devstatus.twitch.tv

Issued by R3

About this certificate

This digital certificate with serial number 04:57:4b:ff:be:47:8c:45:90:05:51:a7:f6:eb:25:36:c2:fe was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=devstatus.twitch.tv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:57:4b:ff:be:47:8c:45:90:05:51:a7:f6:eb:25:36:c2:fe
Serial Number (int): 378154729643871864209027831097458792252158
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a1:89:3b:0a:0e:1f:2f:24:11:7e:bf:1c:bf:95:a6:fa:15:93:9a:b2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 34:7e:35:d0:29:48:44:a2:c5:e7:ff:92:c7:8f:93:bb:eb:5a:f6:17
Fingerprint (sha256): 07:c6:4e:13:43:6e:f9:6e:22:b2:05:bd:df:29:4b:fd:44:a7:ca:1c:4f:57:0c:b9:e3:f8:55:56:ad:cb:bd:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate devstatus.twitch.tv

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for devstatus.twitch.tv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

devstatus.twitch.tv
oporto.craveable.support
servicestatus.broadsign.com
status-page.virtru.com
status.asknice.ly
status.birchbox.com
status.brazen.com
status.civitaslearning.com
status.currencycloud.com
status.disruptive-technologies.com
status.dkvistun.is
status.eab.com
status.factom.com
status.geempower.com
status.helloglobo.com
status.holvi.com
status.inorbit.ai
status.jiminny.com
status.joist.com
status.kenticocloud.com
status.maestrano.com
status.mcs.mail.ru
status.mercur.com
status.mydex.org
status.onstarrez.cloud
status.paysafe.io
status.pubnative.net
status.qualpay.com
status.scalepoint.com
status.spotme.com
status.sproutlingcloud.com
status.sprucehealth.com
status.starrezcloud.io
status.teckst.com
status.tis.biz
status.trackops.com
status.watermelon.co
status.westpac.co.nz
status.wickr.com
status.woodpecker.co

Other certificates including the domain name twitch.tv

(limited to 100 certificates)
cartman.prod.internal.us-west-2.twitch.tv
watch.twitch.tv
imgix4.map.fastly.net
panels-staging.twitch.tv
*.prod.us-west2.twitch.tv
twitch.tv
jp.blog.twitch.tv
it.blog.twitch.tv
imgix4.map.fastly.net
blog.twitch.tv
tv.twitch.tv
dns-vetting1f.map.fastly.net
imgix4.map.fastly.net
devstatus.twitch.tv
panels-images-staging.twitch.tv
devstatus.twitch.tv
prod.25.slot.cdn.salesforce-communities.com
m.twitch.tv
dns-vetting1f.map.fastly.net
*.twitch.tv
prod.25.slot.cdn.salesforce-communities.com
twitch.map.fastly.net
bemol-status.linxcommerce.com.br
assets.help.twitch.tv
twitch.tv
countess.twitch.tv
na85-1.cdn.salesforce-communities.com
statuspage.io
statuspage.io
tr.blog.twitch.tv
statuspage.io
spade.twitch.tv
assets.help.twitch.tv
*.pubsub-edge.twitch.tv
statuspage.io
id-cdn.twitch.tv
devstatus.twitch.tv
na85-1.cdn.salesforce-communities.com
*.chat.twitch.tv
twitch.tv
extensions-discovery-images.twitch.tv
twitch.tv
vmetric.twitch.tv
tv.twitch.tv
internal.passport.twitch.tv
connections.prod.internal.us-west-2.twitch.tv
cartman.staging.internal.us-west-2.twitch.tv
devstatus.twitch.tv
na85-1.cdn.salesforce-communities.com
*.twitch.tv
pubsub-edge-darklaunch.twitch.tv
uploads.twitch.tv
prod.25.slot.cdn.salesforce-communities.com
data.us-west-2.di.xarth.tv
dns-vetting1f.map.fastly.net
tv.twitch.tv
devstatus.twitch.tv
bemol-status.linxcommerce.com.br
id-cdn.twitch.tv
dns-vetting1f.map.fastly.net
cis.blog.twitch.tv
na75-2.cdn.salesforce-communities.com
twitchboard-prod.twitch.tv
devstatus.twitch.tv
bemol-status.linxcommerce.com.br
panels-images-prod.twitch.tv
extensions.sings.twitch.tv
dev.twitch.tv
compass.networkstatus.co.nz
blueprint.us-west-2.di.xarth.tv
*.darklaunch.tmi-room.twitch.a2z.com
discourse.design.twitch.tv
na85-1.cdn.salesforce-communities.com
watch.twitch.tv
*.staging.us-west2.twitch.tv
contributorstatus.crowdflower.com
devstatus.twitch.tv
*.staging.irc-edge.twitch.a2z.com
prod.25.slot.cdn.salesforce-communities.com
passport.twitch.tv
fr.blog.twitch.tv
dev.passport.twitch.a2z.com
extensions-discovery-images.twitch.tv
*.twitch.tv
vmetric.twitch.tv
dns-vetting1f.map.fastly.net
bemol-status.linxcommerce.com.br
id-cdn.twitch.tv
m.twitch.tv
fr.blog.twitch.tv
na85-1.cdn.salesforce-communities.com
link.twitch.tv
watch.twitch.tv
assets.help.twitch.tv
origin.edge-beta.ads.twitch.tv
imgix4.map.fastly.net
pubsub-edge-darklaunch.twitch.tv
gds-vhs-drops-campaign-images.twitch.tv
prod.25.slot.cdn.salesforce-communities.com
dragonfly.twitch.tv

Certificate

The complete raw certificate details for devstatus.twitch.tv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbbVVd2jRjbTXM87K4ia
4u79IdvU0KGlCjiYoOmFzLsdEhF6PT0+/ssZ7obgBm8wh4IlMsnxo9DY9THy0ASH
O0/Y9n/g+2qBx5GcSsi2cKlHK2MvkmXs4sr74DXVJturUeA2zmBZAj3baIWgKCqA
sxYZ3G8UfsfPFWsIggRyJItX5s2LfkwSYbebDlaG9+9cGGSwAq5N4b1+J4MxGIR/
EfWuE6x0HiwIRW36OEWuPBkDuqot8wk55mk+K9bpFe4JYLeIOc5YcEvCPCos0N/X
9DbuS3DAjPHv3vuBSe9tbShfT2Lho856LfFUDQ/dyO81POEZnU5WUTw0VcdlHQg9
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378154729643871864209027831097458792252158
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-11 15:25:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-09 15:24:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'devstatus.twitch.tv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21929385240053540810264539349393927559098129747024413407073646284679302621781550193939267301284353843582134130550637309471571839993131741430697027716413495713621860772299281762414989428885582092008230783543665674835021778573432666402510423938707924345336484479265713214888588679961805811865732761184735423667854548091103776972123215634208759774320668057766427568735970124306787636924566119768961248408815291658049934665073000996607651477959161011727273861327900970538843172293048012690556688423677604091284338661104715604472726618378180139332577652753609894970917279941746376584023051435945986457110825633647241477479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1893b0a0e1f2f24117ebf1cbf95a6fa15939ab2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (876 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devstatus.twitch.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oporto.craveable.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicestatus.broadsign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-page.virtru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.asknice.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.birchbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.brazen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.civitaslearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.currencycloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.disruptive-technologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.dkvistun.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.eab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.factom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.geempower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.helloglobo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.holvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.inorbit.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.jiminny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.joist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.kenticocloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.maestrano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.mcs.mail.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.mercur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.mydex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.onstarrez.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.paysafe.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.pubnative.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.qualpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.scalepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.spotme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sproutlingcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sprucehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.starrezcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.teckst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.tis.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.trackops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.watermelon.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.westpac.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.wickr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.woodpecker.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017d0fd115390000040300483046022100b8729ae4fd7d0b19ba4ebe6af5bc4d4f0e91a7a088e055c21bee2be71dff7b69022100efef80c3746ca5b38e6a4a889477f9d7680e1bb8793ff50b4b84939cbc36aca6007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017d0fd1173b0000040300483046022100dfa35304a33de0769cbeb3b0de0bcea3f8e32fc3f54edd1b37cd3c9eeef27bfd022100e4a6c4320e2c078863f16e519d9f578f284092f21269278c59fcbe0f9abf0ec0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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