audit-api-ui.dev.kea.ifdsfs.com

Issued by R3

About this certificate

This digital certificate with serial number 03:2b:38:35:a8:cc:50:a1:83:8c:a8:d4:46:77:36:3e:57:b9 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=audit-api-ui.dev.kea.ifdsfs.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2b:38:35:a8:cc:50:a1:83:8c:a8:d4:46:77:36:3e:57:b9
Serial Number (int): 276043714956010864129001672444075579430841
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:7b:cb:58:da:d7:70:52:48:00:26:f4:30:78:48:1d:4b:e6:41:16
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b8:d6:86:d0:18:d8:80:b1:49:63:3b:ad:ee:a0:2e:53:22:f4:06:e1
Fingerprint (sha256): 2a:fa:80:65:20:0b:e8:d7:40:f2:e4:af:88:22:fa:f3:46:dc:6c:a4:da:5a:b9:cc:45:20:50:54:ae:e0:0d:ab

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate audit-api-ui.dev.kea.ifdsfs.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for audit-api-ui.dev.kea.ifdsfs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

audit-api-ui.dev.kea.ifdsfs.com
audit-ui.dev.kea.ifdsfs.com

Other certificates including the domain name ifdsfs.com

(limited to 100 certificates)
*.uat.iam.ifdsfs.com
*.dev.iam.ifdsfs.com
*.perf.sjp.ifdsfs.com
api.test.ifdsfs.com
*.dev.sjp.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.stage.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.dev.kea.ifdsfs.com
*.prod.inst.ifdsfs.com
*.perf.sjp.ifdsfs.com
kubenav.prod.kea.sydney.ifdsfs.com
*.dev.kea.ifdsfs.com
new-investor-ui.dev.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.dev.sequoia.ifdsfs.com
*.stage.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.prod.kea.ifdsfs.com
*.prod.iam.ifdsfs.com
*.dev.kea.ifdsfs.com
*.stage.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.uat.data.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.stage.iam.sydney.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.prod.iam.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.dev.iam.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.dev.sequoia.ifdsfs.com
*.dev.datalake.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.prod.data.ifdsfs.com
*.uat.sequoia.ifdsfs.com
*.uat.sequoia.ifdsfs.com
*.dev.aa.ifdsfs.com
*.dev.sequoia.ifdsfs.com
audit-api-ui.dev.kea.ifdsfs.com
*.dev.data.ifdsfs.com
*.stage.kea.ifdsfs.com
*.dev.kea.ifdsfs.com
*.stage.kea.ifdsfs.com
*.stage.kea.ifdsfs.com
*.uat.iam.sydney.ifdsfs.com
*.prod.sjp.ifdsfs.com
*.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.stage.sjp.ifdsfs.com
*.prod.sequoia.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
mattermost.mgmt.ifdsfs.com
*.stage.sjp.ifdsfs.com
*.prod.kea.ifdsfs.com
*.dev.sequoia.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.demo.ifdsfs.com
*.uat.sequoia.ifdsfs.com
*.mgmt.ifdsfs.com
kubenav.prod.data.sydney.ifdsfs.com
*.perf.sjp.ifdsfs.com
*.prod.sequoia.ifdsfs.com
*.perf.sjp.ifdsfs.com
*.dev.datalake.ifdsfs.com
*.build.ifdsfs.com
signin.mgmt.ifdsfs.com
*.uat.inst.ifdsfs.com
mattermost.mgmt.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
tableau.randd.ifdsfs.com
*.prod.inst.ifdsfs.com
*.prod.iam.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.stage.kea.ifdsfs.com
*.dev.iam.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.prod.iam.ifdsfs.com
harness-admin-ui.dev.kea.ifdsfs.com
*.uat.data.ifdsfs.com
*.prod.sjp.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
uob-gmo.dev.kea.ifdsfs.com
signin.mgmt.ifdsfs.com
*.perf.sjp.ifdsfs.com
*.dev.kea.ifdsfs.com
api.dev.ifdsfs.com
*.uat.iam.ifdsfs.com
*.playground.ifdsfs.com
*.dev.data.ifdsfs.com
*.dev.iam.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
*.dev.data.ifdsfs.com
*.stage.kea.ifdsfs.com
grafana.playground.ifdsfs.com
*.dev.blockchain.ifdsfs.com
*.dev.inst.ifdsfs.com

Certificate

The complete raw certificate details for audit-api-ui.dev.kea.ifdsfs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgISAys4NajMUKGDjKjURnc2Ple5MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA0MTkyMTEwNTlaFw0yMzA3MTgyMTEwNThaMCoxKDAmBgNVBAMT
H2F1ZGl0LWFwaS11aS5kZXYua2VhLmlmZHNmcy5jb20wggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQClXScErjrnEEC+516iBfPI9toGspzvDHfRlz0yL7XZ
SMubdYsu4Ri4HqXEuR2KD00h9bUu1ESeO7kOE3vpYWN6EE5YN/Yxvm5yn1PqvMWz
8CnFBWbgctNEe8E/mBZ/v221xP4KJDBCBG0W+Wb5mzVubsIs4InQSbNa83Ghu8MP
Ihpm25K8/FkEEH4jIpZYmS9cskvajOX+vbwKG0X+lyQrDAGARr79ebfcdHr0K31C
LaOTMD/ZmPOa+U/1BtT0rr4XEwcI66l8FsAkNO4KRLKr7PXXrt/0uejWxon33Lwu
btQz01/6SHJ7DRRgZvAgR8B2HOMlPqa48v5YB2jJnDgTAgMBAAGjggJ3MIICczAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFAV7y1ja13BSSAAm9DB4SB1L5kEWMB8GA1Ud
IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr
BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw
Oi8vcjMuaS5sZW5jci5vcmcvMEcGA1UdEQRAMD6CH2F1ZGl0LWFwaS11aS5kZXYu
a2VhLmlmZHNmcy5jb22CG2F1ZGl0LXVpLmRldi5rZWEuaWZkc2ZzLmNvbTBMBgNV
HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo
dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA
8AB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABh5uSKP4AAAQD
AEcwRQIhAOEQkxLCmLQZcmw3QAOAsiYEkm6VuLmMP/FomTX/FmuVAiAH9wHF0W43
lFWzGw32vQNWPbUn+9Aa1rq8Ci8ZoHDjBwB2AK33vvp8/xDIi509nB4+GGq0Zyld
z7EMJMqFhjTr3IKKAAABh5uSKSEAAAQDAEcwRQIgIbWf0xdaWuGmLlkDVr3Mt6HE
Y2H/os+fKdz/ThxlL1YCIQD4lLhPt90Zlsm9skrbcWbbEJSZfGFYg/tU9B9XR66Z
0jANBgkqhkiG9w0BAQsFAAOCAQEAVYjwrChLp+GclDb1z2IRnlj8ujn1L9r/YUVd
HIXFolbJaHrMgdBay2reCukdkb02Xm+hEUY8fPixEoKuGeYNvVucoeFg0tQWN2uF
kOXabLTTUFSPRQS1LOveU+cPrHsk1lgw2lez0gH/0spvG0oeP+Tksey0HJC+KHBf
OGZe0t8q9LLP5H3+vdI9rbKC1H/sVFKpC1h4E4EUobdQrnkSW7XuW68SZFcj+Re0
x3EQjEp3CIdd5mtVJuERg5vOHjXtQFxrXh5oRO7vGG8ZUFunLOMCEjhNxmXvfA64
bHdQK082n9wHUuoBUsdhjhR2oyALIZIR6li/Y4TrvFDIuHxWjQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV0nBK465xBAvudeogXz
yPbaBrKc7wx30Zc9Mi+12UjLm3WLLuEYuB6lxLkdig9NIfW1LtREnju5DhN76WFj
ehBOWDf2Mb5ucp9T6rzFs/ApxQVm4HLTRHvBP5gWf79ttcT+CiQwQgRtFvlm+Zs1
bm7CLOCJ0EmzWvNxobvDDyIaZtuSvPxZBBB+IyKWWJkvXLJL2ozl/r28ChtF/pck
KwwBgEa+/Xm33HR69Ct9Qi2jkzA/2ZjzmvlP9QbU9K6+FxMHCOupfBbAJDTuCkSy
q+z1167f9Lno1saJ99y8Lm7UM9Nf+khyew0UYGbwIEfAdhzjJT6muPL+WAdoyZw4
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276043714956010864129001672444075579430841
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-19 21:10:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 21:10:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'audit-api-ui.dev.kea.ifdsfs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20875255487347193413503631940769854672677048864297561708207018608991663681120617173329425341217883130037238135751018238916434577486688563042703179041537233724557865094685702527867928321749780610090180140822247374210110937480903762394819587150901368466106961340369649538854668806365048899254042984933899216410457897832712535092604731284418280705466059775655051532919174434268874484817347633444728599488323841863151510670406174026598670363120735944920827203791971523258941409966577129560535867957579407521264192174160769314538877265247082294885054581019007538942523656172219092156501353352351615956272992300489630300179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							057bcb58dad77052480026f43078481d4be64116
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audit-api-ui.dev.kea.ifdsfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audit-ui.dev.kea.ifdsfs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001879b9228fe0000040300473045022100e1109312c298b419726c37400380b22604926e95b8b98c3ff1689935ff166b95022007f701c5d16e379455b31b0df6bd03563db527fbd01ad6babc0a2f19a070e307007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001879b9229210000040300473045022021b59fd3175a5ae1a62e590356bdccb7a1c46361ffa2cf9f29dcff4e1c652f56022100f894b84fb7dd1996c9bdb24adb7166db1094997c615883fb54f41f5747ae99d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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