2017fukienbasketball.wellmansports.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:99:b7:01:ef:78:1e:1b:1e:16:72:b1:b5:be:b7:44:81:53 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=2017fukienbasketball.wellmansports.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:99:b7:01:ef:78:1e:1b:1e:16:72:b1:b5:be:b7:44:81:53
Serial Number (int): 313643318706722415097174847891186838176083
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:03:5e:45:29:ce:57:83:98:4d:54:84:f4:5c:91:72:36:64:72:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:1a:9c:ad:1d:8d:31:b2:a6:c8:f3:80:42:80:c6:42:69:6d:17:6d
Fingerprint (sha256): 09:1e:84:20:ff:0c:b5:37:8f:53:1d:f6:73:c6:ad:64:b7:36:f8:09:64:c2:1a:9d:32:1e:b3:45:dc:3f:86:35

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 2017fukienbasketball.wellmansports.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 2017fukienbasketball.wellmansports.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2017fukienbasketball.wellmansports.org
www.2017fukienbasketball.wellmansports.org

Other certificates including the domain name wellmansports.org

(limited to 100 certificates)
www.2017-hoopbattle-3on3.wellmansports.org
wellman3on3riviera.wellmansports.org
hkbacup-day6.wellmansports.org
www.wellmanxhkaal2016624.wellmansports.org
2018hkbacup-day4.wellmansports.org
2017-dab-3on3.wellmansports.org
www.2017-dab-3on3.wellmansports.org
2018hkbacup-day6.wellmansports.org
onbongmuiwo.wellmansports.org
www.2017fukienbasketball.wellmansports.org
www.wellman3on3riviera.wellmansports.org
2017-hoopbattle-3on3.wellmansports.org
stpaul-chairmans-1.wellmansports.org
2018hkbacupfinalg2.wellmansports.org
www.2017-hoopbattle-3on3.wellmansports.org
www.onbongmuiwo.wellmansports.org
hkbacup-day2.wellmansports.org
2018hkbacup-day6.wellmansports.org
hkbacup-day2.wellmansports.org
2018lion3on3.wellmansports.org
2018hkbacupsemifinal.wellmansports.org
hkbacup-day3.wellmansports.org
2018hkbacup-day4.wellmansports.org
2018hkbacupsemifinal.wellmansports.org
2018hkbacup-day1.wellmansports.org
2017nte3on3-final.wellmansports.org
hkbacup-day3.wellmansports.org
2018hkbacup-day6.wellmansports.org
2017fukienbasketball.wellmansports.org
2018hkbacup-finalg1.wellmansports.org
2018hkbacup-day6.wellmansports.org
stpaul-chairmans-1.wellmansports.org
wellman3on3riviera.wellmansports.org
2017-dab-3on3.wellmansports.org
2017nte3on3-final.wellmansports.org
www.2017-dab-3on3.wellmansports.org
2018hkbacup-day1.wellmansports.org
2017fukienbasketball.wellmansports.org
2017nte3on3-final.wellmansports.org
2018hkbacup-day4.wellmansports.org
2017-hoopbattle-3on3.wellmansports.org
wellman3on3riviera.wellmansports.org
hkbacup-day6.wellmansports.org
2018hkbacup-finalg1.wellmansports.org
hkbacup-day6.wellmansports.org
2017-dab-3on3.wellmansports.org
2018hkbacup-day1.wellmansports.org
onbongmuiwo.wellmansports.org
2017-dab-3on3.wellmansports.org
2017fukienbasketball.wellmansports.org
2017-hoopbattle-3on3.wellmansports.org
2017-hoopbattle-3on3.wellmansports.org
2017-hoopbattle-3on3.wellmansports.org
nte3on3-day3.wellmansports.org
2018hkbacupfinalg2.wellmansports.org
onbongmuiwo.wellmansports.org
2018hkbacupfinalg2.wellmansports.org
onbongmuiwo.wellmansports.org
hkbacup-day2.wellmansports.org
2018hkbacup-day6.wellmansports.org
2018hkbacup-day5.wellmansports.org
2017nte3on3-final.wellmansports.org
2017-dab-3on3.wellmansports.org
2018hkbacupsemifinal.wellmansports.org
hkbacup-day2.wellmansports.org
stpaul-chairmans-1.wellmansports.org
stpaul-chairmans-1.wellmansports.org
2018hkbacup-day6.wellmansports.org
onbongmuiwo.wellmansports.org
wellmansports.org
2018hkbacup-finalg1.wellmansports.org
2017-dab-3on3.wellmansports.org
2017-dab-3on3.wellmansports.org
2018hkbacupfinalg2.wellmansports.org
2017fukienbasketball.wellmansports.org
2017-dab-3on3.wellmansports.org
2018hkbacup-day1.wellmansports.org
wellman3on3riviera.wellmansports.org
hkbacup-day3.wellmansports.org
wellman3on3riviera.wellmansports.org
hkbacup-day3.wellmansports.org
hkbacup-day6.wellmansports.org
www.wellmansports.org
onbongmuiwo.wellmansports.org
2018hkbacup-finalg1.wellmansports.org
hkbacup-day3.wellmansports.org
www.sportsprogramq4.wellmansports.org
hkbacup-day3.wellmansports.org
2018hkbacup-day4.wellmansports.org
hkbacup-day3.wellmansports.org
2017-dab-3on3.wellmansports.org
2018hkbacup-day6.wellmansports.org
www.2017-dab-3on3.wellmansports.org
2017fukienbasketball.wellmansports.org
www.2017fukienbasketball.wellmansports.org
www.stpaul-chairmans-1.wellmansports.org
onbongmuiwo.wellmansports.org
2018hkbacup-finalg1.wellmansports.org
2017-dab-3on3.wellmansports.org
2017-hoopbattle-3on3.wellmansports.org

Certificate

The complete raw certificate details for 2017fukienbasketball.wellmansports.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISA5m3Ae94HhseFnKxtb63RIFTMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjYyMDQwMDZaFw0x
OTEwMjQyMDQwMDZaMDExLzAtBgNVBAMTJjIwMTdmdWtpZW5iYXNrZXRiYWxsLndl
bGxtYW5zcG9ydHMub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
ksugv7b37XG6qpMqDdTBOhsIctX4IcHIlB2qWoluselVlr+oOuwatWjs650axZi5
1NEsNgRUC8pN2J02Z9dZTQOWIiAlwv+vd2fO6X7vwoKnrVsWnaKeU9Pkqd70CMsq
NHzu1OwIDeGhpLYSqSsYjZoaiI0YM2RJxt2hPoFmaYH354Ua4c0xBzEqJ8FZkYxC
ud9xnpey1X91wjHHryqsAsi7GCHaQjXfc4D4smnKJJsPhfjUA1C9Sy8gNUr2NmrZ
EIaDLtudjwW33y2aF8W85iddnBRqQ6gl85ND/s1yjoiEyN7DR6mfEd5gllsJb8LZ
jbdA8px62yiEU/GUGVTICQIDAQABo4ICpjCCAqIwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBRiA15FKc5Xg5hNVIT0XJFyNmRyNDAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j
ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMF0GA1UdEQRWMFSCJjIwMTdmdWtp
ZW5iYXNrZXRiYWxsLndlbGxtYW5zcG9ydHMub3Jngip3d3cuMjAxN2Z1a2llbmJh
c2tldGJhbGwud2VsbG1hbnNwb3J0cy5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEw
NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgB0ftqDMa0zEJEhnM4l
T0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWwwOg8OAAAEAwBHMEUCIQCVe9Jd9j3dTVOw
ygpUKZZBiNDsKXxVaraI3KNdiogiMAIgRUfttSbI436At/VAG4V0szZ8uJ7qI5Vk
SyRaMKT2/iAAdQBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWww
Og05AAAEAwBGMEQCIDtspVlCqqmULJNSlMQVP+t1xuuzzYy9wbz6dzTFY5NRAiA1
yN7pxFSdJwNoicV19Dd4AJHHC99llxwpaGEydPJT+TANBgkqhkiG9w0BAQsFAAOC
AQEASvIc6lQ/W01FsmIDQcdbPJvjmIh97iNVRe0uYOZ3aQBh2YRHm2Md4Rz7PVKt
jck8qrTOqyGI21inl3sUlvdVpmBd2u136JVIQp1huSc5xy+wkKBjlN91zHS7ou3Z
tbtA6RFt87KqcjmeGjnnYkvgayyhUcyk2Tb8n+AvmzFYVbH32dVIRejOCniABNWO
4Jq/YvfnEey6GdiOCFLrdncQunmsQ5g5kLVjK8LsA/VZ/yj8dgWwDIkvWTMaxVs0
0V1uKPiP/qFwN9TLu/r2AE3FdoF6/CQyv8+e2ki7jO4cI2yYrqNjOxYf/mMgDIeU
aLRd6Tq8aj5y7GnznmqudSeEbA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksugv7b37XG6qpMqDdTB
OhsIctX4IcHIlB2qWoluselVlr+oOuwatWjs650axZi51NEsNgRUC8pN2J02Z9dZ
TQOWIiAlwv+vd2fO6X7vwoKnrVsWnaKeU9Pkqd70CMsqNHzu1OwIDeGhpLYSqSsY
jZoaiI0YM2RJxt2hPoFmaYH354Ua4c0xBzEqJ8FZkYxCud9xnpey1X91wjHHryqs
Asi7GCHaQjXfc4D4smnKJJsPhfjUA1C9Sy8gNUr2NmrZEIaDLtudjwW33y2aF8W8
5iddnBRqQ6gl85ND/s1yjoiEyN7DR6mfEd5gllsJb8LZjbdA8px62yiEU/GUGVTI
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313643318706722415097174847891186838176083
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 20:40:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 20:40:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2017fukienbasketball.wellmansports.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18531205197458543534426019988400363304791117430561197847095893009838217787211021919054549495303882236347070793176985683409509390110318227579686605096342639973872590642323335205296592430130568028366357837374346006870360197804320491337457467182853847218843499703929548826098394061938582718471010391114447610361202774829063508937238797795492765554261323363179704287123885857569377577006001160207725962288598859229771753804966355904358531007468841026934206293662349443423392488384489136997876027311586438487642624795487664922408617440886974059817114910362192331837461418264085241504933500343999434406755675350494468163593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62035e4529ce5783984d5484f45c917236647234
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2017fukienbasketball.wellmansports.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2017fukienbasketball.wellmansports.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c303a0f0e0000040300473045022100957bd25df63ddd4d53b0ca0a5429964188d0ec297c556ab688dca35d8a88223002204547edb526c8e37e80b7f5401b8574b3367cb89eea2395644b245a30a4f6fe2000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c303a0d39000004030046304402203b6ca55942aaa9942c935294c4153feb75c6ebb3cd8cbdc1bcfa7734c5639351022035c8dee9c4549d27036889c575f437780091c70bdf65971c2968613274f253f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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