*.kafka.shopifysvc.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:a4:ec:64:c6:32:ab:11:c1:ce:eb:e2:ba:4f:4d:ea:cd was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.kafka.shopifysvc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:a4:ec:64:c6:32:ab:11:c1:ce:eb:e2:ba:4f:4d:ea:cd
Serial Number (int): 329952834363700529122139516824966088485581
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:59:8c:b9:7d:f5:c8:ba:b0:d1:1a:3a:38:6a:42:b4:ce:6b:67:39
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c6:56:3c:9e:24:0c:71:fa:b7:90:e6:c4:a5:0b:1a:f4:54:b4:5a:34
Fingerprint (sha256): 2d:f4:e0:2a:a4:0e:df:5e:d7:34:24:84:fa:b4:3e:ad:35:39:c2:08:eb:79:f3:ef:8d:f1:f5:7c:18:1d:96:44

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.kafka.shopifysvc.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.kafka.shopifysvc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kafka.shopifysvc.com
*.shopifycloud.com
kafka.shopifysvc.com
shopifycloud.com

Other certificates including the domain name shopifysvc.com

(limited to 100 certificates)
ingress-imagery-us-central1-2.shopifycloud.com
cdc-controller-staging.shopifycloud.com
mailbox.shopifycloud.com
magellan-readonly-east.shopifycloud.com
pricing.shopifycloud.com
shopify-app-store-staging.shopifysvc.com
logs-edge-us-e4.shopifycloud.com
cdc-staging-apps.shopifycloud.com
*.kafka.shopifysvc.com
receive-observability-prometheus-eu-we3-ir3.shopifycloud.com
*.shopify.com
cm.splunk.shopifysvc.com
receiver.sfn-webhooks-staging.shopifycloud.com
*.kafka.shopifysvc.com
business-platform.shopifycloud.com
*.kafka.shopifysvc.com
logs-svc-us-e4.shopifycloud.com
receiver.sfn-webhooks-staging.shopifycloud.com
*.shopify.com
shipping-manifests.shopifysvc.com
shipping-manifests.shopifysvc.com
github-archive.shopifycloud.com
logs-canada.shopify.io
atlas.shopifysvc.com
shipify.shopifycloud.com
idx-splunk-na-ne1-b-1.shopifycloud.com
*.kafka.shopifysvc.com
argus-server-staging.shopifycloud.com
magellan-readonly-central.shopifycloud.com
storefront-search-us-ea1.es-ysnzr.shopifycloud.com
hf-hec-o11y-splunk-control-svc-2.shopifycloud.com
cm.splunk.shopifysvc.com
*.kafka.shopifysvc.com
logs.shopify.io
*.kafka.shopifysvc.com
cdc-controller-staging.shopifycloud.com
*.kafka.shopifysvc.com
otel-receiver-apps-us-ce1-og2.shopifycloud.com
idx-splunk-us-east1-b-1.shopifycloud.com
lm.splunk.shopifysvc.com
shipify-staging.shopifycloud.com
cdc-staging-apps.shopifycloud.com
courier-tier2-central.shopifycloud.com
product-sync.shopifysvc.com
magellan-readonly-east.shopifycloud.com
idx-splunk-na-ne1-c-1.shopifycloud.com
*.kafka.shopifysvc.com
magellan-readonly-east.shopifycloud.com
magellan-readonly-east.shopifycloud.com
fb-capi-staging.shopifycloud.com
hf-hec-o11y-splunk-control-svc-2.shopifycloud.com
*.kafka.shopifysvc.com
maestro-service-benchmark.shopifysvc.com
logs-canada.shopify.io
logs-svc-us-e1-2.shopifycloud.com
courier.shopifycloud.com
idx-splunk-us-east1-c-1.shopifycloud.com
logs.shopify.io
idx-splunk-us-east4-c-1.shopifycloud.com
*.kafka.shopifysvc.com
bloodhound-staging.shopifycloud.com
hf-hec-o11y-splunk-worker-svc-2.shopifycloud.com
argus.shopifycloud.com
warehouse.shopifycloud.com
*.kafka.shopifysvc.com
receive-observability-prometheus-us-ea1-uf9.shopifycloud.com
retail-telemetry-proxy-staging.shopifycloud.com
ingress-imagery-us-central1-2.shopifycloud.com
*.kafka.shopifysvc.com
idx-splunk-na-ne1-c-1.shopifycloud.com
idx-splunk-na-ne1-b-1.shopifycloud.com
hf-hec-o11y-splunk-control-core-2.shopifycloud.com
logs-edge-us-c1-2.shopifycloud.com
cm-canada.splunk.shopifysvc.com
cdc-core.shopifycloud.com
monorail-registry-central.shopifycloud.com
*.kafka.shopifysvc.com
courier-tier2-central.shopifycloud.com
fb-capi-staging.shopifycloud.com
storefront-search-eu-we1.es-ysnzr.shopifycloud.com
core-es-us-ce1-zp4.es-fgw6u.shopifycloud.com
courier-canada.shopifycloud.com
cdc-core.shopifycloud.com
courier-tier2.shopifycloud.com
hf-hec-o11y-splunk-worker-global-2.shopifycloud.com
*.shopify.com
courier-tier2.shopifycloud.com
idx-splunk-na-ne1-b-1.shopifycloud.com
cdc-controller-staging.shopifycloud.com
*.kafka.shopifysvc.com
*.kafka.shopifysvc.com
receiver.sfn-webhooks-staging.shopifycloud.com
logs-canada.shopify.io
*.kafka.shopifysvc.com
katesql-manager.shopifysvc.com
receiver.sfn-webhooks-staging.shopifycloud.com
*.shopify.com
argus.shopifycloud.com
fb-capi-staging.shopifycloud.com
sfn-webhooks.shopifycloud.com

Certificate

The complete raw certificate details for *.kafka.shopifysvc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIErTCCA5WgAwIBAgISA8mk7GTGMqsRwc7r4rpPTerNMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTUxMzIzNTVaFw0y
MDAxMTMxMzIzNTVaMCExHzAdBgNVBAMMFioua2Fma2Euc2hvcGlmeXN2Yy5jb20w
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDClcEdXGZ00ks8Iloz8iUw
k2ICu+JqK/eOWVFuEdR9ieNKmgnZR1I7n+q/JuYMFd1Sot0HZh4a+wVaS3DY9Nmf
sY0xXS5+xzTKCMfWFkAmp3Ssc1SnokdIdpgrzp1pKDBjjR6QT2N+L2+qtQ6zX80v
mbWfDCZsvKQoyCbHkoOFIz1M4Q1Yx7gwUVuztvDXe7cQqCSA846wtf8VoFwe1xYp
VeMOsCRRcMRbUxNz6AhLaLL4htX0oVROfY0eJHaWz5FrunsA+fLaqCyMpB9P4a6U
JhCHJyeceFQHZT60S1gV3X2u+wagv4B2iJQBnpqReDwL07+bWGo/4ZjkIfgd0gJZ
AgMBAAGjggG0MIIBsDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGhZjLl99ci6sNEa
OjhqQrTOa2c5MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG
AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZy8wXQYDVR0RBFYwVIIWKi5rYWZrYS5zaG9waWZ5c3ZjLmNvbYIS
Ki5zaG9waWZ5Y2xvdWQuY29tghRrYWZrYS5zaG9waWZ5c3ZjLmNvbYIQc2hvcGlm
eWNsb3VkLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzATBgorBgEE
AdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcB+RvNK5VnVJwJQfkOhQ
FvNW2VgpTz1zAhcJRjwjC305D2BT9aVqHDIAnQAXPklNTaBpse90cN6itEby+NC9
vN1mZ+LdUwEHvNI1TxFWHgmAXjx+Fg1dhQHqfzNqC4lRsJELA5GIOpYh11YkBJlv
WHBdBnsSYlluMZP8PW247AmNFkexhaGjd73PZn1FeyTaYl1/f4L4BeWRideuRt7M
iX6E2OLakI18qVl7m1cP+762qb0WPhdc9kfGNXZSkq6fIV409TV7b8Y9lLUwUKop
TndZE0R9GKkBfCKfa6X5t1c21diCYweghuOi76iCGq/AQlQW0vG5zaAxH8EKNlhb
uQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpXBHVxmdNJLPCJaM/Il
MJNiArviaiv3jllRbhHUfYnjSpoJ2UdSO5/qvybmDBXdUqLdB2YeGvsFWktw2PTZ
n7GNMV0ufsc0ygjH1hZAJqd0rHNUp6JHSHaYK86daSgwY40ekE9jfi9vqrUOs1/N
L5m1nwwmbLykKMgmx5KDhSM9TOENWMe4MFFbs7bw13u3EKgkgPOOsLX/FaBcHtcW
KVXjDrAkUXDEW1MTc+gIS2iy+IbV9KFUTn2NHiR2ls+Ra7p7APny2qgsjKQfT+Gu
lCYQhycnnHhUB2U+tEtYFd19rvsGoL+AdoiUAZ6akXg8C9O/m1hqP+GY5CH4HdIC
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329952834363700529122139516824966088485581
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 13:23:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 13:23:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kafka.shopifysvc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24564077787803527513690581807134773468646978304795448476995192477947570967727691953067451839937737258259747662360804002965816957346334292828459507137022555413790240611474788780771198236189658544124895139339023900749397180537795354151950636007217263231691569297692721407117197551241352110331953646133596531659210321116159149701951258028256543290101034311301392551704649557332588017899570256745755414354138318215757233402644650076813092535171970554009898888774335324192476784689884949471612906587865778904806771913294045737593666066513450762337155967327258872287133178577857621063062708269721818208531324458785758642777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68598cb97df5c8bab0d11a3a386a42b4ce6b6739
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kafka.shopifysvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopifycloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kafka.shopifysvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopifycloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00701f91bcd2b9567549c0941f90e85016f356d958294f3d73021709463c230b7d390f6053f5a56a1c32009d00173e494d4da069b1ef7470dea2b446f2f8d0bdbcdd6667e2dd530107bcd2354f11561e09805e3c7e160d5d8501ea7f336a0b8951b0910b0391883a9621d7562404996f58705d067b1262596e3193fc3d6db8ec098d1647b185a1a377bdcf667d457b24da625d7f7f82f805e59189d7ae46decc897e84d8e2da908d7ca9597b9b570ffbbeb6a9bd163e175cf647c635765292ae9f215e34f5357b6fc63d94b53050aa294e775913447d18a9017c229f6ba5f9b75736d5d8826307a086e3a2efa8821aafc0425416d2f1b9cda0311fc10a36585bb9