lepidus.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1e:e6:76:4c:8e:df:ce:3d:45:7b:93:f1:20:e5:95:81:85 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lepidus.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1e:e6:76:4c:8e:df:ce:3d:45:7b:93:f1:20:e5:95:81:85
Serial Number (int): 271851665485751525044008553197338466025861
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:bb:49:f5:d0:76:49:45:12:ce:0e:8d:ce:fa:2d:50:85:87:3b:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:28:09:01:7b:b9:d0:7b:c4:73:44:5c:93:0c:2f:73:6a:09:bc:7b
Fingerprint (sha256): 1b:6b:d8:9a:b4:b1:07:ee:29:94:91:4d:11:ac:2e:8d:1f:ed:75:b8:71:c7:9d:b9:7f:1b:b0:c9:11:8e:02:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lepidus.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lepidus.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lepidus.com.br
www.lepidus.com.br

Other certificates including the domain name lepidus.com.br

(limited to 100 certificates)
maven.lepidus.com.br
domus.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
piwik.lepidus.com.br
maven.lepidus.com.br
wiki.lepidus.com.br
domus.lepidus.com.br
domus.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
redmine.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
maven.lepidus.com.br
jenkins.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
wiki.lepidus.com.br
oc.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
git.lepidus.com.br
lepidus.com.br
domus.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
wiki.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
crm.lepidus.com.br
domus.lepidus.com.br
crm.lepidus.com.br
nc.lepidus.com.br
redmine.lepidus.com.br
jenkins.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
www.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
domus.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
lepidus.com.br
lepidus.com.br
lepidus.com.br
git.lepidus.com.br
piwik.lepidus.com.br
gitlab.lepidus.com.br
wiki.lepidus.com.br
lepidus.com.br
crm.lepidus.com.br
gitlab.lepidus.com.br
jenkins.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
git.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
maven.lepidus.com.br
piwik.lepidus.com.br
lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
piwik.lepidus.com.br
crm.lepidus.com.br
lepidus.com.br
lepidus.com.br

Certificate

The complete raw certificate details for lepidus.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGaDCCBVCgAwIBAgISAx7mdkyO3849RXuT8SDllYGFMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjIwMzAwNDdaFw0y
MDAxMjAwMzAwNDdaMBkxFzAVBgNVBAMTDmxlcGlkdXMuY29tLmJyMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzoLhSce1PoZaqq9pIWVtrtj9LLb5lvZm
Dm64XMoMkyD9MjSVOXbcHdHbzbqO/J7K1CwbwEoImiLb6Z+uWqMnGzGq6FB6R+Ml
/hYhYCBeUmKWONjtmLtfIiMmrrz/8NoloInZQKAkAv6U4QLiLWhyLTW3wnKoNzwD
d/qVoUTSz3//6ws1StWjVdcdfCmg8BLKriHk16MDiwzu80RZHQHMozmMXoqCFJLu
T7+iZ2UF09RXjwm+lb7kthRCEDvR0iZuq5QKJlwIZZ0lX/Se7vRHNBaT5Uqfv15W
5Fxz3ch5gg2IWsAJFrbge6DG7pWhiKaFO5U2gfwAVodSwC3JCPmFaVkdP53cSsl9
UXuXCweVpvYMsArE/MzNINoYuThqTcAvOIsbWOxz7TQbskmaFx0qxIrwB3eIYIoQ
vK9KVblxqfkntbij3iOQIF0bAhQU+2FeBMZYjau2wpglxKXAMeckTVJevBhEPGzb
Ia8r5uQ+JSwldTkgc+tHW82KnkOdXrJ4bTMWAnH5NeeXBZ4xuvxVXuULpTxhh9kE
g7Z6wLHWyrZuoGjs11lHkcvB0sAZYMZYmhDYcV/pSql3pg1VY7CmCMYT2igaOuEf
4ksl0i5HX7Shu/UvZWaAJSs7h2uhoYKOvEg4tycQtFY0u1TdimKox9Re+s4vAgyv
MhoRYaKgiGMCAwEAAaOCAncwggJzMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUfrtJ
9dB2SUUSzg6NzvotUIWHOykwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAtBgNVHREEJjAkgg5sZXBpZHVzLmNvbS5icoIS
d3d3LmxlcGlkdXMuY29tLmJyMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkC
wQApBo2yCJo32RMAAAFt8Z/W9QAABAMARzBFAiBbJ3mSPUzKEgtEmyMth1OvCt4w
c5/ofqHzo6X5uAlZ8wIhALkgO1YN+SgcAG6niJ+tWNgzGsUG8ta9f2ixWNijn0uc
AHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFt8Z/XpwAABAMA
RzBFAiEAkjVVQgvCWTc6B+2Xc+mCxXWyDZRphx1owbKz16ZU1CACIFlpELBWpdDl
Eichf0/Wf2CbTCK9qDSjQQgc1C000UV5MA0GCSqGSIb3DQEBCwUAA4IBAQAuzNot
0cOyPaQHDmgcG2DCabCvCs5T58kw2Gbixy2cT+DDA69T+D1eQKbQoVxK1V4YrRhf
GtolKacCkNxnCVKrXFCMqxi8KZpLR2DN8NNsChLzd6QNFbxx4nlKSonaGfcrarCn
3e4Oy8Fa+nVpdW+s0haC/7KU/tVoRjI3vFyaRRCI3uNycGoKRzzM2f2HY9GFWMIf
YZBmCDSkwa6bKJdb0koiiA8hOWUOfod2qpA06IdyBhvn1BBq2Al2OyqXD8abHD7O
W+OhmuwzkpVvllsZNME53Ke11Gjz8OGcxvGZv/38c+PHSn8FzP1k2/N1bqsAwdRf
Q9ZhGU+9zLL/qnPd
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzoLhSce1PoZaqq9pIWVt
rtj9LLb5lvZmDm64XMoMkyD9MjSVOXbcHdHbzbqO/J7K1CwbwEoImiLb6Z+uWqMn
GzGq6FB6R+Ml/hYhYCBeUmKWONjtmLtfIiMmrrz/8NoloInZQKAkAv6U4QLiLWhy
LTW3wnKoNzwDd/qVoUTSz3//6ws1StWjVdcdfCmg8BLKriHk16MDiwzu80RZHQHM
ozmMXoqCFJLuT7+iZ2UF09RXjwm+lb7kthRCEDvR0iZuq5QKJlwIZZ0lX/Se7vRH
NBaT5Uqfv15W5Fxz3ch5gg2IWsAJFrbge6DG7pWhiKaFO5U2gfwAVodSwC3JCPmF
aVkdP53cSsl9UXuXCweVpvYMsArE/MzNINoYuThqTcAvOIsbWOxz7TQbskmaFx0q
xIrwB3eIYIoQvK9KVblxqfkntbij3iOQIF0bAhQU+2FeBMZYjau2wpglxKXAMeck
TVJevBhEPGzbIa8r5uQ+JSwldTkgc+tHW82KnkOdXrJ4bTMWAnH5NeeXBZ4xuvxV
XuULpTxhh9kEg7Z6wLHWyrZuoGjs11lHkcvB0sAZYMZYmhDYcV/pSql3pg1VY7Cm
CMYT2igaOuEf4ksl0i5HX7Shu/UvZWaAJSs7h2uhoYKOvEg4tycQtFY0u1TdimKo
x9Re+s4vAgyvMhoRYaKgiGMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271851665485751525044008553197338466025861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 03:00:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-20 03:00:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lepidus.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 842492396552596074456031455694506723063021761626970611250976373854819178183238747579829357341125741882502452751837011352540766131595715317577301632386883909304859354797948268843591845755877563457730833832572248912463844957755070635499275915343602774870838449363202361401220044211156639519011065686881574506121863465855655158791706011548654828293321717346961624705300952763651840777928044651990967108070296647805852956316400070903141763477866021534384944506614546565894167817699559684101069559234487371732550024183296790659835550154208034794089750133785418752745153997719700137426880691169326529693705936699755204709735272254913418631914131562798327899167509908040080137904920841948880723233155855683472322776326814168281927922707426083343333576184137489187890424418112368368765178679571913192938082163943546510952546693835822746591954788170712286542496172696774970084404605211118471406308728808714993076144643591303170296854767813386955383021724728880936680724079749210715114425075506154335687669610706800882646097042537396598777686898183879463877701240791396801340227198832171514076895655210178646673746197089731125966265904335069745124352138579893159342173196856006073029145166185602084841072088205260990269796501025861494707882083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ebb49f5d076494512ce0e8dcefa2d5085873b29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lepidus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lepidus.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016df19fd6f5000004030047304502205b2779923d4cca120b449b232d8753af0ade30739fe87ea1f3a3a5f9b80959f3022100b9203b560df9281c006ea7889fad58d8331ac506f2d6bd7f68b158d8a39f4b9c00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016df19fd7a70000040300473045022100923555420bc259373a07ed9773e982c575b20d9469871d68c1b2b3d7a654d4200220596910b056a5d0e51227217f4fd67f609b4c22bda834a341081cd42d34d14579
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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