www.ogb.state.al.us

Issued by R3

About this certificate

This digital certificate with serial number 03:d9:04:0d:57:9f:da:ab:fb:ee:2e:31:b0:95:b7:bc:ec:f6 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ogb.state.al.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d9:04:0d:57:9f:da:ab:fb:ee:2e:31:b0:95:b7:bc:ec:f6
Serial Number (int): 335183517606201276133301979257920821193974
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e0:ef:12:b6:25:c0:b0:0b:2a:7c:76:bd:f2:c7:d1:c1:b5:62:13:b7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d2:7b:c6:a5:7b:fc:a5:f3:d2:35:c1:b4:c1:c4:27:03:e4:98:49:c6
Fingerprint (sha256): 14:4e:29:70:fd:d0:05:18:88:06:4e:5a:23:4a:31:14:6f:8c:91:0a:aa:be:9b:44:65:98:02:bd:2c:44:f4:05

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.ogb.state.al.us

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ogb.state.al.us

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alenv.gsa.state.al.us
eforms.ogb.state.al.us
gsa.alabama.gov
gsa.state.al.us
ogb.alabama.gov
ogb.state.al.us
www.gsa.alabama.gov
www.gsa.state.al.us
www.ogb.alabama.gov
www.ogb.state.al.us
www2.gsa.state.al.us
www2.ogb.state.al.us

Other certificates including the domain name state.al.us

(limited to 100 certificates)
bcl.adph.state.al.us
hblb.alabama.gov
insurealabama.adph.state.al.us
siis.state.al.us
epcr-dashboard.adph.state.al.us
eforms.ogb.state.al.us
alatrauma.adph.state.al.us
www.ogb.state.al.us
vpnhq.adph.state.al.us
elrpnbs.adph.state.al.us
purchasing.alabama.gov
www.ogb.state.al.us
adphnotes2.state.al.us
dph1.adph.state.al.us
alex.state.al.us
ctf.alabama.gov
alex.state.al.us
emsis.state.al.us
epcr-submission.adph.state.al.us
*.dot.state.al.us
www.ago.state.al.us
phit.adph.state.al.us
alsteve.adph.state.al.us
amhc.alabama.gov
evergreen.apls.state.al.us
elrpnbs.adph.state.al.us
moodle.accessdl.state.al.us
*.aidb.state.al.us
sonicwall.ogb.alabama.gov
ctf.alabama.gov
map.ogb.state.al.us
dph.state.al.us
alison.legislature.state.al.us
paroles.state.al.us
dph5.adph.state.al.us
hie.adph.state.al.us
eforms.ogb.state.al.us
evergreen.apls.state.al.us
elrtnbs.adph.state.al.us
vpndr.adph.state.al.us
moodle.accessdl.state.al.us
curemd.adph.state.al.us
doc.alabama.gov
aplsws1.apls.state.al.us
alnbs.adph.state.al.us
map.gsa.state.al.us
immhie.adph.state.al.us
acis.alabama.gov
insurealabama.adph.state.al.us
bcl.adph.state.al.us
eforms.ogb.state.al.us
chiro.alabama.gov
alex.state.al.us
arts.alabama.gov
map.ogb.state.al.us
ems.adph.state.al.us
arc-sos.state.al.us
alert2.adph.state.al.us
accessdl.state.al.us
WellnessAppointments.adph.state.al.us
map.ogb.state.al.us
phit.adph.state.al.us
www.ogb.state.al.us
vcse.adph.state.al.us
curemd.adph.state.al.us
adphnotes2.state.al.us
eforms.ogb.state.al.us
dph5.adph.state.al.us
www.ogb.state.al.us
eforms.ogb.state.al.us
update.adph.state.al.us
moodle.accessdl.state.al.us
development.ogb.state.al.us
www.ago.state.al.us
insurealabama.adph.state.al.us
dph4.adph.state.al.us
WellnessAppointments.adph.state.al.us
map.ogb.state.al.us
hblb.alabama.gov
keys.adph.state.al.us
aplus.apls.state.al.us
ph.state.al.us
acis.alabama.gov
emsis.state.al.us
smtpgateway.adph.state.al.us
www.ogb.state.al.us
gis.adph.state.al.us
neosrv.adph.state.al.us
alex.state.al.us
eforms.ogb.state.al.us
fiche-app.adph.state.al.us
*.dot.state.al.us
alex.state.al.us
*.dot.state.al.us
www.algotraffic.com
bard.apls.state.al.us
adph-ehr-test.adph.state.al.us
*.aidb.state.al.us
map.ogb.state.al.us
mobile01.adph.state.al.us

Certificate

The complete raw certificate details for www.ogb.state.al.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGizCCBXOgAwIBAgISA9kEDVef2qv77i4xsJW3vOz2MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAzMjIxMzAxNDJaFw0yMzA2MjAxMzAxNDFaMB4xHDAaBgNVBAMT
E3d3dy5vZ2Iuc3RhdGUuYWwudXMwggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGK
AoIBgQDTdcCQWFdTLU+eoMxMG+XcuwlHtP6f3uB28SosT2sFGlclfbxLFCe69TQV
Ubv2YYbbDvRmbW+aun+2oB8IMxPJWmWmoX+GOaPi3t1qIWGy+LXXdT8lraUfPA+x
AICU5+RZhyrfPVIOgBLaKxGvqytEt6Z/3Nnr079qq4XqwRjYhql5XiXMe99wuiNc
noMqjP04yhGDlV2Zn3mYghYuwSwoMrXjSR5U9j20t+YXyDoCzLtLQkDpK1YafHw3
5p0QtOy60auKJz50xLCqUG2T+FYoNB6O6UYYbV6J+P2usZMfGRZdVnayxMLEN1GW
5Lnpcm0OPVO2V0OE9fCO0ErHbp6KnDAVr7XgY8g+p7Xonw8im+Vo1WnCCdo7x/cn
LI7G3xYQE4yIQ9gfdA8PPFPvXxAOWwuOjaJ4vGN5fn0VQyJHJDNq0X1jIqAs/1nW
V/PrQ3s8sSyyJipxoJbsbOAdpj5zGUEsKo0PZ/3JNcHbUYGixVe6N1M3bqG0o6jB
1OgoSbMCAwEAAaOCAy0wggMpMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU4O8StiXA
sAsqfHa98sfRwbViE7cwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYw
VQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5v
cmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wgf4GA1UdEQSB
9jCB84IVYWxlbnYuZ3NhLnN0YXRlLmFsLnVzghZlZm9ybXMub2diLnN0YXRlLmFs
LnVzgg9nc2EuYWxhYmFtYS5nb3aCD2dzYS5zdGF0ZS5hbC51c4IPb2diLmFsYWJh
bWEuZ292gg9vZ2Iuc3RhdGUuYWwudXOCE3d3dy5nc2EuYWxhYmFtYS5nb3aCE3d3
dy5nc2Euc3RhdGUuYWwudXOCE3d3dy5vZ2IuYWxhYmFtYS5nb3aCE3d3dy5vZ2Iu
c3RhdGUuYWwudXOCFHd3dzIuZ3NhLnN0YXRlLmFsLnVzghR3d3cyLm9nYi5zdGF0
ZS5hbC51czBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYG
CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQIGCisGAQQB
1nkCBAIEgfMEgfAA7gB1ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZ
AAABhwmgJK8AAAQDAEYwRAIgUEJPQlpOqps0QTD2gr3cJhveW1guC66yvS82JjxM
f5MCICQyP9CB/OhTNYWTjZE0cY7rjaZlT/9EvahYNAcnnqp/AHUAejKMVNi3LbYg
6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGHCaAkxQAABAMARjBEAiATbqWNAR4R
rtFLxwRmyALEcEGCNctY1EwFuR3gFD0n7wIgG0DCm2avG+f2c67905yLuMGmIB+C
kxND/8zng84GbUQwDQYJKoZIhvcNAQELBQADggEBAC+Xo/lZw/zjfjS7NcVQAGTD
jVd5dvVlmHjsCRzhsYUfpOglK79ZiEFipgIZQr6fQUtl+GdXgICDBRKMfU9Xhp05
xBNsj4FFcqb9lVKuCLB9XNhu8/g3lzjZnDrWiGXS8Ial18DLuazQwgZ8SW7k9EbY
5deqEqudwjj4C7r7uC5+B6McPGYwdiIZMJrbPArxQByuKHuRBnzeKih80RILFf/h
aN7zvuZtPPmtoytv640Io9Z296BKxc57P+V/l2H5KH3Lh4slJ5pbBr7/YmcENTgM
2l90V3lQQ6ioHLNL8nptZJnpKv30IeGxZbDL32n0qn7PAZ5jNtfdV2wQl9ftqs8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335183517606201276133301979257920821193974
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-22 13:01:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-20 13:01:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ogb.state.al.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4798824636042735782857619463743991506197243465254494643001589598773065452333574195404799124166048590893990522925324566632258668298618267780854593550147479658105888415870861423769192667981144079789695793926388442843889128410816250602846317025897002717762038704777826085286278798001635348225321328605051195179414239162897371829605808184328059094749633075516728541687307227954697111569461611849679640974531943550373878535035187803888349892845939200714072177254949779128239932167200174558867988793168378944866832640686247470977335828875206562028180545753448931660593682999830775795391401415316035248382485459748234539072257013383171476637974354951526317726022453014187049969166484372006040653105375216462480831508636035155794561648726870312108703757395894162066084272012742949545479940313210068629899018117824032022999608591382560863573752142038443518752139723955495464086490388485347878680796665001255085102176282465934426786227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0ef12b625c0b00b2a7c76bdf2c7d1c1b56213b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alenv.gsa.state.al.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eforms.ogb.state.al.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsa.alabama.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsa.state.al.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogb.alabama.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogb.state.al.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gsa.alabama.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gsa.state.al.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ogb.alabama.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ogb.state.al.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.gsa.state.al.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.ogb.state.al.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018709a024af0000040300463044022050424f425a4eaa9b344130f682bddc261bde5b582e0baeb2bd2f36263c4c7f93022024323fd081fce8533585938d9134718eeb8da6654fff44bda8583407279eaa7f0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018709a024c500000403004630440220136ea58d011e11aed14bc70466c802c470418235cb58d44c05b91de0143d27ef02201b40c29b66af1be7f673aefdd39c8bb8c1a6201f82931343ffcce783ce066d44
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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