roadie.apps.aegpresents.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a4:60:84:77:13:a9:10:3b:2a:d9:40:12:8d:82:77:ea:d1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=roadie.apps.aegpresents.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a4:60:84:77:13:a9:10:3b:2a:d9:40:12:8d:82:77:ea:d1
Serial Number (int): 404383745588019973626737529420033123936977
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 49:c1:77:d9:2a:ab:98:5c:0a:f7:de:0e:17:48:88:5f:46:f5:bb:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ee:31:36:95:43:06:95:3a:af:4f:4f:e8:e5:54:1f:4a:99:8e:b1:e5
Fingerprint (sha256): 0a:3f:ed:93:bc:8a:03:fb:d8:0b:7a:62:c9:c2:03:d8:84:c1:92:82:57:f2:3a:39:b7:6c:d1:c8:ed:19:77:a6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate roadie.apps.aegpresents.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roadie.apps.aegpresents.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeg-wt01-prod.trafficmanager.net
roadie.apps.aegpresents.com

Other certificates including the domain name aegpresents.com

(limited to 100 certificates)
khalid.asia.aegpresents.com
sa514gl.wpc.edgecastcdn.net
aeg-ms20-prod.trafficmanager.net
cert00034-azurecdn.akamaized.net
aeg-ms20-prod.trafficmanager.net
mng-stg.michinoeki-saigai.jp
cert00034-azurecdn.akamaized.net
sa490gl.wpc.edgecastcdn.net
sa514gl.wpc.edgecastcdn.net
www.crmbits.com.br
sa514gl.wpc.edgecastcdn.net
vendors.stagecoachfestival.com
sa514gl.wpc.edgecastcdn.net
sa490gl.wpc.edgecastcdn.net
roadie.apps.aegpresents.com
aeg-xs06-prod.trafficmanager.net
akamai-san147.exacttarget.com
shawn.asia.aegpresents.com
aeg-xs02-prod.trafficmanager.net
www.crmbits.com.br
elvis-api-prd-lb.apps.aegpresents.com
sa490gl.wpc.edgecastcdn.net
lauv.asia.aegpresents.com
sa514gl.wpc.edgecastcdn.net
aeg-ms20-prod.trafficmanager.net
www.janithsamee.me
sniad2bgl.wpc.edgecastcdn.net
roadie-staging.apps.aegpresents.com
aeg-wt11-prod.trafficmanager.net
sa514gl.wpc.edgecastcdn.net
cert00034-azurecdn.akamaized.net
sa514gl.wpc.edgecastcdn.net
southatlantic.aegpresents.com
aeg-ms19-prod.trafficmanager.net
sa490gl.wpc.edgecastcdn.net
martbhiadmin.estore.business
aeg-xs02-prod.trafficmanager.net
cms.media.aegpresents.com
sniad2bgl.wpc.edgecastcdn.net
giveaways.apps.aegpresents.com
sa514gl.wpc.edgecastcdn.net
sa514gl.wpc.edgecastcdn.net
bowerypresents.com
aeg-wt11.us-west1.gce.aegp.cloud
elvisqa.aegpresents.com
app.keeperhr.com
altjandptm.com
roadie.apps.aegpresents.com
roadie-staging.apps.aegpresents.com
sa514gl.wpc.edgecastcdn.net
partnerships.aegpresents.com
atlanta.resetconcertseries.com
sa490gl.wpc.edgecastcdn.net
b.aegpresents.com
vendors.stagecoachfestival.com
nashville.aegpresents.com
cert00034-azurecdn.akamaized.net
cert00034-azurecdn.akamaized.net
amex.aegpresents.com
altjandptm.com
farewellyellowbrickroad.aegpresents.com
elvisqa.aegpresents.com
aeg-ms19-prod.trafficmanager.net
roadie.apps.aegpresents.com
drumssiddharth.com
sa514gl.wpc.edgecastcdn.net
click.events.aegpresents.com
elvis-api-prd-lb.apps.aegpresents.com
sa514gl.wpc.edgecastcdn.net
sa490gl.wpc.edgecastcdn.net
aeg-xs06-prod.trafficmanager.net
altjandptm.com
snib67cgl.wpc.edgecastcdn.net
sa490gl.wpc.edgecastcdn.net
giveaways.apps.aegpresents.com
aeg-xs02-prod.trafficmanager.net
nashville.aegpresents.com
shawn.asia.aegpresents.com
akamai-san147.exacttarget.com
roadie.apps.aegpresents.com
cms.media.aegpresents.com
shawn.asia.aegpresents.com
mi.aegpresents.com
sa490gl.wpc.edgecastcdn.net
staging.aegpresents.com
shawn.asia.aegpresents.com
aeg-ms20-prod.trafficmanager.net
sa514gl.wpc.edgecastcdn.net
vendors.stagecoachfestival.com
staging.aegpresents.com
sa514gl.wpc.edgecastcdn.net
altjandptm.com
www.bacod.xyz
sa490gl.wpc.edgecastcdn.net
farewellyellowbrickroad.aegpresents.com
sa490gl.wpc.edgecastcdn.net
roadie-staging.apps.aegpresents.com
partnerships.aegpresents.com
celineevent.aegpresents.com
sa514gl.wpc.edgecastcdn.net

Certificate

The complete raw certificate details for roadie.apps.aegpresents.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGkTCCBXmgAwIBAgISBKRghHcTqRA7KtlAEo2Cd+rRMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MDkyMjEwNDdaFw0x
OTEyMDgyMjEwNDdaMCYxJDAiBgNVBAMTG3JvYWRpZS5hcHBzLmFlZ3ByZXNlbnRz
LmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANVCuMooIFj1wSJU
YVlN7bqhgRA/q/VsgxjAVlm7Eq0NXiQVVZWCXj1jiO8mEd19v1uz0X8BG8upgaS2
oq+T7djyLM6AgLCktejpnz9AZnYp9r2YAOGEbXr3vIdFIcajwVp+uMRaQAMxKixf
NdEQ405YiYXClSHn2GwZNiYxnkp8TtooedNxZPd6Tq5kBM+mfZVaMcx/Kk2u3vfn
kgHm8Iovior2Da/nDiIXZpFSdQFnlgyG23Edt7JALIortr6GFjNqbaTl9Yf8ltcn
5hh61GZasWFB2O9EyEVCneevbnfCrKukAV56hG3Ki3NlEdUGBsSFccIqJ3X83h4Z
xNwN9CLrsRZ+m73Da044AiZfzpv2857sp8Kzp7sruAj4x2pS/BmyCb3apFU7jslX
iOCVGmfM/PZoGMcZl0lQF0gFjPDLGlN92nDcj7bI+2dhohpQ+vqh5klssrEHP2bg
IdxgfYFnidDxCxzsJc7X9FXMOA4IzHHU3iuMMd/gIxmeWC+dESCPcQeBAKIDeq/H
p8NiqTOvPRqktFK12leiuo9t4VWfUoOsDScpgJBngmlfSs+hFbESP+LT2gcBthHN
qd0GfCPKTUYgWFYBrHY5WkXItgAQbdeji1Jaj5IULD4YrT4YJtp8ktoZD3ZSgF8f
x1ODBEOOZxYQMX5PUjB35rh9hTp7AgMBAAGjggKTMIICjzAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFEnBd9kqq5hcCvfeDhdIiF9G9buAMB8GA1UdIwQYMBaAFKhKamME
fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0
cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0
cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wSAYDVR0RBEEwP4IgYWVn
LXd0MDEtcHJvZC50cmFmZmljbWFuYWdlci5uZXSCG3JvYWRpZS5hcHBzLmFlZ3By
ZXNlbnRzLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisG
AQQB1nkCBAIEgfYEgfMA8QB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgia
N9kTAAABbRhLPe4AAAQDAEgwRgIhANKQSYud1lB7fUJSjA3dSLowGpN49tyzLwAU
uMZOpN5qAiEAgaJpNBV0es59CSNoDu3FOgdK9lfN1vQeFcMw7hqKQB8AdgApPFGW
VMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW0YSz3JAAAEAwBHMEUCIHoj
W0I+Kw5qUV9b9lPsThcJ85xoqVrSwuQCyY5PTZwLAiEA0JOoyH0HMwUcdsPVd0aG
i0MTlWp6USTJxBrWc/98ntcwDQYJKoZIhvcNAQELBQADggEBAJTMvAijZoKilhFH
Jw+/qS1yLmWLrnja8Vlt7950dLFSPHh2lc1dC74SNUK7zz2FM/ZLeM6lijwpfsrf
SxEZYdnydHo0yF+OkznceZCqWn7TAEJbXnjGqw6wwpGs6yCPEERhY6lYQvcem4M/
XK/a3Ed2gdWaASYWc+QmMrS40JulPtdeEIMevTyKsyjEpcledzcs2vxg2TMHRSKu
5OacytCkr2cAXGLs6ybCtFBf+hXIvLyMfa+/H/ieMmhNliPaeB3HLrS0rdYQoKvU
J26KlNK9Qnx6EDwzf/K8Fcqlz8J01OtoUxpYFzX77JqznMERRjuXbqwf5K6UktME
GQptGso=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404383745588019973626737529420033123936977
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 22:10:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 22:10:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roadie.apps.aegpresents.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 870027472960970977947891715384213912170665683263993697349133959246642719107127643367868895437546912317233001658968124316532086352913129248917401248156585855079354496687111518550814460216872778583656390545270220598711623050992548686968712773366726562214964887583967916929989105411097693601278937776691725351834361450069522990410518926608938370437095216431922426364498288616322131308928091151669365962325979784389000444742560690623546769526775612360110339223538363285147032245627391654603445727171277736132050103646636949431510714971440395041312005629423235028232409286780586462730729262880499502899420437216016703309335302233467733674041647956955224354468953249976828263972931025763775074298773577771621333654853122032106278324136184933553407214997515362260095128635789153199345103005196428714263591926785709912191020460465314157592274629241158273450166399086039063850872751440496829446016916399403131380579039463196726957154140811302366111729969581712190230635016418765597765478618295463041821498797577725654402007935597432412791486138409555065060817915979060756020848470050386628903235040986130705071841994893320876967462151673175782044766120795003959259535622942907895863780789733319343835024259123974183356979951893115050475731579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49c177d92aab985c0af7de0e1748885f46f5bb80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt01-prod.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadie.apps.aegpresents.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d184b3dee0000040300483046022100d290498b9dd6507b7d42528c0ddd48ba301a9378f6dcb32f0014b8c64ea4de6a02210081a2693415747ace7d0923680eedc53a074af657cdd6f41e15c330ee1a8a401f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d184b3dc9000004030047304502207a235b423e2b0e6a515f5bf653ec4e1709f39c68a95ad2c2e402c98e4f4d9c0b022100d093a8c87d0733051c76c3d57746868b4313956a7a5124c9c41ad673ff7c9ed7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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