blogi.keuda.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:37:c3:0c:dd:d9:42:0d:d1:14:9a:ae:c8:93:ad:be:44:67 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blogi.keuda.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:37:c3:0c:dd:d9:42:0d:d1:14:9a:ae:c8:93:ad:be:44:67
Serial Number (int): 280311654242298192830158151241806963950695
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:f9:0e:f5:6c:ea:b0:d1:e9:05:44:da:87:ce:d7:1e:49:5e:18:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:b4:ea:1d:08:99:16:ed:52:22:c3:f4:89:a7:20:03:7c:dc:25:21
Fingerprint (sha256): 09:47:ee:cd:a7:97:a3:73:87:ba:36:88:2b:b9:f4:8f:c4:93:52:9b:2f:23:6c:0a:30:3e:1e:e3:05:a9:f8:1f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate blogi.keuda.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blogi.keuda.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blogi.keuda.fi

Other certificates including the domain name keuda.fi

(limited to 100 certificates)
blogi.keuda.fi
opiskelija.keuda.fi
yrityksille.keuda.fi
blogi.keuda.fi
ky-fed.keuda.fi
opiskelija.keuda.fi
webmail.keuda.fi
keuda-sr.keuda.fi
keuda.fi
pinja.keuda.fi
winha.keuda.fi
dynasty.keuda.fi
ky-fed.keuda.fi
opiskelija.keuda.fi
opiskelija.keuda.fi
webmail.keuda.fi
yrityksille.keuda.fi
yrityksille.keuda.fi
keuda.fi
dynasty.keuda.fi
opiskelija.keuda.fi
oppisopimus.keuda.fi
opiskelijaintra.keuda.fi
opiskelijaintra.keuda.fi
wiki.keuda.fi
keuda-adhk.keuda.fi
keuda.fi
opiskelija.keuda.fi
ims.keuda.fi
opiskelijakeuda.focusflow.net
wiki.keuda.fi
yrityksillekeuda.focusflow.net
blogi.keuda.fi
opiskelijaintra.keuda.fi
yrityksille.keuda.fi
yrityksille.keuda.fi
keuda.fi
web.keuda.fi
opiskelija.keuda.fi
yrityksillekeuda.focusflow.net
yrityksille.keuda.fi
winha.keuda.fi
ims.keuda.fi
oppisopimus.keuda.fi
ims.keuda.fi
mfiles.keuda.fi
ky-fed.keuda.fi
www.keuda.fi
opiskelija.keuda.fi
ky-fed.keuda.fi
dynastyweb.keuda.fi
winha.keuda.fi
keuda.fi
yrityksille.keuda.fi
keuda.fi
opiskelija.keuda.fi
opiskelija.keuda.fi
blogi.keuda.fi
blogi.keuda.fi
keuda-dw.keuda.fi
verkkokauppa.keuda.fi
oppisopimus.keuda.fi
verkkokauppa.keuda.fi
wiki.keuda.fi
blogi.keuda.fi
web.keuda.fi
blogi.keuda.fi
dynasty.keuda.fi
yrityksille.keuda.fi
yrityksille.keuda.fi
blogi.keuda.fi
sts.keuda.fi
oppisopimus.keuda.fi
oppisopimus.keuda.fi
yrityksille.keuda.fi
opiskelija.keuda.fi
opiskelijaintra.keuda.fi
yrityksille.keuda.fi
dynastyweb.keuda.fi
keuda.fi
yrityksille.keuda.fi
mfiles.keuda.fi
www.keuda.fi
opiskelija.keuda.fi
opiskelija.keuda.fi
opiskelijakeuda.focusflow.net
winha.keuda.fi
ky-fed.keuda.fi
ims.keuda.fi
ky-fed.keuda.fi
mfiles.keuda.fi
ky-fed.keuda.fi
web.keuda.fi
oppisopimus.keuda.fi
web.keuda.fi
web.keuda.fi
verkkokauppa.keuda.fi
intra.keuda.fi
yrityksille.keuda.fi

Certificate

The complete raw certificate details for blogi.keuda.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgISAzfDDN3ZQg3RFJquyJOtvkRnMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTEwNjM5MDBaFw0y
MDAyMDkwNjM5MDBaMBkxFzAVBgNVBAMTDmJsb2dpLmtldWRhLmZpMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApGmfrdT5jnDNvWm+jpaI/XJjWWLLmPBt
11o+KJApYsN0sqHhecICufMgMSOUiDnFYKO50d2Bu5N5N7ACGkLXVNi/u2M/pTBB
W+d5mXpjH3h+sV4EdSKaFDQz5LR7leNXl1SCGZH2XK73Y1Wmb77u+K5wj7i5Z/9X
RpkyoKZ68/EHv26erjB88I76my2RlQzYyhxPsTXDMqj3U1cAYK6TUx567FHDbka2
S+m1X+LEfjRw6Znkyc8MlkQCjD+Iz4c4ZNpNv+PDmly9UdX+oXlBffJAte9ISnpv
Nc0hBDghi04r6LGrNzuTxzruNWY+XH2PYHH5pGUvMwFVnNzmiro+8+RSYmIb7qYb
T/YYSA0rDz3Qa1OrrsZ8P6OmrX/qNH32LC5BS8EIw0COZeH7Z6C3j2cgChfkzXAE
iyagCNyYFdNhh68uuRWsXrPb9RB6b/Upbv6l1JgbxjeD3JPkTBKxSwz8oynYlNG5
vK2hsJQLuGB1U6IBIjfaWabzaRjPEbyqvm84/JmqSjwiW7pusrAoKx1CHCRANIEQ
CywUt6ZuVtEQ7ShbbUgTxouWXDXM6mSZPWOJzgCsvEcGVEVvioCSHlb2RJpT581K
i7HzPs/hg04Ds44cF20qrbzWl+60ww5C/boxYzSiTpL3xPAvm3pFiz0Xig3ShK6W
+0pCFUrSG98CAwEAAaOCAmIwggJeMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU+vkO
9WzqsNHpBUTah87XHkleGLMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5ibG9naS5rZXVkYS5maTBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQE
gfEA7wB1AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABbllmz8MA
AAQDAEYwRAIgD5k9Gb8u9Euab817Mlpv5LpyhqdTZrIjmR0RBHe8ddcCIG1KiSuX
XMC+DEJnICyN4iT6jk5NKnapDP4dFICrgRgyAHYAb1N2rDHwMRnYmQCkURX/dxUc
EdkCwQApBo2yCJo32RMAAAFuWWbP2AAABAMARzBFAiBp9WFnJjdy/aTJZBElUCGT
6Fa0S75GBorRg1xUob5B8gIhANbJ5uAvHpmKWWYxYRi3QmvqcTDIyAsPB0d+SLQk
pPS9MA0GCSqGSIb3DQEBCwUAA4IBAQAaUvoVLm0B3yWN8UAplNsHRtwVgaQpp2hm
gypO7xQk/SzYC52sFw+xKxuNydaWwteeHG1TaHpSLTjPVrwThHMKqUpV4z3DfhXd
AVrhBNSAaPMlWomjCrOc07gb2B4K4FZmJR4xwIVixuW1oi3tQWW4Nh9hi1HIoHoJ
mauhr9zfk46ZruPWqU0M2s3Ch76daOAC9Dtu0vlfnHVX5IGmb5pQkCX2hpPtLVxc
TggJ7C+9Qq0WTRS8hLJyFcMFzxcgtV4ma1YXCBgTR6QVO8lbibuYOecU4yuK5UKI
b0cBCnzHk9mc1tdcrdrnwISLBOYW4d9uH/dWJRPwRe1eB2uE+gZk
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApGmfrdT5jnDNvWm+jpaI
/XJjWWLLmPBt11o+KJApYsN0sqHhecICufMgMSOUiDnFYKO50d2Bu5N5N7ACGkLX
VNi/u2M/pTBBW+d5mXpjH3h+sV4EdSKaFDQz5LR7leNXl1SCGZH2XK73Y1Wmb77u
+K5wj7i5Z/9XRpkyoKZ68/EHv26erjB88I76my2RlQzYyhxPsTXDMqj3U1cAYK6T
Ux567FHDbka2S+m1X+LEfjRw6Znkyc8MlkQCjD+Iz4c4ZNpNv+PDmly9UdX+oXlB
ffJAte9ISnpvNc0hBDghi04r6LGrNzuTxzruNWY+XH2PYHH5pGUvMwFVnNzmiro+
8+RSYmIb7qYbT/YYSA0rDz3Qa1OrrsZ8P6OmrX/qNH32LC5BS8EIw0COZeH7Z6C3
j2cgChfkzXAEiyagCNyYFdNhh68uuRWsXrPb9RB6b/Upbv6l1JgbxjeD3JPkTBKx
Swz8oynYlNG5vK2hsJQLuGB1U6IBIjfaWabzaRjPEbyqvm84/JmqSjwiW7pusrAo
Kx1CHCRANIEQCywUt6ZuVtEQ7ShbbUgTxouWXDXM6mSZPWOJzgCsvEcGVEVvioCS
Hlb2RJpT581Ki7HzPs/hg04Ds44cF20qrbzWl+60ww5C/boxYzSiTpL3xPAvm3pF
iz0Xig3ShK6W+0pCFUrSG98CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280311654242298192830158151241806963950695
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 06:39:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-09 06:39:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blogi.keuda.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 670744858755641681822981423410182646530760107116514011101825822393931565549529791631788953267266842307641140586926947708001602483212701108783779579551140637326099349909724991652056450113752534561625994191058718213890252985683766682215133888240660050418065689520678938727806750649684061546686842158266830008967823114056415916549714054749905943582501352645854780607165331831316519384026209084358343248330253900167499675538892516572943422554180486679338880696948828550177754852947646290847399304272396071969497197012718267382577382288970439343947109664829066099272352735200720294718546066958037974594178352409397658572047373718694037914512894904914209754853557899366960571124617157431726440220141041551749413707939983139385708877984435699470636393411264869544870199574428321793532672049625728122017980336832387868487014461129075413679989777585016359475117559159276437742161892057102986032095409781651118659208348131686407055132156031035771041766614086542034110526258299578346466096810448994661660781115977748056335787583537230266479717371328339105703239484145279794619436971701777624626969804326572541928897590028265101166017482973813705032171992002424870781118110273183685309034936355869711520281852307680952472401259063481169802828767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							faf90ef56ceab0d1e90544da87ced71e495e18b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogi.keuda.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e5966cfc3000004030046304402200f993d19bf2ef44b9a6fcd7b325a6fe4ba7286a75366b223991d110477bc75d702206d4a892b975cc0be0c4267202c8de224fa8e4e4d2a76a90cfe1d1480ab8118320076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e5966cfd80000040300473045022069f56167263772fda4c9641125502193e856b44bbe46068ad1835c54a1be41f2022100d6c9e6e02f1e998a5966316118b7426bea7130c8c80b0f07477e48b424a4f4bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001a52fa152e6d01df258df1402994db0746dc1581a429a76866832a4eef1424fd2cd80b9dac170fb12b1b8dc9d696c2d79e1c6d53687a522d38cf56bc1384730aa94a55e33dc37e15dd015ae104d48068f3255a89a30ab39cd3b81bd81e0ae05666251e31c08562c6e5b5a22ded4165b8361f618b51c8a07a0999aba1afdcdf938e99aee3d6a94d0cdacdc287be9d68e002f43b6ed2f95f9c7557e481a66f9a509025f68693ed2d5c5c4e0809ec2fbd42ad164d14bc84b27215c305cf1720b55e266b561708181347a4153bc95b89bb9839e714e32b8ae542886f47010a7cc793d99cd6d75caddae7c0848b04e616e1df6e1ff7562513f045ed5e076b84fa0664