devstatus.twitch.tv

Issued by R3

About this certificate

This digital certificate with serial number 04:7a:6d:11:0d:66:71:3d:8c:71:9d:ce:6f:37:3c:8a:e7:b1 was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=devstatus.twitch.tv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7a:6d:11:0d:66:71:3d:8c:71:9d:ce:6f:37:3c:8a:e7:b1
Serial Number (int): 390108566883770273688982147366287527569329
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 42:c1:b8:e8:38:aa:88:1f:b4:0a:ba:60:20:32:80:7a:52:d3:5b:7d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2d:29:29:ae:cc:bb:74:1f:90:c2:31:b4:47:80:6a:f0:28:c7:7b:7b
Fingerprint (sha256): 22:7b:cd:95:fe:de:a3:fe:d8:6d:ad:72:45:83:04:b6:be:3d:0e:93:67:54:13:6b:7a:fc:31:ac:82:5d:bf:4a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate devstatus.twitch.tv

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for devstatus.twitch.tv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

devstatus.twitch.tv
oporto.craveable.support
servicestatus.broadsign.com
status-page.virtru.com
status.asknice.ly
status.birchbox.com
status.brazen.com
status.civitaslearning.com
status.currencycloud.com
status.disruptive-technologies.com
status.dkvistun.is
status.eab.com
status.factom.com
status.geempower.com
status.helloglobo.com
status.holvi.com
status.inorbit.ai
status.jiminny.com
status.joist.com
status.kenticocloud.com
status.maestrano.com
status.mcs.mail.ru
status.mercur.com
status.mydex.org
status.onstarrez.cloud
status.paysafe.io
status.pubnative.net
status.qualpay.com
status.scalepoint.com
status.spotme.com
status.sproutlingcloud.com
status.sprucehealth.com
status.starrezcloud.io
status.teckst.com
status.tis.biz
status.trackops.com
status.via3.com
status.watermelon.co
status.westpac.co.nz
status.wickr.com

Other certificates including the domain name twitch.tv

(limited to 100 certificates)
cartman.prod.internal.us-west-2.twitch.tv
watch.twitch.tv
imgix4.map.fastly.net
panels-staging.twitch.tv
*.prod.us-west2.twitch.tv
twitch.tv
jp.blog.twitch.tv
it.blog.twitch.tv
imgix4.map.fastly.net
blog.twitch.tv
tv.twitch.tv
dns-vetting1f.map.fastly.net
imgix4.map.fastly.net
devstatus.twitch.tv
panels-images-staging.twitch.tv
devstatus.twitch.tv
prod.25.slot.cdn.salesforce-communities.com
m.twitch.tv
dns-vetting1f.map.fastly.net
*.twitch.tv
prod.25.slot.cdn.salesforce-communities.com
twitch.map.fastly.net
bemol-status.linxcommerce.com.br
assets.help.twitch.tv
twitch.tv
countess.twitch.tv
na85-1.cdn.salesforce-communities.com
statuspage.io
statuspage.io
tr.blog.twitch.tv
statuspage.io
spade.twitch.tv
assets.help.twitch.tv
*.pubsub-edge.twitch.tv
statuspage.io
id-cdn.twitch.tv
devstatus.twitch.tv
na85-1.cdn.salesforce-communities.com
*.chat.twitch.tv
twitch.tv
extensions-discovery-images.twitch.tv
twitch.tv
vmetric.twitch.tv
tv.twitch.tv
internal.passport.twitch.tv
connections.prod.internal.us-west-2.twitch.tv
cartman.staging.internal.us-west-2.twitch.tv
devstatus.twitch.tv
na85-1.cdn.salesforce-communities.com
*.twitch.tv
pubsub-edge-darklaunch.twitch.tv
uploads.twitch.tv
prod.25.slot.cdn.salesforce-communities.com
data.us-west-2.di.xarth.tv
dns-vetting1f.map.fastly.net
tv.twitch.tv
devstatus.twitch.tv
bemol-status.linxcommerce.com.br
id-cdn.twitch.tv
dns-vetting1f.map.fastly.net
cis.blog.twitch.tv
na75-2.cdn.salesforce-communities.com
twitchboard-prod.twitch.tv
devstatus.twitch.tv
bemol-status.linxcommerce.com.br
panels-images-prod.twitch.tv
extensions.sings.twitch.tv
dev.twitch.tv
compass.networkstatus.co.nz
blueprint.us-west-2.di.xarth.tv
*.darklaunch.tmi-room.twitch.a2z.com
discourse.design.twitch.tv
na85-1.cdn.salesforce-communities.com
watch.twitch.tv
*.staging.us-west2.twitch.tv
contributorstatus.crowdflower.com
devstatus.twitch.tv
*.staging.irc-edge.twitch.a2z.com
prod.25.slot.cdn.salesforce-communities.com
passport.twitch.tv
fr.blog.twitch.tv
dev.passport.twitch.a2z.com
extensions-discovery-images.twitch.tv
*.twitch.tv
vmetric.twitch.tv
dns-vetting1f.map.fastly.net
bemol-status.linxcommerce.com.br
id-cdn.twitch.tv
m.twitch.tv
fr.blog.twitch.tv
na85-1.cdn.salesforce-communities.com
link.twitch.tv
watch.twitch.tv
assets.help.twitch.tv
origin.edge-beta.ads.twitch.tv
imgix4.map.fastly.net
pubsub-edge-darklaunch.twitch.tv
gds-vhs-drops-campaign-images.twitch.tv
prod.25.slot.cdn.salesforce-communities.com
dragonfly.twitch.tv

Certificate

The complete raw certificate details for devstatus.twitch.tv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpn4saeOZvxz69+JyXTx
Lvtz9hQO/Pq7i3rkab4MUdVCuK7cD0brQGrVztn0p04v55FRlosdNhdzXfk4F2bN
mWhHLY5L9bibxImdggSpGPrtGOCt35Tr/28cFUSNZUg2VgqyO8s4ZDmpjB/2Srf+
Gy4l7dSTLzDh55aVXkpMHie8IaH0Xm8n3nR4YCR+N6MtBmA2v3hAXlPyAzXqYwhA
+zivCIQpan3Wpe+fi5CLk6aFbvUqYyk/PHLrP6gSBhcXdRYmpvmGKAUYxOeZk+si
tJwrT9VONM9vZHNvuUJUpN0b5LhRh8u1N/6SjgmazbLf44+0qQiFXSIyHL5ztCiW
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 390108566883770273688982147366287527569329
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-16 08:24:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-15 08:24:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'devstatus.twitch.tv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25071110540403163609678823221965722006903641958336830550361378664189871917289316164304133509922468344178498453275198697782374575995790295428232348311283285515252030945133880294052588995667016914488567912011698853011573129732281614557599540318350041606455040501263236107978928644288488601472000940654520176130066910399000556012296180990296467100112711662953281072901408249222211815645939351669655361706826209194699158290396838654366247214159084203928149994983186493810559087808936055578413580441339156081082615116859717360625025974914639972541129962400362962215933071200337182894767235877977969130258024573427266393649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							42c1b8e838aa881fb40aba602032807a52d35b7d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (871 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devstatus.twitch.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oporto.craveable.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicestatus.broadsign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-page.virtru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.asknice.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.birchbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.brazen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.civitaslearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.currencycloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.disruptive-technologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.dkvistun.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.eab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.factom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.geempower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.helloglobo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.holvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.inorbit.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.jiminny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.joist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.kenticocloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.maestrano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.mcs.mail.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.mercur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.mydex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.onstarrez.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.paysafe.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.pubnative.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.qualpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.scalepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.spotme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sproutlingcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sprucehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.starrezcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.teckst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.tis.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.trackops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.via3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.watermelon.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.westpac.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.wickr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000178d9ff28f900000403004830460221008442cedfc473f6f3eb5b779629a556ba2f5ef5f4c2d13ad7f4287a801139b17c0221009ea18b89bb1060cd3a9e42615c8019c70533eaf439c032b870054c52029bfee3007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000178d9ff29330000040300473045022100b8dd29e746db1dd7a15fa7d16163a513519a8b0092f98286b444fad7958f765c02206b92cbff17d667b2af01af8072c5cf3bb9d11fb113434b065c9b4a82a734e637
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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