btrivers.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0c:62:a8:0b:4f:d5:f4:6c:81:1d:f5:b2:ca:e3:03:71:f6 was issued on by Let's Encrypt.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=btrivers.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0c:62:a8:0b:4f:d5:f4:6c:81:1d:f5:b2:ca:e3:03:71:f6
Serial Number (int): 265551383077222903384202918778147801625078
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d5:31:c4:2d:f9:90:a5:f7:ff:f4:e7:9a:be:fc:aa:39:02:c7:fc:54
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 86:ae:a6:ed:5b:db:39:bf:0c:3a:39:50:05:0c:f5:1f:40:99:87:1c
Fingerprint (sha256): 03:9a:dd:7e:2f:50:3a:ce:bd:2b:6e:72:1e:75:6e:a2:7c:b3:8b:35:d1:7d:2e:29:7b:2b:46:ea:38:cd:02:a1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate btrivers.com

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for btrivers.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.11ksustem.com
*.balanchetrak.com
*.blesnap.com
*.btrivers.com
*.damonknight.com
*.ecashopping.com
*.eretikos.com
*.fundedme.com
*.handsandfet.com
*.ietjetair.com
*.integriisandme.com
*.itravl2000.com
*.kaisernz.com
*.leakth.com
*.legensdigitaltv.com
*.liedetector.ca
*.manamoa18.com
*.manamoa20.com
*.nickolodon.com
*.onwmillionsnickers.com
*.papeterie.ca
*.pokermagazine.ca
*.ruflesridge.com
*.sinusarrhythmia.com
*.solrwinds.com
*.time4educaton.com
*.travelnrsing.com
*.vestiairecolllective.com
*.wwwgetmyuni.com
*.yummytreats.ca
11ksustem.com
balanchetrak.com
blesnap.com
btrivers.com
damonknight.com
ecashopping.com
eretikos.com
fundedme.com
handsandfet.com
ietjetair.com
integriisandme.com
itravl2000.com
kaisernz.com
leakth.com
legensdigitaltv.com
liedetector.ca
manamoa18.com
manamoa20.com
nickolodon.com
onwmillionsnickers.com
papeterie.ca
pokermagazine.ca
ruflesridge.com
sinusarrhythmia.com
solrwinds.com
time4educaton.com
travelnrsing.com
vestiairecolllective.com
wwwgetmyuni.com
yummytreats.ca

Other certificates including the domain name btrivers.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for btrivers.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265551383077222903384202918778147801625078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 14:10:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 14:10:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'btrivers.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800131591998160464960178068670178207902612669946749210123026089004589022912575114002840016132222496928205607018672758777220694816545328273547445673371771900662754267089704792036672887225051426781247053919916764278040826941940375040382777205064400823154893876493580658840449496368288245060548151525824692671732643970521284683095164815141814741451071228786604620142986721060743562339032551254624539838159511292293617028414433857739952160777182972223493519919036767117241027487928064682448925393156532771153822342396414566717297084434797775402878990007101953883301563548316900465917038943400138103586093210580693812875543338936884906522504967130147798195318490383634865806383528970423957860071750978644414989938629314189494105499554991398303528329139442974868247157220041739957797202608989256851391192552516871522263125802466599565257016059454332021076824878294063576895908471291802968553124914648959912035379470583354991130768045933307495887062816757929275338225269968482706211436982510676403141805478161719204850405275306526397415396087141493071353119160348114292389021999824851509315522097864210242997475339255132758664655929499264324930296103981283766282969542243499985697131066716211244195374085919088677622255669485469108780222539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d531c42df990a5f7fff4e79abefcaa3902c7fc54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1072 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.11ksustem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.balanchetrak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blesnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btrivers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.damonknight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecashopping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eretikos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fundedme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handsandfet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ietjetair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integriisandme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itravl2000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaisernz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leakth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legensdigitaltv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liedetector.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manamoa18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manamoa20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nickolodon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onwmillionsnickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papeterie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokermagazine.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruflesridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sinusarrhythmia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solrwinds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.time4educaton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelnrsing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vestiairecolllective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwgetmyuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yummytreats.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '11ksustem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balanchetrak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blesnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btrivers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damonknight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecashopping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eretikos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundedme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handsandfet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ietjetair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integriisandme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itravl2000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaisernz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leakth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legensdigitaltv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liedetector.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manamoa18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manamoa20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickolodon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onwmillionsnickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papeterie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokermagazine.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruflesridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinusarrhythmia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solrwinds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time4educaton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelnrsing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vestiairecolllective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwgetmyuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yummytreats.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e089ea3390000040300473045022100a1cbc45e1566ec6c57c5410efac6ad73f75dc50c2f1ac5fc4fdc0e7a8fdf2ff80220282eb33f724b11daedc2e4ea167a15cf7dbca0feead48397ae4d015b0718eeba007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e089ea3250000040300483046022100a925517003699024f903400b28aa4eabcf3307f8efb0256c2771bfb38b6b49c20221009e066c0fb84382fa3b1fbd5c829302037fdcbbfc0a2da50a7c49934bd684621f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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