developvalmiera.lv

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3d:4a:3c:fd:16:23:08:9f:d7:89:0e:85:81:5d:64:3d:2f was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=developvalmiera.lv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:4a:3c:fd:16:23:08:9f:d7:89:0e:85:81:5d:64:3d:2f
Serial Number (int): 282192761720161073776159076523272330034479
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f5:f1:67:e1:34:19:b0:de:af:a6:c4:f4:58:44:96:94:59:b8:a3:7f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 25:7b:6f:73:2b:43:9b:25:32:be:6e:88:59:36:bd:d2:98:4f:01:15
Fingerprint (sha256): 02:93:56:47:57:2d:22:89:09:96:2b:72:65:3b:0c:da:8a:f5:97:2b:54:2a:d4:03:26:62:33:fb:7d:7e:6f:8a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate developvalmiera.lv

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for developvalmiera.lv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.dabasparkspiejura.lv
cpanel.developvalmiera.lv
dabasparkspiejura.lv
dabasparkspiejura.ts-server-4.area.lv
developvalmiera.lv
developvalmiera.ts-server-4.area.lv
mail.dabasparkspiejura.lv
mail.developvalmiera.lv
martinmajas.ts-server-4.area.lv
webdisk.dabasparkspiejura.lv
webdisk.developvalmiera.lv
webmail.dabasparkspiejura.lv
webmail.developvalmiera.lv
www.dabasparkspiejura.lv
www.dabasparkspiejura.ts-server-4.area.lv
www.developvalmiera.lv
www.developvalmiera.ts-server-4.area.lv
www.martinmajas.ts-server-4.area.lv

Other certificates including the domain name developvalmiera.lv

(limited to 100 certificates)
developvalmiera.lv
dabasparkspiejura.lv
developvalmiera.lv
developvalmiera.lv
developvalmiera.lv
developvalmiera.lv
developvalmiera.lv
developvalmiera.lv
*.karjerasmateriali.lv
*.developvalmiera.lv
developvalmiera.lv
developvalmiera.lv
developvalmiera.lv
developvalmiera.lv
*.developvalmiera.lv
developvalmiera.lv
developvalmiera.lv
dabasparkspiejura.lv
developvalmiera.lv
developvalmiera.lv
developvalmiera.lv
*.developvalmiera.lv

Certificate

The complete raw certificate details for developvalmiera.lv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHcjCCBlqgAwIBAgISAz1KPP0WIwif14kOhYFdZD0vMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDYyMTQ2MDVaFw0y
MDA1MDYyMTQ2MDVaMB0xGzAZBgNVBAMTEmRldmVsb3B2YWxtaWVyYS5sdjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANkBuogN7N7yWmdqa+j2NP9/YCgj
0geDxtz1qLzDaCDJRfOS6tbaRl6DR/n1QIOzQ0pHce2yN/yU2SZdifrlMuuNazYu
k33r5Rzi/o088BCYYkwl77HKhldh3gBrO+I+2AoW6yW6JIJAm2gN3pTZjzPI1E5d
7uidxFbwnXDbREqeNdUbQzGNTGWGiwJxAeeg3cePyb5GClSh1TQzfGTKR0rBKond
9qILY4hjw6lmsv80dA2imkvvDR2llowCCydlLKROEpLSXZVfVNspXzG9rpeIk4YL
DOhGrM+it+lcTGo5km5cfiS+lWWdploNJOsuSh5FefYHuEqrc//6CpLGOr0CAwEA
AaOCBH0wggR5MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU9fFn4TQZsN6vpsT0WESW
lFm4o38wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCAi8GA1UdEQSCAiYwggIightjcGFuZWwuZGFiYXNwYXJrc3BpZWp1
cmEubHaCGWNwYW5lbC5kZXZlbG9wdmFsbWllcmEubHaCFGRhYmFzcGFya3NwaWVq
dXJhLmx2giVkYWJhc3BhcmtzcGllanVyYS50cy1zZXJ2ZXItNC5hcmVhLmx2ghJk
ZXZlbG9wdmFsbWllcmEubHaCI2RldmVsb3B2YWxtaWVyYS50cy1zZXJ2ZXItNC5h
cmVhLmx2ghltYWlsLmRhYmFzcGFya3NwaWVqdXJhLmx2ghdtYWlsLmRldmVsb3B2
YWxtaWVyYS5sdoIfbWFydGlubWFqYXMudHMtc2VydmVyLTQuYXJlYS5sdoIcd2Vi
ZGlzay5kYWJhc3BhcmtzcGllanVyYS5sdoIad2ViZGlzay5kZXZlbG9wdmFsbWll
cmEubHaCHHdlYm1haWwuZGFiYXNwYXJrc3BpZWp1cmEubHaCGndlYm1haWwuZGV2
ZWxvcHZhbG1pZXJhLmx2ghh3d3cuZGFiYXNwYXJrc3BpZWp1cmEubHaCKXd3dy5k
YWJhc3BhcmtzcGllanVyYS50cy1zZXJ2ZXItNC5hcmVhLmx2ghZ3d3cuZGV2ZWxv
cHZhbG1pZXJhLmx2gid3d3cuZGV2ZWxvcHZhbG1pZXJhLnRzLXNlcnZlci00LmFy
ZWEubHaCI3d3dy5tYXJ0aW5tYWphcy50cy1zZXJ2ZXItNC5hcmVhLmx2MEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADy
AHcA5xLysDd+GmL7jskMYYTx6ns3y1YdESZb8+DzS/JBVG4AAAFwHK6LMgAABAMA
SDBGAiEA9jh0BN4QiwsLuxPmFuZFPzdpQ83pXO50AJL7OH/9jX0CIQCtctfa14DF
2LqQOSRdwIZv9ZB4kUgUFwEIIS360SmP2QB3AAe3XBvlfWj/8bDGHSMVx7rmV3xX
lLdq7rxhOhpp06IcAAABcByui10AAAQDAEgwRgIhALKS9x16mLI7oty3wb8wbPDr
7LQSgE+AVzECI4xcn5/2AiEA574HDM2SlmIGauLqv7JdXT3djvOfULZeac71hfg9
QS0wDQYJKoZIhvcNAQELBQADggEBAGoy8cOXwOEQfebMCcAxRHdefmsQp0CQauRc
EOXl0Xe32Mrad84O4caZrJU5vbl7ZfWbmPPVVt0wbaabc1Jpj1yG/CCv9+VV52SS
WYbArBp1icimVjMquPd3H3fMrGCYIH9XCyfoQdNLmhaYv6HhfjkjTU3T21nPke/O
9peeDpRlQsJNlyY7zUcW87U8+51RmT4Vkt5ZyWB9priw9/COhggcmkRvKp6NdKxD
1LPosjWh14hfSRFfTgN5SEvr2+0eBO61i2bCpO3MZQ1pSSgCoQx6GOT1gsyxdVqb
83Rs/J9K0Wmlv6Fqq3bB8Llz1DQnwDEeM7aVSTwtfagFcDuz2HE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QG6iA3s3vJaZ2pr6PY0
/39gKCPSB4PG3PWovMNoIMlF85Lq1tpGXoNH+fVAg7NDSkdx7bI3/JTZJl2J+uUy
641rNi6TfevlHOL+jTzwEJhiTCXvscqGV2HeAGs74j7YChbrJbokgkCbaA3elNmP
M8jUTl3u6J3EVvCdcNtESp411RtDMY1MZYaLAnEB56Ddx4/JvkYKVKHVNDN8ZMpH
SsEqid32ogtjiGPDqWay/zR0DaKaS+8NHaWWjAILJ2UspE4SktJdlV9U2ylfMb2u
l4iThgsM6Easz6K36VxMajmSblx+JL6VZZ2mWg0k6y5KHkV59ge4Sqtz//oKksY6
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282192761720161073776159076523272330034479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 21:46:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-06 21:46:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'developvalmiera.lv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27394564601061814348348507729817587902952019189305356883357701418330547531358054924036852375389349400581187335017541395437994701266490173697645268358106008464848229391681536852161332140476640853514661122625738326970703150917261047436555065443253709591977983339438177610668936279760555715634194186330823524645213862100060592954651134942775187597675045994491769701581293744176594014084414210922780030057237870937315951718240532864828436515844600088035633328985614512792688745060617612906602064804280439913395393543870690599820470162019044811303259433883235869709277269370499499519092088242890277774666950452398623439549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5f167e13419b0deafa6c4f45844969459b8a37f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (550 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.dabasparkspiejura.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.developvalmiera.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dabasparkspiejura.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dabasparkspiejura.ts-server-4.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developvalmiera.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developvalmiera.ts-server-4.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.dabasparkspiejura.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.developvalmiera.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinmajas.ts-server-4.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.dabasparkspiejura.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.developvalmiera.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.dabasparkspiejura.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.developvalmiera.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dabasparkspiejura.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dabasparkspiejura.ts-server-4.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developvalmiera.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developvalmiera.ts-server-4.area.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinmajas.ts-server-4.area.lv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001701cae8b320000040300483046022100f6387404de108b0b0bbb13e616e6453f376943cde95cee740092fb387ffd8d7d022100ad72d7dad780c5d8ba9039245dc0866ff59078914814170108212dfad1298fd900770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001701cae8b5d0000040300483046022100b292f71d7a98b23ba2dcb7c1bf306cf0ebecb412804f80573102238c5c9f9ff6022100e7be070ccd929662066ae2eabfb25d5d3ddd8ef39f50b65e69cef585f83d412d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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