iwritewhatiliketoo.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:af:ee:bd:b8:a0:11:dd:44:ca:dd:26:07:72:c0:22:b4:5b was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=iwritewhatiliketoo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:af:ee:bd:b8:a0:11:dd:44:ca:dd:26:07:72:c0:22:b4:5b
Serial Number (int): 408315899289953692569584900945866362369115
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a2:e4:c4:84:b2:71:62:eb:8a:d5:62:8f:64:7d:ca:19:9e:f1:ba:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 62:bc:60:6e:a4:61:ad:c7:38:3f:57:1b:5f:ad:26:98:32:41:d9:4d
Fingerprint (sha256): 18:18:71:7a:a7:8b:f0:8f:39:5c:f2:86:b4:a2:7d:2d:f6:56:35:c4:7f:17:2e:7b:68:9a:2c:0b:e4:b0:96:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate iwritewhatiliketoo.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iwritewhatiliketoo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.bluedynamics.co.za
autodiscover.iwritewhatiliketoo.com
bluedynamics.co.za
bluedynamics.sipnet.co.za
cpanel.bluedynamics.co.za
cpanel.iwritewhatiliketoo.com
iwritewhatiliketoo.com
iwritewhatiliketoo.sipnet.co.za
mail.bluedynamics.co.za
mail.iwritewhatiliketoo.com
webdisk.bluedynamics.co.za
webdisk.iwritewhatiliketoo.com
webmail.bluedynamics.co.za
webmail.iwritewhatiliketoo.com
www.bluedynamics.co.za
www.bluedynamics.sipnet.co.za
www.iwritewhatiliketoo.com
www.iwritewhatiliketoo.sipnet.co.za

Other certificates including the domain name iwritewhatiliketoo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for iwritewhatiliketoo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHXzCCBkegAwIBAgISBK/uvbigEd1Eyt0mB3LAIrRbMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMDcyMzIxMzJaFw0x
OTAzMDcyMzIxMzJaMCExHzAdBgNVBAMTFml3cml0ZXdoYXRpbGlrZXRvby5jb20w
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiR9QlX64zxmQh9EVWai3n
taTmOIplHg0O6j7UhXRNInCrXUxozLpYiTA9RhJGfFxPNH/5pn1TOtsxN2x4Hsfe
9xTzpOYk3X3eSJ3q/+H+jwEq0tsGsNi8dL2bCEpd/gJ1oaiIxVPmXch8bwD/m+UT
cn8NeD1demJ/rATKOh3yQ+nUpXQ1Asof9tHY/uTCMaHnDLdY7THYzyR93sl7OcCV
bdaHUQ4hxK7iRwrhRroOORnYKewz3MJkq4QTQgeSn7qcjdUcSf1MX8JZGhBix4Wb
kS1Gv4qmaEFAIBC2atqa2tZVDXPdtDSq6f6gfcN4Mot8VdmwASTphBROHyeO4s2N
AgMBAAGjggRmMIIEYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKLkxISycWLritVi
j2R9yhme8bp4MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG
AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZy8wggIbBgNVHREEggISMIICDoIfYXV0b2Rpc2NvdmVyLmJsdWVk
eW5hbWljcy5jby56YYIjYXV0b2Rpc2NvdmVyLml3cml0ZXdoYXRpbGlrZXRvby5j
b22CEmJsdWVkeW5hbWljcy5jby56YYIZYmx1ZWR5bmFtaWNzLnNpcG5ldC5jby56
YYIZY3BhbmVsLmJsdWVkeW5hbWljcy5jby56YYIdY3BhbmVsLml3cml0ZXdoYXRp
bGlrZXRvby5jb22CFml3cml0ZXdoYXRpbGlrZXRvby5jb22CH2l3cml0ZXdoYXRp
bGlrZXRvby5zaXBuZXQuY28uemGCF21haWwuYmx1ZWR5bmFtaWNzLmNvLnphghtt
YWlsLml3cml0ZXdoYXRpbGlrZXRvby5jb22CGndlYmRpc2suYmx1ZWR5bmFtaWNz
LmNvLnphgh53ZWJkaXNrLml3cml0ZXdoYXRpbGlrZXRvby5jb22CGndlYm1haWwu
Ymx1ZWR5bmFtaWNzLmNvLnphgh53ZWJtYWlsLml3cml0ZXdoYXRpbGlrZXRvby5j
b22CFnd3dy5ibHVlZHluYW1pY3MuY28uemGCHXd3dy5ibHVlZHluYW1pY3Muc2lw
bmV0LmNvLnphghp3d3cuaXdyaXRld2hhdGlsaWtldG9vLmNvbYIjd3d3Lml3cml0
ZXdoYXRpbGlrZXRvby5zaXBuZXQuY28uemEwTAYDVR0gBEUwQzAIBgZngQwBAgEw
NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBVgdTCFpA2AUrqC5tX
PFPwwOQ4eHAlCBcvo6odBxPTDAAAAWeLMNO+AAAEAwBGMEQCIARKvl/hi7MsWuup
oBuk0Cgl/r+FujclrWVAj+wE2EhLAiAkAs+82/3SkEWqbPVt2I0qxmGEUSeHwJzR
ReDjhO3CuAB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABZ4sw
0wYAAAQDAEcwRQIhAJpCEjpSBFfon8uGbsZjCn0Ss01YYTd9N78o3T3JJsajAiBJ
p5z1uB/Cm4dEtMa+BejeZ1omSVSlwQpEgfKWgSpbHDANBgkqhkiG9w0BAQsFAAOC
AQEAF05dI75DzBr1ER3EwlJk/re3OOHJuuel+9B62MfEYlNA2vzLACoMX+HHzU6T
dIooaK8y6XUbNqroZ6pmsIwH0uN9GasPKcxG1Hfa9yq90UwR2qU3q6UGO0r4Dd+T
lT6obaB/VHA6h+eZar51wqZedQxpMj6Cnetw+cOXDHLYiRcMIqTW3l0PyqmjyiSl
gA52t7CRmrgHfGwkCmFTY+RQIR8QCf5vAX+8hPKgl7Ln9o6NX/PjNB0EH8re/uOY
mavo+BQt0n3DLbhKCJZfsF0PH3dVz9kwOe2C8BuRhxY1gbYp/hboWHKveyRTXZWz
LhzpS/1b4/oR3tPP3q1AhQCy5g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokfUJV+uM8ZkIfRFVmot
57Wk5jiKZR4NDuo+1IV0TSJwq11MaMy6WIkwPUYSRnxcTzR/+aZ9UzrbMTdseB7H
3vcU86TmJN193kid6v/h/o8BKtLbBrDYvHS9mwhKXf4CdaGoiMVT5l3IfG8A/5vl
E3J/DXg9XXpif6wEyjod8kPp1KV0NQLKH/bR2P7kwjGh5wy3WO0x2M8kfd7JeznA
lW3Wh1EOIcSu4kcK4Ua6DjkZ2CnsM9zCZKuEE0IHkp+6nI3VHEn9TF/CWRoQYseF
m5EtRr+KpmhBQCAQtmramtrWVQ1z3bQ0qun+oH3DeDKLfFXZsAEk6YQUTh8njuLN
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408315899289953692569584900945866362369115
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-07 23:21:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-07 23:21:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iwritewhatiliketoo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20486025454266508624878280957265257567897102254158834377125232476409993685400373296974729574390965408070706146583861367568969619013828308623160419825919436725848015787384926447971726031056658071432933167373746988754798465046605409017913732518953557803890775569290182254512567813333216732218992832091518357223824024112953616972608196826930466392838853784068956168787774974533741765794632156299717989174619670278007004554397561670862567757170941367788819353099973168668823423902330369898810508897459198296325695354741729228285527266558565846788296855339590735519418026061774584155085721743157561369760268680676627369357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2e4c484b27162eb8ad5628f647dca199ef1ba78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (530 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bluedynamics.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.iwritewhatiliketoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluedynamics.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluedynamics.sipnet.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.bluedynamics.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.iwritewhatiliketoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwritewhatiliketoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwritewhatiliketoo.sipnet.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bluedynamics.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.iwritewhatiliketoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.bluedynamics.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.iwritewhatiliketoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bluedynamics.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.iwritewhatiliketoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluedynamics.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluedynamics.sipnet.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwritewhatiliketoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwritewhatiliketoo.sipnet.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001678b30d3be00000403004630440220044abe5fe18bb32c5aeba9a01ba4d02825febf85ba3725ad65408fec04d8484b02202402cfbcdbfdd29045aa6cf56dd88d2ac66184512787c09cd145e0e384edc2b800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001678b30d30600000403004730450221009a42123a520457e89fcb866ec6630a7d12b34d5861377d37bf28dd3dc926c6a3022049a79cf5b81fc29b8744b4c6be05e8de675a264954a5c10a4481f296812a5b1c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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