vpstest23.lib.sfu.ca

Issued by R3

About this certificate

This digital certificate with serial number 04:67:2f:d0:f1:96:f8:be:90:99:5f:ff:e4:8d:92:a6:be:08 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vpstest23.lib.sfu.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:67:2f:d0:f1:96:f8:be:90:99:5f:ff:e4:8d:92:a6:be:08
Serial Number (int): 383561786133468036131780081892934359105032
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 09:0c:eb:28:f1:8e:e0:28:d9:3f:24:90:12:58:10:f7:ed:24:bb:81
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 16:30:e3:79:65:a7:3f:67:14:b8:ea:a7:6c:e4:0a:0b:d6:30:f6:41
Fingerprint (sha256): 06:9b:b6:92:de:62:0b:ba:e7:39:2a:50:bf:7c:06:73:0d:32:8f:e3:c1:81:04:97:b0:fc:b8:84:92:32:b4:80

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate vpstest23.lib.sfu.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpstest23.lib.sfu.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpstest23.lib.sfu.ca

Other certificates including the domain name sfu.ca

(limited to 100 certificates)
*.sfu.ca
*.bus.sfu.ca
journals.lib.sfu.ca
*.its.sfu.ca
lib-theses.lib.sfu.ca
aldine.lib.sfu.ca
lib-theses.lib.sfu.ca
journals.sfu.ca
idp.sfu.ca
research.wiki.iat.sfu.ca
*.sfu.ca
bfraser-srv01.cmpt.sfu.ca
cmpt165.csil.sfu.ca
*.sfu.ca
athletics.sfu.ca
digital.lib.sfu.ca
git.fits.sfu.ca
globeproject.com
gruvi.cs.sfu.ca
databases.lib.sfu.ca
badas.irmacs.sfu.ca
ibcwg.org
*.its.sfu.ca
docs.pkp.sfu.ca
piwik.lib.sfu.ca
journal.archpress.lib.sfu.ca
*.sfu.ca
community.sfu.ca
journals.lib.sfu.ca
*.its.sfu.ca
*.sfu.ca
ceramicca.ensc.sfu.ca
adler.psyc.sfu.ca
appointment.lib.sfu.ca
athletics.sfu.ca
cas.sfu.ca
*.sfu.ca
www.npatlas.org
*.its.sfu.ca
*.its.sfu.ca
*.its.sfu.ca
*.its.sfu.ca
mikkeo-git-test.bus.sfu.ca
www.lib.sfu.ca
banyanlab.cs.sfu.ca
autonomy.cs.sfu.ca
newmediabusinessblog.org
*.fhs.sfu.ca
lib-search-dev.lib.sfu.ca
olc-dev.its.sfu.ca
calculator.lib.sfu.ca
atom.archives.sfu.ca
static.lib.sfu.ca
*.its.sfu.ca
isea2015.org
ocs.lib.sfu.ca
*.fhs.sfu.ca
vpstest18.lib.sfu.ca
cs-dm-signage.dc.sfu.ca
*.its.sfu.ca
lib-staff.lib.sfu.ca
pathogenomics.sfu.ca
registry.cloud.rcg.sfu.ca
appointment.lib.sfu.ca
bookings.science.sfu.ca
*.its.sfu.ca
npatlas-curate.chem.sfu.ca
api.lib.sfu.ca
*.sfu.ca
mwhs.avalanche.rem.sfu.ca
*.polylab.sfu.ca
cmpt373-lockdown.cs.surrey.sfu.ca
canvas2.tlc.sfu.ca
*.fhs.sfu.ca
digital.lib.sfu.ca
facts.arts.sfu.ca
nsl.cs.sfu.ca
journals.lib.sfu.ca
*.proxy.lib.sfu.ca
*.its.sfu.ca
vpstest23.lib.sfu.ca
advance.science.sfu.ca
conference.pkp.sfu.ca
www.cieedac.sfu.ca
alerts.library.nyu.edu
arago.cprost.sfu.ca
give.sfu.ca
*.lib.sfu.ca
*.ezproxy2.lib.sfu.ca
*.its.sfu.ca
*.fhs.sfu.ca
www.psyc.sfu.ca
rcg-ggt-dash.dcr.sfu.ca
hadar.tlc.sfu.ca
*.sfu.ca
www.psyc.sfu.ca
*.polylab.sfu.ca
my.sfu.ca
banyanlab.cs.sfu.ca
remsurvey.rem.sfu.ca

Certificate

The complete raw certificate details for vpstest23.lib.sfu.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgISBGcv0PGW+L6QmV//5I2Spr4IMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA1MDYyMTIwMTVaFw0yMTA4MDQyMTIwMTVaMB8xHTAbBgNVBAMT
FHZwc3Rlc3QyMy5saWIuc2Z1LmNhMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
CgKCAgEAwLIREnFjbE8pRe5pTk9relTTxH7LI85SRBhBa2w7Wu/9wTs9l5ZnWN+x
UADmzvHpJTJrmlaS3qn95Z2h7XyYcYIzGztwscn+h8Jn09j+Sw8xuYxbh5dHdOkm
b0WuIOjGRf7hWDFmIc6DN6RTsehIw34ezD9xkeq4sTk8sSaTcpQf/uNSIHcm9Uop
ZeJG69Ob4/f3o8zOQ4d18Yg5D3TgEK13OQzXBqabvOq3CmSPzpcYGbfBZq+vH+r3
A+iRtHp0+MlvTpkrFu6jAX33k9Ag6cx5ZaenU5TLk8UGLdz6bJIv8kpQbWodGAp2
oNtLfGklkMgjAcn7Y/fvht2Epz0QyZog8hPjMOoF0Ju38srBmsXzRToftWGuJ9ET
Ml6sK5XFwKKLahi/BLWcOIASVHai2tGcGmJDD5pEnj/xxPpOL4HiyDxCK5+jsdjf
Tc30shY647pZHWi0wItYUkHwb1EI4+ACP+rMvLrVneEG35Rbwd8hTycO9SrEHjsf
/ae/GrL+24SGARS6pI8Krpk7Z2IcOZNxHBffsOcGjawwuktAMbKj3AXOoiEAB9EN
H9aihCDBZOWXThoZ8SxqxS1hAqKAfVRJL/tVP/X1ddKYIxQBMiFvnMk98OwpOaa8
TgmXkxvhbuqqDGk6FYqf3eaHIYT/M98KylbeBKUWIa0uzJvHDJcCAwEAAaOCAk4w
ggJKMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUCQzrKPGO4CjZPySQElgQ9+0ku4Ew
HwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBH
MCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKG
Fmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wHwYDVR0RBBgwFoIUdnBzdGVzdDIzLmxp
Yi5zZnUuY2EwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEE
AdZ5AgQCBIH0BIHxAO8AdgBc3EOS/uarRUSxXprUVuYQN/vV+kfcoXOUsl7m9scO
ygAAAXlDxGblAAAEAwBHMEUCIEskQATSPx+51zS3hTv1tF9X1ehe4DLlxMf6ShXd
AERRAiEA8wtkliPHrHRtNsP7d02z+zIcr7uw5fhS+n67W4y9nWwAdQD2XJQv0Xcw
IhRUGAgwlFaO400TGTO/3wwvIAvMTvFk4wAAAXlDxGZwAAAEAwBGMEQCIFGVZBSM
C1stFsZaBI9wnIhVJN68tiPJl8gKgAqoFSt0AiBREy51O9u0LamKgQ4VigPwyYxd
9NW4GQHhr1CfJe4oujANBgkqhkiG9w0BAQsFAAOCAQEAJjA6q+KHkl3FRjDayZVm
P2JN32xaj9s3Xp/MOTQ/DHpcxPIISqWRKKlrB0MDyIcp/p9k8ZPtDDaWSekUiwt1
I19DDkEtHMWKpLmStgepz/1yIgynzFx8ddlibTiMZ7L7c8Z2XwI8KhAKrfKrH6YH
bPmpb0YfHL4ZIi/f6QJNVgQevs63B6o7LY1gDRzEEX1Q1BoPgkCkQ/2yAJk3FKwO
ej5kbjxH+7SEPnj5rnMSQER9P5QyU9UjAwO1eJl2UER/f6Gn0czQvQm5fANR78vp
5Ogg8PxudOrl9tldo7UAypbmOp8GnJHQY+hHyvw8On8mrytBpRmcLyjviCARYJsB
5Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwLIREnFjbE8pRe5pTk9r
elTTxH7LI85SRBhBa2w7Wu/9wTs9l5ZnWN+xUADmzvHpJTJrmlaS3qn95Z2h7XyY
cYIzGztwscn+h8Jn09j+Sw8xuYxbh5dHdOkmb0WuIOjGRf7hWDFmIc6DN6RTsehI
w34ezD9xkeq4sTk8sSaTcpQf/uNSIHcm9UopZeJG69Ob4/f3o8zOQ4d18Yg5D3Tg
EK13OQzXBqabvOq3CmSPzpcYGbfBZq+vH+r3A+iRtHp0+MlvTpkrFu6jAX33k9Ag
6cx5ZaenU5TLk8UGLdz6bJIv8kpQbWodGAp2oNtLfGklkMgjAcn7Y/fvht2Epz0Q
yZog8hPjMOoF0Ju38srBmsXzRToftWGuJ9ETMl6sK5XFwKKLahi/BLWcOIASVHai
2tGcGmJDD5pEnj/xxPpOL4HiyDxCK5+jsdjfTc30shY647pZHWi0wItYUkHwb1EI
4+ACP+rMvLrVneEG35Rbwd8hTycO9SrEHjsf/ae/GrL+24SGARS6pI8Krpk7Z2Ic
OZNxHBffsOcGjawwuktAMbKj3AXOoiEAB9ENH9aihCDBZOWXThoZ8SxqxS1hAqKA
fVRJL/tVP/X1ddKYIxQBMiFvnMk98OwpOaa8TgmXkxvhbuqqDGk6FYqf3eaHIYT/
M98KylbeBKUWIa0uzJvHDJcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383561786133468036131780081892934359105032
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-06 21:20:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-04 21:20:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpstest23.lib.sfu.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786129351317877467546057030865126697157470750702471943059350465772617522875679272096626406580798774279170155440307422736391891585510221194549088461953618064755589315207544858050664519379091602578247097260168517192917478945614369705074662325644224721882487641046971675653768767397133829061179290356698529925974327152052304521827868447833603710969331128477300374690020550773961884012269569060921663919857496162959254516750207952473884124760208693675488873962976332611058948714911412310198079978991565900553702258435132753915681203547473478991895557281392914980153153642585550994820419267969090764272446392203236485798010805163727697586498674233459320265140262985760688962022006396545365389705744456842115283134508019541854322114867116390569239944940504615344280683410462133957888681582783550834847963627145764144216224914704579142261903804245876997139001208548313452973759125997298893061874822902987832864577617807925775620637922529222163825789843645661288737729110798155385812678000182699488382982537526646746984760111994018259255591315835358935373355458871786925214407380109758574719182012262222835061710086867360786353641651227766214834375960168524139415546189757016966018833103151154587932703842827393992725550517754524294130896023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							090ceb28f18ee028d93f2490125810f7ed24bb81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpstest23.lib.sfu.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017943c466e5000004030047304502204b244004d23f1fb9d734b7853bf5b45f57d5e85ee032e5c4c7fa4a15dd004451022100f30b649623c7ac746d36c3fb774db3fb321cafbbb0e5f852fa7ebb5b8cbd9d6c007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017943c4667000000403004630440220519564148c0b5b2d16c65a048f709c885524debcb623c997c80a800aa8152b74022051132e753bdbb42da98a810e158a03f0c98c5df4d5b81901e1af509f25ee28ba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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