www-stage.anzacmemorial.nsw.gov.au

Issued by R3

About this certificate

This digital certificate with serial number 03:58:2d:1c:a8:f1:72:a6:6e:f6:03:cf:98:df:c1:9d:7d:35 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www-stage.anzacmemorial.nsw.gov.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:2d:1c:a8:f1:72:a6:6e:f6:03:cf:98:df:c1:9d:7d:35
Serial Number (int): 291341670155019967990325446846645966568757
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 12:f5:1f:c5:89:91:fa:0b:bb:31:5a:80:d6:6c:b2:dd:e0:37:9b:42
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f9:85:eb:a2:65:4c:2c:1c:54:4b:b8:0a:bd:54:a4:d7:d9:85:fe:89
Fingerprint (sha256): 00:f0:d6:1d:20:49:76:ad:aa:1f:b9:63:49:1e:c3:57:3c:85:34:a7:b7:ec:00:5f:ba:74:00:20:e2:00:31:75

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www-stage.anzacmemorial.nsw.gov.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-stage.anzacmemorial.nsw.gov.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ovasitesstg.prod.acquia-sites.com
www-stage.anzacmemorial.nsw.gov.au

Other certificates including the domain name nsw.gov.au

(limited to 100 certificates)
glc-lyncfe.glc-dom.greatlakes.nsw.gov.au
wnswlhd.health.nsw.gov.au
virtela.simpplr.com
sni192047.cloudflaressl.com
helpdesk.regionalhousing.org.au
webpac.sutherlandshire.nsw.gov.au
*.sopa.nsw.gov.au
rsc.cdn77.org
test.cadastre.nsw.gov.au
support.licence.nsw.gov.au
incapsula.com
incapsula.com
search.det.nsw.edu.au
vsp.schn.health.nsw.gov.au
www.goulburn.nsw.gov.au
live.artgallery.nsw.gov.au
citrix.service.nsw.gov.au
ehub.enrol.education.nsw.gov.au
www.heti.nsw.gov.au
incapsula.com
archivemanager.health.nsw.gov.au
vpn.hawkesbury.nsw.gov.au
*.finance.nsw.gov.au
www.careforacarer.nsw.gov.au
ictsd.sureservegroup.co.uk
www.kogarah.nsw.gov.au
ictsd.sureservegroup.co.uk
pra.community.nsw.gov.au
PCS-PDS263.tmc.rta.nsw.gov.au
vmoirs.health.nsw.gov.au
objective-dev.transport.nsw.gov.au
employment.midwestern.nsw.gov.au
*.audit.nsw.gov.au
mpa.nsw.gov.au
mailsync.narrandera.nsw.gov.au
incapsula.com
*.int.smprimavera.aws.hosting.transport.nsw.gov.au
skypool1.det.nsw.edu.au
ssl758952.cloudflaressl.com
mhrt.nsw.gov.au
intranet.transport.nsw.gov.au
m.artgallery.nsw.gov.au
policingactivity.bocsar.nsw.gov.au
eventshub.nsw.gov.au
pointtopoint.nsw.gov.au
macroc.nsw.gov.au
oacciwtrn.oci.dcj.nsw.gov.au
ssl758953.cloudflaressl.com
www.energy.nsw.gov.au
cims-sit.hbcf.nsw.gov.au
fncw.nsw.gov.au
wollongong.nsw.gov.au
accessedge1.nswgov.ucfx.com
crl.nsw.gov.au
gitlab.service.nsw.gov.au
ssl375654.cloudflaressl.com
alpha.portal.data.nsw.gov.au
www.victimsservices.justice.nsw.gov.au
sni203116.cloudflaressl.com
www.pexa.osr.nsw.gov.au
msa.dev.education.nsw.gov.au
sni183646.cloudflaressl.com
5676582576324608-fe3.pantheonsite.io
sni183646.cloudflaressl.com
citrix.lb.rta.nsw.gov.au
sni192047.cloudflaressl.com
*.icac.nsw.gov.au
imperva.com
failover.graftongallery.nsw.gov.au
whatsonhelp.cityofsydney.nsw.gov.au
5638916786880512-fe1.pantheonsite.io
tmf-dashboard.icare.nsw.gov.au
uat.emos.nsw.gov.au
www.otsi.nsw.gov.au
events.energysaver.nsw.gov.au
*.unify.service.nsw.gov.au
www.kyogle.nsw.gov.au
web-workflow.sl.nsw.gov.au
camden.nsw.gov.au
cloud.comms.service.nsw.gov.au
sni192050.cloudflaressl.com
governor.nsw.gov.au
*.wls.dpi.nsw.gov.au
tools.dev.justconnect.justice.nsw.gov.au
api.uat01.onlineregistry.justice.nsw.gov.au
incapsula.com
locale-distro.morpht.com
apt-apigee-devs-profile-user-images-prod.cf.g.service.nsw.gov.au
imperva.com
eservices.byron.nsw.gov.au
snswlhd.health.nsw.gov.au
maritimemanagement.transport.nsw.gov.au
tst.smartandskilled.nsw.gov.au
www.hay.nsw.gov.au
*.audit.nsw.gov.au
incapsula.com
*.upperhunter.nsw.gov.au
sni.cloudflaressl.com
mail.yass.nsw.gov.au
archives.nsw.gov.au

Certificate

The complete raw certificate details for www-stage.anzacmemorial.nsw.gov.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGbDCCBVSgAwIBAgISA1gtHKjxcqZu9gPPmN/BnX01MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjAzMDQwMDU4MzJaFw0yMjA2MDIwMDU4MzFaMC0xKzApBgNVBAMT
Ind3dy1zdGFnZS5hbnphY21lbW9yaWFsLm5zdy5nb3YuYXUwggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQDWF1zNPleVH+PJA9c/p6Pjc5Z7vfniv6m272hA
hQPYqS8utroIM0ufhtvee9d4daqWNni8fDexBT7kUokE6hpdIFBFJcylGoy4i9EZ
TnIY3zmioTEn2pNXEc3tRkLHRtfklINV9148syTYsN5jGUDfOtLEZf3oku/fyTTa
dovf0U1+DWELKMGnVNvM2iuP2c8kTUc3UWxhVBy6Io/K8Hjw8kJULF8tpR+YCCEf
mELaUT8IbsMBRysk0sY3U9Z4VBtUs6kgU5KEzPG3R6y0zggfRWCPsuA4l0Im0jvN
bmTy+3w5d+aZ50ppwJP7GR6jvCy2fkArCYzFUO0VCZtmgCxB7fdc4SYwoBMRX4E3
e52FEPujsOxRAoMp1GIFAix7FrtfSDYAIuI8UnEPK64AHEK6udsGJDfitwQaqx+T
zJdqbDITCzc7tXakDK9HBpen0MfOFByOXvkRd2xruMfKY/WySdmvUlAC3+rckzkb
c3wV1pHhPt21893WcAW4QXrLkJnfOC84LlZOQ721H1ETC3v6f3GotCUzhzKPgYeh
Au8g1W/GXE0IP88DkszdQ+I5r9dX6y735qQ+MpyreTAZwN9zBXIH0WgPGaC9OtiJ
Ho53biFntVSAxvRyDNGK/TVEqWtC/x24M7cS4XmPifr0lLwUXi5LJszIAOBZCYmk
6ncXCQIDAQABo4ICfzCCAnswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQS9R/FiZH6
C7sxWoDWbLLd4DebQjAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBV
BggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9y
ZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzBQBgNVHREESTBH
giFvdmFzaXRlc3N0Zy5wcm9kLmFjcXVpYS1zaXRlcy5jb22CInd3dy1zdGFnZS5h
bnphY21lbW9yaWFsLm5zdy5nb3YuYXUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYL
KwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw
dC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQDfpV6raIJPH2yt7rhfTj5a
6s2iEqRqXo47EsAgRFwqcwAAAX9SpmoqAAAEAwBGMEQCIHgcyOSOuM4dVRNClNtP
n7jQlJYrEGP1hEMftO4P5zMBAiAftVZCVFGTR5a2MoV6UMkpHK0VITuW3E/GEZ1u
9nl5bgB2ACl5vvCeOTkh8FZzn2Old+W+V32cYAr4+U1dJlwlXceEAAABf1Kmah4A
AAQDAEcwRQIhALqm/SEkzdcVbCOAI1PuuW7yEpCTYX4HlObwM+QU0FgaAiBg2NqE
l3G1Jhm849cXrFcDuIHyMneDiJhCQHTM0dKUkTANBgkqhkiG9w0BAQsFAAOCAQEA
TnHZJvDisBVDPFbxbXgp0pJ6SU9/y51+gAby1T+u5HkWVi56Nhi3fH53zJxLjoPe
piMNg7VF76y/LdWzdIaB+LkkSl+9HR6SKAdwdkdFUtf+L+Aiei+KwZ5g+zdn40mo
7CFs56fxyp/oFi7AD47CwNNvXSwrr3vtRtLWkLdQRKOhVtOOh0/xpfIDl7GC/l6+
CQgZVlrzgagtJ73ZZwjHOXUU7rGpGaVT8BVIV3PnHY1hMwZH1aD0T7XEH/3l5+WP
5uMGVtoOlQVg+DxD4l3x2KyuxYsksnr/ZRVWOcCgxy2tWdBRXGJUhe/z+ZOrdvxm
lB2uvddj/TRE9dtssWvMsg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291341670155019967990325446846645966568757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-04 00:58:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-02 00:58:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-stage.anzacmemorial.nsw.gov.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873416138025637928026667020764959848177437410328024318126703455770530940460329233840517492024732749923282998685916349720189435125561621441478313674974715583730172183474639852096888975869761266040779822235282938963005653614357672322113604950836368115858726762154613103888844190702036989174785653394086772474150877214058836554047562384200431989200121204909453943756816654470395113221464240782350380733115393571834221188774826060186384993307081169165402865611432152346635835035398408512069452536754336247553122554203656409750275224438573229632539422229696689626943129201743561128209004071505222859224872195808014290577496057414780977602054909327347913206419394529616517883324534571938994101970881025904829311840879204151890243354749868519940679743352781451547932213442197589671981216837394297452847272240088924204763167728000541690643427657350743362115126106668930539611278768228168414695028360116150042845042110690204784222779085884113650131911464548577283208673478617947608731990470869114683219874251256210744366992836889684259409744976080426907246349067335955372050626018577154681418188454382733850145147739460921938630767967676676868503509159901754620873109377703346386109745819963756511864113025186142629330740128032628688842856201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12f51fc58991fa0bbb315a80d66cb2dde0379b42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovasitesstg.prod.acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stage.anzacmemorial.nsw.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017f52a66a2a00000403004630440220781cc8e48eb8ce1d55134294db4f9fb8d094962b1063f584431fb4ee0fe7330102201fb556425451934796b632857a50c9291cad15213b96dc4fc6119d6ef679796e0076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017f52a66a1e0000040300473045022100baa6fd2124cdd7156c23802353eeb96ef2129093617e0794e6f033e414d0581a022060d8da849771b52619bce3d717ac5703b881f23277838898424074ccd1d29491
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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