsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arizonaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkansasannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiiannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansasannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentuckyannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marylandannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michiganannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnesotaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missouriannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcoloradoannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newjerseyannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcarolinaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northdakotaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oklahomaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennsylvaniaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhodeislandannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcarolinaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasannuityalerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utahannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virginiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alabamaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arizonaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arkansasannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.californiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.georgiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiiannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kansasannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kentuckyannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marylandannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michiganannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minnesotaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missouriannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newcoloradoannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newjerseyannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newyorkannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcarolinaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northdakotaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oklahomaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennsylvaniaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rhodeislandannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcarolinaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texasannuityalerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utahannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virginiaannuityalert.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008a760cc74f18f629ae14ed194973bcf5d43d2573d88c17e90ee033929a22330537c9ee87338e93fb4ae266e5ed988241b67bfff7da65ebdf140cce464d7dbf91209958971ae968809d7210bda73069bd1642bc7cb666fc63d7fd6af1881acfb21d8be81f96259c9b7f38817dc943d4a513aa7d5ddafc816375e0fd5c1815daef851c639bec7504d1c1ded59428d4e322adf0af02b07b9475cadeb4cf06d3fa5ab105db272be614fec2e5047a5c3ef4f967d2824c6f60214026ccb6bb3bb3326da75fab4cdc2bcd8297b57789e8cec8df59d805f47d41bdfb1112df8b168d9b5c2ccb38ee13e2a4016342dee29ee14b075d26ea304a4b19cac72ab4148adb552c