player.impresa.pt

Issued by R3

About this certificate

This digital certificate with serial number 04:57:29:8e:a4:9d:3f:2a:c0:ee:82:29:c8:a1:46:5e:c7:b3 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=player.impresa.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:57:29:8e:a4:9d:3f:2a:c0:ee:82:29:c8:a1:46:5e:c7:b3
Serial Number (int): 378108948641917272159332184408744062273459
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 86:01:26:5e:31:17:b8:0d:b6:51:a8:6e:aa:8b:f6:a9:d2:86:e4:4f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 93:c9:37:86:73:ae:44:db:63:94:93:69:8a:08:ce:87:71:35:db:a4
Fingerprint (sha256): 10:db:c5:52:1b:2c:1f:96:f3:c5:f8:04:ab:c9:bb:f3:64:db:c9:73:df:da:c6:fa:23:0d:01:b4:18:ef:66:1a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate player.impresa.pt

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for player.impresa.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

player-zerozero.impresa.pt
player.blitz.pt
player.expresso.pt
player.famashow.pt
player.impresa.pt
player.omirante.pt
player.sic.pt
player.siccaras.pt
player.sickapa.pt
player.sicmulher.pt
player.sicnoticias.pt
player.sicradical.pt

Other certificates including the domain name impresa.pt

(limited to 100 certificates)
bola.impresa.pt
impresa.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
san-12-s51.tlsprovisioning.exacttarget.com
comercial.impresa.pt
*.aws.impresa.pt
www.impresa.pt
*.kube-worker.eu-west-1.impresa.pt
player.impresa.pt
drive.impresa.pt
ssl255780.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
*.ops.aws.impresa.pt
ssl255782.cloudflaressl.com
mkt.admatosinhos.pt
www.impresa.pt
sni.cloudflaressl.com
*.kube-worker.eu-west-1.impresa.pt
reclames.impresa.pt
impresa.pt
*.advnce.sic.pt
ssl453728.cloudflaressl.com
sso.remp.impresa.pt
*.advnce.sic.pt
*.app.bcbm.pt
images.impresa.pt
*.advnce.sic.pt
eu-west-1.impresa.pt
*.app.bcbm.pt
*.advnce.sic.pt
ocs-access.impresa.pt
www.impresa.pt
drive.impresa.pt
*.advnce.sic.pt
player.impresa.pt
postal.pt
*.expresso.pt
campanhas.cca.com.br
ssl255780.cloudflaressl.com
player.impresa.pt
impresa.pt
impresa.pt
*.advnce.sic.pt
*.aws.impresa.pt
sso.remp.aws.impresa.pt
*.advnce.sic.pt
ssl453730.cloudflaressl.com
*.impresa.pt
web2.aws.impresa.pt
backoffice.impresa.pt
*.advnce.sic.pt
postal.pt
www.impresa.pt
beam.remp.impresa.pt
statics.qas.impresa.pt
player.impresa.pt
*.advnce.sic.pt
crops.aws.impresa.pt
*.kube-worker.eu-west-1.impresa.pt
ssl255782.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
crops.aws.impresa.pt
*.advnce.sic.pt
cdn.impresa.pt
*.advnce.sic.pt
*.aws.impresa.pt
www.impresa.pt
impresa.pt
ssl453729.cloudflaressl.com
*.advnce.sic.pt
videos.impresa.pt
statics.impresa.pt
*.advnce.sic.pt
bola.impresa.pt
beam.remp.impresa.pt
newsletter.warepro.pt
www.impresa.pt
www.impresa.pt
ssl255782.cloudflaressl.com
comercial.impresa.pt
cdn.impresa.pt
sso.remp.impresa.pt
sdistribution.impresa.pt
reclames.impresa.pt
bl.impresa.pt
ssl453729.cloudflaressl.com
san-12-s51.tlsprovisioning.exacttarget.com
cdn.impresa.pt
*.advnce.sic.pt
*.impresa.pt
*.app.bcbm.pt
impresa.pt
*.kube-worker.eu-west-1.impresa.pt
comercial.impresa.pt
bola.impresa.pt
drive.impresa.pt

Certificate

The complete raw certificate details for player.impresa.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgISBFcpjqSdPyrA7oIpyKFGXsezMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTExMjMxMzE1MzNaFw0yMjAyMjExMzE1MzJaMBwxGjAYBgNVBAMT
EXBsYXllci5pbXByZXNhLnB0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu9qYLx32wCLlf0U7YUzUW/1JR+C6C+6eQRU/xcpR/bZmM26XJkAENIH+quSL
DGUyUdafJc4ILGlg21I+g/xQzrsadG/hmidIPJpGTtHypdieQH03Z6+1E8m+QAfe
zXnYvR6p/huUtmpvAGyWJhYN+H0g5aVJmuN3wQQ2PB/lzKtbYXS2Lmxn0Wiba3RV
vU2mynesAOK+NoLAxykVwzuRNnMBSaAzA4x32Ow5jtYomKFjD04QACTCDxVNKnLy
Ef/34fJ8YOVvQo/5zOlanbO91kjes5Vvk4hupNsOz9T7RJAlfNLLZhqDPIgEMlhF
9R3utaOc/rjMQrsCaln/vZwS/wIDAQABo4IDMTCCAy0wDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBSGASZeMRe4DbZRqG6qi/ap0obkTzAfBgNVHSMEGDAWgBQULrMXt1hW
y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6
Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu
b3JnLzCB/wYDVR0RBIH3MIH0ghpwbGF5ZXItemVyb3plcm8uaW1wcmVzYS5wdIIP
cGxheWVyLmJsaXR6LnB0ghJwbGF5ZXIuZXhwcmVzc28ucHSCEnBsYXllci5mYW1h
c2hvdy5wdIIRcGxheWVyLmltcHJlc2EucHSCEnBsYXllci5vbWlyYW50ZS5wdIIN
cGxheWVyLnNpYy5wdIIScGxheWVyLnNpY2NhcmFzLnB0ghFwbGF5ZXIuc2lja2Fw
YS5wdIITcGxheWVyLnNpY211bGhlci5wdIIVcGxheWVyLnNpY25vdGljaWFzLnB0
ghRwbGF5ZXIuc2ljcmFkaWNhbC5wdDBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AN+lXqtogk8fbK3uuF9OPlrq
zaISpGpejjsSwCBEXCpzAAABfU0m4n4AAAQDAEgwRgIhAIIT7I9iM1Ugr5Ajb5dS
QlNA7fapj4Mop3peBlBTUHrcAiEApSAlGQbmecs48nhrprcF4m6iXuHubv06yRnF
Q8MsXFAAdgBGpVXrdfqRIDC1oolp9PN9ESxBdL79SbiFq/L8cP5tRwAAAX1NJuK1
AAAEAwBHMEUCIQDFA3tKCliOHyV6OHOBetN/xipy3yeiORS/u4I6E9dvyAIgaXD6
bTDf9hU3kYPTUJp9rtZgHaI2EALVjuK7463/CUQwDQYJKoZIhvcNAQELBQADggEB
AJ9qJYgpCIRHID61xKtHkXzdmk84gUn9WHoqNF3KV6hpwU5dIpoM2sKQRcapNeeD
hiMqajx4eauL73i3MJUtXsrB7LIojMhxD1ULb6IT/fkCwVFYSsu7ftk1ugQ+oDn9
wXFqt+Vs76J/07jjRp851fCx3XInXs96OJAPG4PTDcbKkEX7rN0rXrUju0wGpuP6
q3tIXmheC9dsEJ/26ygUMwyo/Q2wc/pkz9FGhWd8mwc1XlnX8+Y+9jllEqw5xJAU
4doCfIrUY8V2tj6IcP6OcM3bPSMaedPqj1KMD5TCG02ST4JZLLQ1JW7WMb4/MSX/
ll8t37jjRLUrsi6zWaHxkO4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9qYLx32wCLlf0U7YUzU
W/1JR+C6C+6eQRU/xcpR/bZmM26XJkAENIH+quSLDGUyUdafJc4ILGlg21I+g/xQ
zrsadG/hmidIPJpGTtHypdieQH03Z6+1E8m+QAfezXnYvR6p/huUtmpvAGyWJhYN
+H0g5aVJmuN3wQQ2PB/lzKtbYXS2Lmxn0Wiba3RVvU2mynesAOK+NoLAxykVwzuR
NnMBSaAzA4x32Ow5jtYomKFjD04QACTCDxVNKnLyEf/34fJ8YOVvQo/5zOlanbO9
1kjes5Vvk4hupNsOz9T7RJAlfNLLZhqDPIgEMlhF9R3utaOc/rjMQrsCaln/vZwS
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378108948641917272159332184408744062273459
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-23 13:15:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-21 13:15:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'player.impresa.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23714355978790019192232461102881926550554156181092942943777879902191377338108447264884171552730760246718004481318179332183145261830219882769823109859728526980002191841415084580743579362589014657955267650426340350045572931683123169810761137416723151225140038031836797825195151994034498245994262476044541051000413815291873733861387636850333719570827217695725542289458377598135437790133605723853747473860105142144574791286567111857149599606794678761689265396197988785821264905310212270800913046147216926230146939713572957753684770148059331678895763258584263580594055562798126060010120892227158343105194218875012012315391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8601265e3117b80db651a86eaa8bf6a9d286e44f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player-zerozero.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.blitz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.famashow.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.omirante.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.sic.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.siccaras.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.sickapa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.sicmulher.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.sicnoticias.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.sicradical.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017d4d26e27e00000403004830460221008213ec8f62335520af90236f9752425340edf6a98f8328a77a5e065053507adc022100a520251906e679cb38f2786ba6b705e26ea25ee1ee6efd3ac919c543c32c5c5000760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017d4d26e2b50000040300473045022100c5037b4a0a588e1f257a3873817ad37fc62a72df27a23914bfbb823a13d76fc802206970fa6d30dff615379183d3509a7daed6601da2361002d58ee2bbe3adff0944
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009f6a258829088447203eb5c4ab47917cdd9a4f388149fd587a2a345dca57a869c14e5d229a0cdac29045c6a935e78386232a6a3c7879ab8bef78b730952d5ecac1ecb2288cc8710f550b6fa213fdf902c151584acbbb7ed935ba043ea039fdc1716ab7e56cefa27fd3b8e3469f39d5f0b1dd72275ecf7a38900f1b83d30dc6ca9045fbacdd2b5eb523bb4c06a6e3faab7b485e685e0bd76c109ff6eb2814330ca8fd0db073fa64cfd14685677c9b07355e59d7f3e63ef6396512ac39c49014e1da027c8ad463c576b63e8870fe8e70cddb3d231a79d3ea8f528c0f94c21b4d924f82592cb435256ed631be3f3125ff965f2ddfb8e344b52bb22eb359a1f190ee