intranet.cifa-fashion.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:bd:d8:6f:b7:1d:fb:e3:6b:1a:47:4a:9d:7c:e8:31:7f:67 was issued on by Let's Encrypt.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=intranet.cifa-fashion.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bd:d8:6f:b7:1d:fb:e3:6b:1a:47:4a:9d:7c:e8:31:7f:67
Serial Number (int): 413050204381195725226060917634933529345895
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 20:9f:8e:14:6f:f9:a9:5c:dd:29:2a:ea:86:92:36:d6:b9:3f:4d:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): af:db:22:bc:c5:36:dc:a1:61:63:f2:88:25:8a:e9:35:83:9e:cf:0a
Fingerprint (sha256): 00:65:8f:b0:9d:8a:d3:f0:19:7f:1b:ea:44:36:12:1c:3c:7e:69:bb:a5:3d:84:97:22:11:5b:9a:31:ac:ca:92

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate intranet.cifa-fashion.com

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intranet.cifa-fashion.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

annuaire.parisfashionshops.com
backoffice.cifa-fashion.com
bfm.parisfashionshops.com
blog.parisfashionshops.com
cdn.cifa-fashion.com
cifa-express.com
cifa-fashion.com
cn.cifa-fashion.com
crm.cifa-fashion.com
cron.cifa-fashion.com
directorio.parisfashionshops.com
directory.parisfashionshops.com
en.cifa-fashion.com
event.cifa-fashion.com
forherparis.com
intranet.cifa-fashion.com
invitation.phygital.events
location.cifa-fashion.com
magazine.parisfashionshops.com
old.cifa-fashion.com
pfs.cifa-fashion.com
phygital.events
pick-up.cifa-fashion.com
sandbox.marketplace.paris
sms.marketplace.paris
style.parisfashionshops.com
template.boxtoshop.com
v2.cifa-fashion.com
verzeichnis.parisfashionshops.com
wsn.parisfashionshops.com
www.cifa-fashion.com
www.forherparis.com
www.intranet.cifa-fashion.com
www.location.cifa-fashion.com
www.old.cifa-fashion.com
www.pfs.cifa-fashion.com
www.phygital.events
www.pick-up.cifa-fashion.com

Other certificates including the domain name cifa-fashion.com

(limited to 100 certificates)
intranet.cifa-fashion.com
www.intranet.cifa-fashion.com
crm.cifa-fashion.com
www.escandelle.marketplace.paris
sandbox.marketplace.paris
tw.parisfashionshops.com
forherparis.com
magazine.parisfashionshops.com
www.pick-up.cifa-fashion.com
old.cifa-fashion.com
forherparis.com
cdn.cifa-fashion.com
hnathalie.marketplace.paris
www.old.cifa-fashion.com
www.location.cifa-fashion.com
annuaire.parisfashionshops.com
sandbox.marketplace.paris
intranet.cifa-fashion.com
event.cifa-fashion.com
forherparis.marketplace.paris
cn.cifa-fashion.com
ru.parisfashionshops.com
directory.parisfashionshops.com
www.michaelkors.marketplace.paris
bestacces.marketplace.paris
www.intranet.cifa-fashion.com
pick-up.cifa-fashion.com
kr.parisfashionshops.com
cn.cifa-fashion.com
tw.parisfashionshops.com
sms.marketplace.paris
cn.cifa-fashion.com
ledesk.marketplace.paris
verzeichnis.parisfashionshops.com
cifa-fashion.com
michaelkors.marketplace.paris
masterclass.parisfashionshops.com
backoffice.cifa-fashion.com
intranet.cifa-fashion.com
pfs.cifa-fashion.com
www.pfs.cifa-fashion.com
cn.cifa-fashion.com
cdn.cifa-fashion.com
cdn.cifa-fashion.fr
old.cifa-fashion.com
wsn.parisfashionshops.com
ru.parisfashionshops.com
marketplace.paris
sms.marketplace.paris
sms.marketplace.paris
styleshoes-paris.com
www.bestacces.marketplace.paris
pfs.cifa-fashion.com
marketplace.paris
www.pick-up.cifa-fashion.com
sms.marketplace.paris
style.parisfashionshops.com
bestacces.marketplace.paris
marketplace.paris
sandbox.marketplace.paris
marketplace.paris
www.sandbox.marketplace.paris
backoffice.cifa-fashion.com
www.jubylee.marketplace.paris
cron.cifa-fashion.com
intranet.cifa-fashion.com
sandbox.marketplace.paris
blog.parisfashionshops.com
cdn.cifa-fashion.fr
crm.cifa-fashion.com
marketplace.paris
sms.marketplace.paris
v2.cifa-fashion.com
intranet.cifa-fashion.com
survey.parisfashionshops.com
forherparis.com
efashioncenter.com
marketplace.paris
michaelkors.marketplace.paris
directory.parisfashionshops.com
marketplace.paris
annuaire.parisfashionshops.com
directory.parisfashionshops.com
survey.parisfashionshops.com
www.michaelkors.marketplace.paris
bestacces.marketplace.paris
masterclass.parisfashionshops.com
event.cifa-fashion.com
www.old.cifa-fashion.com
sg.parisfashionshops.com
cron.cifa-fashion.com
marketplace.paris
fi.parisfashionshops.com
pick-up.cifa-fashion.com
marketplace.paris
marketplace.paris
phygital.events
www.forherparis.com
sandbox.marketplace.paris
v2.cifa-fashion.com

Certificate

The complete raw certificate details for intranet.cifa-fashion.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKtBa4d4Sy3Xrwgq5gsG
YQ7kU3qyhIcKbkXXd4m1IjkA20AYJpe81vJBmj8kKN/1LggEOafAT8uB+DzJ1saB
1ImdGdDaYESTdP2qPPN3uBSr4QjHjLDaoLibfPCJulakgP7BMhFWMECEeMt0VQv3
OqeG067MYyd2Y4gHakiVwdVYe4jzpOI/7AkpbLCbI1NASec0nLajXMRDgOOL7Ehp
+AdUQBm2qQvHO/rBrWlb+QY0lBnp/BTY7l1WJx5BnDuKiXImQ9p1b5fTdBMFgq4/
i1t5ES4pHWrm5ODFB/dCc3uk5fTnvBhLVm6C+iEq4Qz+rf8XVoI4szF/NICczxSY
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413050204381195725226060917634933529345895
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-10 13:57:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 13:57:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intranet.cifa-fashion.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25837063470776025109303963223997456267779920032022154029376934825729418374029893812000461242933297140412076262616769487048283714126453049467414831249836514404252636206743349310897818361514492082264724052792910760801257088990704589080214494729293287295493600983549016307148059406788999767971464124038752413394517069612265861840675636805425607460806434775252618270524558750370857045426522931392028391478888112806238421555965126034456173429545397939149084668601633610281220650789440501660004873369074691180021393507759425202289418312124557823612515953087321677684118859584888144185467392589064235402793018234376669141069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							209f8e146ff9a95cdd292aea869236d6b93f4d53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (968 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annuaire.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfm.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cifa-express.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cron.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directorio.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forherparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invitation.phygital.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'location.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phygital.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'style.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'template.boxtoshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verzeichnis.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsn.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forherparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.location.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phygital.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e55d17e110000040300483046022100f0c51a66cba499852978571cf4e59e7e58e9a539f171cf6bc230d88f3db327b6022100d15e54e47121da62c5a5469c64b93d652d7050f9287518011a8d2ce1da63de31007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e55d17dfe0000040300473045022009b1efefb4a86755a24d307f3fb9254a5b8335124a2c7a42c95ad08f3c76fa9c022100f030b9735aa87f12c67a1e01a678b106c00cc871895ea02d9fba09a10b3cdca0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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