www.nelsoncarclub.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f0:8e:c8:6f:e4:df:e8:be:51:f6:30:dc:a5:5a:72:d8:f7 was issued on by Let's Encrypt.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nelsoncarclub.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f0:8e:c8:6f:e4:df:e8:be:51:f6:30:dc:a5:5a:72:d8:f7
Serial Number (int): 343194416960559919775889205503553103386871
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 67:5d:f1:6d:c8:f0:b4:1a:3c:4a:33:00:6e:8f:96:4f:b5:41:6a:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4f:1d:a0:15:08:d5:04:0a:38:7c:05:5c:ec:23:d2:dd:97:b6:2a:19
Fingerprint (sha256): 02:91:97:e1:f6:30:a8:c6:99:f2:c8:43:c2:76:30:8f:ff:a1:5a:44:8d:b0:4c:82:70:9c:db:3a:c5:4e:02:64

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nelsoncarclub.co.nz

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nelsoncarclub.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sporty-production2.trafficmanager.net
www.aafl.co.nz
www.actc.org.nz
www.aucklandmarist.co.nz
www.basketballtaranaki.co.nz
www.blenheimgolfclub.co.nz
www.bluffhillbowls.co.nz
www.bsgevents.co.nz
www.bullernetball.co.nz
www.hastings-central.school.nz
www.heet.net.nz
www.hillseekers.co.nz
www.hillseekers4wd.co.nz
www.lucknow.school.nz
www.marchingcanterbury.co.nz
www.melrosetargetshooting.co.nz
www.mesoball.co.nz
www.mtwellingtonrugby.co.nz
www.nelsoncarclub.co.nz
www.netballmanawatu.org.nz
www.northcoterugby.co.nz
www.northharbourtag.co.nz
www.nztua.com
www.pcjcc.org.nz
www.pioneerbasketballclub.co.nz
www.prebbletonnetball.org.nz
www.puhoisports.org.nz
www.rangitikeigolfclub.co.nz
www.schoolground.com
www.seatounafc.org.nz
www.shoreroversnetball.co.nz
www.southerntack.co.nz
www.sportsground.com
www.stheliersbowlingclub.co.nz
www.stjosephschb.school.nz
www.sunrisecottage.co.nz
www.tabletennis.org.nz
www.teawamutusquash.co.nz
www.temata.school.nz
www.terracechb.school.nz
www.tuakauponyclub.co.nz
www.tutangiora.nz
www.ultrarunner.org.nz
www.volleyballbop.co.nz
www.waikatohockey.org.nz
www.wellingtonrnr.org.nz
www.wellsfordsquashclub.co.nz
www.wops.co.nz

Other certificates including the domain name nelsoncarclub.co.nz

(limited to 100 certificates)
www.nelsoncarclub.co.nz
willowpark.school.nz
sporty.co.nz
sporty.co.nz
meeanee.school.nz
sporty.co.nz
www.taranakihockey.org.nz
www.canterburybaseball.co.nz
southlandmtbclub.co.nz
www.oacnz.org
sporty.co.nz
sporty.co.nz
www.rollestonrugby.co.nz
trenthamrifleclub.co.nz
sporty.co.nz
sporty.co.nz
canterburybaseball.co.nz
www.wmsc.org.nz
uniss.co.nz
rosmini.school.nz
www.badmintonhb.co.nz
pioneerbasketballclub.co.nz
canterburybaseball.co.nz
meeanee.school.nz
www.mttauharagymnastics.co.nz
yes.stockx.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for www.nelsoncarclub.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonK/awvqjPFYMDnBXEr7
bi1q7yrZw6QRWGqmVLnYJ3wogIpR9I/pYCP0SOAlxX6ln4Ss6TwENY697XpWMON5
ssOtNRDOgAi3YgLziIdXrT8Pr4EM4G40Zu0gMUAtV4Kg1HG6JEf85PwDUTuA6WIS
ebdmcn20RS0hCC/QK/9SlsdmLFOhsxs7fyxb9mNOOSAYzLcFh6yt7skGVHf/FDtm
p4zj3GNsB95kV0o/WCO7eZOWOJelloPYQv7ksRNsR8OVlh4NCFbQ4DVmKHr0vAE0
MDvprUmr6H46+fQps05HVLyr3NwiVLZJWs4hE8mOOVT5o3i4Qquzflzyesd+smd1
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343194416960559919775889205503553103386871
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 08:20:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 08:20:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nelsoncarclub.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20507189617682008752998131341155191841192076524032311801163480075004646048784930578866238669936190284364593773649832628433505874570737580458149289500561059006965768229067322540330594867794580353011340234351995101353812689461441640380834034498625723955265319952879136602652019000558587523533415100805462700843786868693147752078831362862646252728200986692195473943417821442122993349263865902116634540188096187415996492766877152138056818757357951242686682239692614049506935680669569474643756773603418577746040247972191313570794490981310706067664706167710028866328851323316204415680034725766195504938688247756339242562893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							675df16dc8f0b41a3c4a33006e8f964fb5416a0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1220 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty-production2.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketballtaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsgevents.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marchingcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesoball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcoterugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharbourtag.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangitikeigolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seatounafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephschb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunrisecottage.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teawamutusquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tutangiora.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatohockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170a4d8d6a80000040300483046022100f1789c96ec8127ed0b7d7f244ed7e86648a0b836355759e0807c19b2d2d300fa022100e4c8526fe0b22869951dc0ad0e37c3f0ffacdf4ef6db599b07870af7d9b1f824007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a4d8d68b0000040300483046022100e04bc2f8dc9e96a21e7218bc3397c46638631ea06e4659356e65127273544af7022100ade09e876475cb096a69b2cad1f83cd4ad3e41876fa3859c6c306ee049036646
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000132a5ab46846f0ff7158177d533b2f66c9c7c4c314837822d4239286232b52f7de3bafd30d3def251ca5e89ba69c443bba52a9aa60eb5b7f271d8919dfb7288e62e7591880140baa5d5213bb3f7c9ad33df6638e9656ec8aeb209ea4db49b53aff98d6d8673255b07b36bc1f901e3a86cc883129413f4b9d1b97cf488123147da5b965c806631fa6e2028e96a9783f67728d2894159f657006c0664fee0c4615872cd1a0ed4bd2f71ca685aaaa60740ddf90e433bea6c72898cfe87852411e97e769ae1ce8253e72972e0b1ef81b3ad403c24ae2bcdbb4bf9eaea5fee81b91bb42df0506d4d1ac9795f544264eee01ced9cc1528b401c1b97b722a62d4223b1