oratiaunited.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:34:b4:87:bc:4d:4d:bd:a3:b4:80:a5:a0:06:33:5b:cb:b2 was issued on by Let's Encrypt.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=oratiaunited.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:34:b4:87:bc:4d:4d:bd:a3:b4:80:a5:a0:06:33:5b:cb:b2
Serial Number (int): 366383792625464607351367579548805848878002
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 87:20:17:73:90:d3:a3:75:a4:ae:e0:77:d6:2e:4a:bc:85:b8:7a:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:76:28:0d:eb:93:0e:4b:e1:e5:75:dd:26:41:4d:2d:86:5c:e5:f7
Fingerprint (sha256): 00:8a:2d:6e:ab:1f:45:89:f7:f5:64:9c:02:6c:41:3f:c0:d5:e7:19:04:87:0d:cf:6b:53:7c:54:c6:c1:36:4e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate oratiaunited.co.nz

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oratiaunited.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ardmoremarist.co.nz
aucklandbaseball.co.nz
aucklandfootball.org.nz
aucklandservicerifle.org.nz
bowlssouthland.co.nz
bowlswestcoast.org.nz
brooklyncroquetclub.org
businesshawkesbay.co.nz
capitalfootball.org.nz
centralfootball.co.nz
centralfootball.org.nz
cmsport.co.nz
footballsouth.co.nz
hbcc.org.nz
hendersonsquash.co.nz
howicksailingclub.co.nz
hrc.org.nz
karakasportspark.co.nz
keirunga.org.nz
ladiessocialcycling.org.nz
linfield.co.nz
makikihi.school.nz
manurewamets.co.nz
maoribasketball.co.nz
marlborough-touch.co.nz
mmcc.co.nz
mountfortwaterpolo.nz
myfootball.co.nz
newplymouthcroquetclub.co.nz
nff.org.nz
nhbmx.org.nz
nzsra.org.nz
oratiaunited.co.nz
ravensbourne.co.nz
rosegardenscroquetclub.org.nz
royaloakracquets.co.nz
schoolground.co.nz
schoolground.nz
southlandbmxclub.co.nz
sportsground.co.nz
ulyssesnelson.org.nz
upperhuttrifleclub.co.nz
waibopfootball.co.nz
waihekeunited.org.nz
waihoraclaytarget.co.nz
waikaregolfclub.co.nz
whangaroasportfishingclub.co.nz
woolstonparkindoorbowls.org.nz

Other certificates including the domain name oratiaunited.co.nz

(limited to 100 certificates)
oratiaunited.co.nz
maristinvercargill.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sportnorthland.co.nz
www.katikatifc.co.nz
pcbasketballclub.co.nz
pcbasketballclub.co.nz
www.pkjsports.co.nz
sporty.co.nz
www.waitakerecityfc.org.nz
hockeymanawatu.org.nz
www.nzfootball.co.nz
sporty.co.nz
hockeymanawatu.org.nz
sporty.co.nz
www.sportsground.com
maristinvercargill.co.nz
hockeymanawatu.org.nz
maristinvercargill.co.nz
www.aucklandsoftball.org.nz
sporty.co.nz
sporty.co.nz
www.brooklyncroquetclub.org
www.thesalmonrun.nz
maristinvercargill.co.nz
maristalbion.co.nz
sporty.co.nz
sporty.co.nz
www.unimountafc.org.nz
www.greenhithefootball.org
sporty.co.nz
www.pauanuilifeguards.org.nz

Certificate

The complete raw certificate details for oratiaunited.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FMJBY7B9qJuji3eUjA3
zWTEDWXMb5kebaq8AOj+1imbOgNqJFU7UzZf1TVXy7m2cL+vqYjnW09m+z6Md9gJ
sgvpiOVWzuSzDQPZVQOT3UC0akzo96GJJq+tiEizGaf6Zt3g3SypClbBehuoSdbW
Q47gSR4xvBmTqOkf1uOtLvzNbml2H1usYDrytnMZf0DYd+Cv7wYMjgRPfeiRazB8
pIagcMbxph9Ozqc7qkJSpQ+5j/xXhmL/Te+3V6v6doUGrpry3ycrvSf/tmUHxhqz
1r9uPsg/QhVZfZiTphdBfwliGan0aDRc1yMxFS6J7xlo+Y+1kZWHdgkD49mf7kWK
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366383792625464607351367579548805848878002
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-01 00:41:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-01 00:41:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oratiaunited.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27308420076117781352005689159326733612032280420681996899227560144301060655293133371716220379205064556421943579953380031752277836610437971254538977814055666509760612966812415871320845833408667567950826236749254010202554955863042916617425880149447561914674497012402718408235917384788128650938817068878248971282954687457215532842517982877709302044016484201558616298183409196692427459782835236409092416167392062530666803455724727479639790627376755849591739503178041214021995642378090416597299279530744438645684541429305331558666021320311775453784885062178146504131717852092864899269174666550455408403281265868840647363101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8720177390d3a375a4aee077d62e4abc85b87a5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1055 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesshawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001761bf676a30000040300473045022032cf79b92c28aab68a0d36fdc94e72a179ed62c128f4975fc25a2f9728e25eae022100e567c94b71ed98560413db2a38901e809d7afe5e3a5ba4e9af64f5e29ea844e90076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001761bf676be00000403004730450220119a740e9a26ce95d46e4dee45143c8a8e5f8fc28bd15ee9eb9d944957d77c60022100bf068d61de1d01b17a71e914279576ac6a4a25f1a4ee01f6f07e1825d1f76863
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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