www.deq.nc.gov

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:44:6f:7a:14:13:cc:ae:dc:fd:36:3c:89:11:cf:4b:7a:83 was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.deq.nc.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:44:6f:7a:14:13:cc:ae:dc:fd:36:3c:89:11:cf:4b:7a:83
Serial Number (int): 371736522852630542512360233483709484595843
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 97:38:25:db:e8:ff:7e:0d:79:08:93:fa:3c:c4:d2:bf:45:77:10:ba
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:23:20:ff:96:82:84:0e:bc:96:12:c8:fc:98:3e:d7:6b:cc:4b:03
Fingerprint (sha256): 0a:f2:fd:93:34:88:3e:1d:5f:cc:35:23:b5:26:3c:1e:b7:18:b7:e6:9f:c8:72:6a:5d:f0:cb:ae:36:9f:ee:d3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.deq.nc.gov

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.deq.nc.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

algae.nc.gov
enr.its.state.nc.us
enr.state.nc.us
geology.enr.state.nc.us
ifs.nc.gov
ncbrownfields.org
nccoastalmanagement.net
ncenvironmentalassistance.org
ncesi.org
ncgreentravel.com
ncgreentravel.org
ncsctf.org
ncwaterquality.org
partnership4recycling.org
recyclenc.net
recyclenc.org
tankschool.deq.nc.gov
tankschool.nc.gov
tankschool.ncdenr.gov
wastenotnc.org
watersupplywatershed.nc.gov
www.algae.nc.gov
www.deq.nc.gov
www.enr.state.nc.us
www.geology.enr.state.nc.us
www.ifs.nc.gov
www.ncbrownfields.org
www.nccoastalmanagement.net
www.ncenvironmentalassistance.org
www.ncesi.org
www.ncgreentravel.com
www.ncgreentravel.org
www.ncsctf.org
www.ncwaterquality.org
www.partnership4recycling.org
www.recyclenc.net
www.recyclenc.org
www.wastenotnc.org
www.watersupplywatershed.nc.gov

Other certificates including the domain name nc.gov

(limited to 100 certificates)
ncidp.nc.gov
dev.phonepurchase.nc.gov
tts-eu.inrix.com
edm.nc.gov
ssl1.revizesites.com
www.vitalrecords.nc.gov
www.auditor.nc.gov
ncgs.nc.gov
govadmin.nc.gov
qa.ibis.nc.gov
ncchildcareadmin.nc.gov
slot-gopay.digitalcommons.nc.gov
tax.des.nc.gov
firstnet.nc.gov
files.nc.gov
mybeacon.nc.gov
opendurham.nc.gov
imap.mail.nc.gov
test.epass.nc.gov
des.cara.nc.gov
ncfastcwsinquiry.nc.gov
flu.nc.gov
www.ltgov.nc.gov
svn.ic.nc.gov
labor.nc.gov
dor-ssl-2.dor.nc.gov
IRISK.NC.GOV
dor-2119-int-fw.nc.gov
dirweb.nc.gov
apps.ncagr.gov
wastetrader.deq.nc.gov
other-redirects-002.dc.nc.gov
ncfastvirusscan.nc.gov
dcdee.works.nc.gov
ccms-train.ic.nc.gov
ccms-test.ic.nc.gov
ncfast.nc.gov
WB03.QA.NC.GOV
oah.nc.gov
idppre.nc.gov
VC-EXP-E1.ncdps.gov
ibis.nc.gov
ssl1.revizesites.com
cmepprovidermap.dhhs.nc.gov
ssl1.revizesites.com
redirect.nc.gov
immunize.nc.gov
publichealth.nc.gov
des.qa.edm.nc.gov
uet002.ncfast.nc.gov
www.it.nc.gov
rlnciddl.nc.gov
admin.nccat.nc.gov
ivms.userpref.sip.nc.gov
qpi.ebs.nc.gov
ncfasttraining.nc.gov
providerportal.nc.gov
ncfastdmscnpp.nc.gov
files.nc.gov
ncidws.nc.gov
bi.nc.gov
www.b3council.nc.gov
Qa.phoneRepair.nc.gov
files.nc.gov
www.dcdee.moodle.nc.gov
swucintf.doa.nc.gov
ncgs.nc.gov
www.djjdp.org
ncchildcare.nc.gov
www.vitalrecords.nc.gov
qa.cjleads.nc.gov
fw2vpn.dor.nc.gov
ncidp.nc.gov
ncfastebcc.nc.gov
ncguardview.nc.gov
www.sos.nc.gov
cas35.mail.nc.gov
economicbenefits.nc.gov
www.it.nc.gov
mybeacon.nc.gov
legacy.ibis.nc.gov
touchdown.nc.gov
hiea.nc.gov
redirect.nc.gov
sni.cloudflaressl.com
ncidws.nc.gov
fris.nc.gov
ncidsspr.nc.gov
ncc870.its.state.nc.us
files.nc.gov
www.vras.nc.gov
ccms-test.ic.nc.gov
ncfastapp08.nc.gov
mybeacon.nc.gov
qa.ibis.nc.gov
svn.ic.nc.gov
devt.vts.nc.gov
Qa.phonepurchase.nc.gov
ncdcr.gov
RMP.NC.GOV

Certificate

The complete raw certificate details for www.deq.nc.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DmMvW7xnPnM9KbuVY9B
2lIymzGLMmsDHiFbK1num6r/j7h5TicPBmCq2+pGhP4BR7mH02FbGmiWkiFAbXv9
lWnyXVDHl64dWl69oHwuB63IeJsQA+6QqQ4YdYZ0s//M4kAMpbFuKvidWHb2GEjO
tf03wXFNxKstIJRSmIk+9N+vMNSl64st2l+HPeCxWN79iLckaqNglKk5ubUMtjL4
pjG6pGE52PJABY7QodS+StTQaMcw/CtpyaZ+VgxAul1nVIbVoKX0xPjvXrOZMoTC
R40VYi0FtN/7gWAKH1kowCnOB2hubrUzGN8FW1JsWIx09D76Rox8zzezBvNjP7vS
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371736522852630542512360233483709484595843
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-02 01:36:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 01:36:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.deq.nc.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28810712379335315445495558452168087776635932599966318461144046394671750524253693564643157466704740095351914662335076102807083391568933833346225701684815518651030457043688992758546405827205675304887955446561108118175888716749147986348969666505837854787608929142457593849459476919568200928791158403755043037913424208465763867000649277458856326058099097682222071021012629598401343553174012218023690962935180709645680315977322503506570422669616707292326839675867107028810848575991210903354421329477447534818205380498007385158139402339754564123276297396932440636531055611200433399796739767132775375898042948135723080602177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							973825dbe8ff7e0d790893fa3cc4d2bf457710ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (826 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algae.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enr.its.state.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enr.state.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geology.enr.state.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifs.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncbrownfields.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nccoastalmanagement.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncenvironmentalassistance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncesi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncgreentravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncgreentravel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncsctf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncwaterquality.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnership4recycling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recyclenc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recyclenc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tankschool.deq.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tankschool.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tankschool.ncdenr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wastenotnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watersupplywatershed.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.algae.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deq.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enr.state.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geology.enr.state.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifs.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncbrownfields.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nccoastalmanagement.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncenvironmentalassistance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncesi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncgreentravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncgreentravel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncsctf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncwaterquality.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partnership4recycling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recyclenc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recyclenc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wastenotnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watersupplywatershed.nc.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bb08aa02c0000040300473045022054fbc4aa07e9c6566ca5dff1cfeb20d5c3aee2e9f9ef60dbe8d14c87dbd09e9e022100bf966fc7c82751fd2278fedfeb2641a7d9396a7eb468127f4e82037e0d59dada00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bb08aa01d000004030046304402204f8c01d0c0acc28721e0ecf4cca7c74d9d38e5d553ba3dc7f188a009b833295e0220227275cb4b1d8dfd7ab8128ac84ce368a4236646490ef5640647f0a774e09597
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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