www.nztua.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:16:91:61:1b:c4:32:56:c2:8a:fc:fb:4e:45:5f:aa:8d:7d was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nztua.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:16:91:61:1b:c4:32:56:c2:8a:fc:fb:4e:45:5f:aa:8d:7d
Serial Number (int): 269016312142894835104122402688296800652669
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:43:c9:25:c2:62:b9:71:72:2f:a9:14:ea:d2:59:a7:fd:e7:bd:6a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ae:7a:04:1d:62:b7:d1:65:dd:f6:12:da:b1:14:88:79:23:5e:97:8b
Fingerprint (sha256): 30:1b:80:b9:5c:98:65:0f:d1:c0:ec:fe:fa:9b:ed:45:d4:e8:f2:85:cf:41:2b:71:12:7b:a3:e7:07:58:38:67

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nztua.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nztua.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sporty-production2.trafficmanager.net
www.bsgevents.co.nz
www.bullernetball.co.nz
www.hbcommunityfitness.co.nz
www.hbcommunityfitness.org.nz
www.mesoball.co.nz
www.northcoterugby.co.nz
www.northharbourtag.co.nz
www.nztua.com
www.rangitikeigolfclub.co.nz
www.schoolground.com
www.shoreroversnetball.co.nz
www.sportsground.com
www.sunrisecottage.co.nz
www.tabletennis.org.nz
www.tutangiora.nz

Other certificates including the domain name nztua.com

(limited to 100 certificates)
www.nelsoncarclub.co.nz
www.blenheimgolfclub.co.nz
sporty.co.nz
www.tabletennis.org.nz
sporty.co.nz
sporty.co.nz
northcanterburyrugby.co.nz
www.nztua.com
hastings-central.school.nz
ultrarunner.org.nz
www.oacnz.org
sporty.co.nz
aafl.co.nz
sporty.co.nz
northharbourtag.co.nz
trenthamrifleclub.co.nz
sporty.co.nz
sporty.co.nz
aucklandmarist.co.nz
www.wmsc.org.nz
lucknow.school.nz
www.badmintonhb.co.nz
pioneerbasketballclub.co.nz
www.melrosetargetshooting.co.nz
yes.stockx.co.nz
basketballtaranaki.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for www.nztua.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG4DCCBcigAwIBAgISAxaRYRvEMlbCivz7TkVfqo19MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTYwODI1NTFaFw0x
OTEyMTUwODI1NTFaMBgxFjAUBgNVBAMTDXd3dy5uenR1YS5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkgy5b1o0NUY01Q60QCperOXvgSuTGfyJ0
K3PlklTjT85Uu+bxisS7CfbJE84Gr6L/gEbBotQ3lTpwvE8AkraDRemyUJXBOy8g
JyF4lwnu4co9USVdFP61quvsqSxwrj8Ihv6TdTMgXL365r10QFLIC46cPm85mlSR
llTcuJ9HtPmE5jpvAcCgc9f0DSjaR6GjtcuhnNu2QwOildWS6gKlOY27WAIxpSr+
20q6PSxPnTr0Eu9Pi+kCyYyb7b4h8hhAzAe6oBEFiHh19YuEN01sY6FAU7k+s9Oh
xvy0x5H7psL1Rng7wbdwiY4WNcgaYJtOWHctT0ikJtxl5P3zI64XAgMBAAGjggPw
MIID7DAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNNDySXCYrlxci+pFOrSWaf9571q
MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw
YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y
ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y
Zy8wggGkBgNVHREEggGbMIIBl4Ilc3BvcnR5LXByb2R1Y3Rpb24yLnRyYWZmaWNt
YW5hZ2VyLm5ldIITd3d3LmJzZ2V2ZW50cy5jby5ueoIXd3d3LmJ1bGxlcm5ldGJh
bGwuY28ubnqCHHd3dy5oYmNvbW11bml0eWZpdG5lc3MuY28ubnqCHXd3dy5oYmNv
bW11bml0eWZpdG5lc3Mub3JnLm56ghJ3d3cubWVzb2JhbGwuY28ubnqCGHd3dy5u
b3J0aGNvdGVydWdieS5jby5ueoIZd3d3Lm5vcnRoaGFyYm91cnRhZy5jby5ueoIN
d3d3Lm56dHVhLmNvbYIcd3d3LnJhbmdpdGlrZWlnb2xmY2x1Yi5jby5ueoIUd3d3
LnNjaG9vbGdyb3VuZC5jb22CHHd3dy5zaG9yZXJvdmVyc25ldGJhbGwuY28ubnqC
FHd3dy5zcG9ydHNncm91bmQuY29tghh3d3cuc3VucmlzZWNvdHRhZ2UuY28ubnqC
Fnd3dy50YWJsZXRlbm5pcy5vcmcubnqCEXd3dy50dXRhbmdpb3JhLm56MEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw
AHcA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFtOWSEDQAABAMA
SDBGAiEAlNfwTd795HG+XHiXg7iYQMf+SuLBTBRQW+A9z/icROcCIQCXcdapOdaO
A1S2uDffREpJLT/fElGoXigsnnh0lawM9QB1AGPy283oO8wszwtyhCdXazOkjWF3
j711pjixx2hUS9iNAAABbTlkhfsAAAQDAEYwRAIgN4DmfYJ2qlogDrgYJCNv35eo
9fKkCGbuuXxsH0udYngCIE6nX8lRwxqQYwAEuWBn0IYRoVgpvC+hG8oXog3az1ki
MA0GCSqGSIb3DQEBCwUAA4IBAQAbHEOwP3Un7GkZJ0DkXz+LvXYVKKIzgF6t8hIM
NLz8vgx8Z9r2/slnI3fAqHf7Mp2JnMxr1J7AycswQTDeJ6KEQQTK1wfX4Fs9GM1l
t9vgX2o9Wcj+jKiiyOZHZxxS8GYcjmeDsBoHMCqthgOrNLwvvej9MRCLtwp59UT8
Tzrouk8juwzUJVUoND56szcNtFlIofsMQkMLguWi3AengR6yebeFh1MxX6B4paD6
v7+ZKwAIOHdWHOyLMbx6XYVwZOiWoFWLtVDZrXUyyl8IOBRhCg7hkZ/9m72FAl6h
ZDkuSVzR7o1L84S5SPDcnQ6K5vWY8M3f3wikjwSeeg2fW6Eq
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIMuW9aNDVGNNUOtEAqX
qzl74Erkxn8idCtz5ZJU40/OVLvm8YrEuwn2yRPOBq+i/4BGwaLUN5U6cLxPAJK2
g0XpslCVwTsvICcheJcJ7uHKPVElXRT+tarr7KkscK4/CIb+k3UzIFy9+ua9dEBS
yAuOnD5vOZpUkZZU3LifR7T5hOY6bwHAoHPX9A0o2keho7XLoZzbtkMDopXVkuoC
pTmNu1gCMaUq/ttKuj0sT5069BLvT4vpAsmMm+2+IfIYQMwHuqARBYh4dfWLhDdN
bGOhQFO5PrPTocb8tMeR+6bC9UZ4O8G3cImOFjXIGmCbTlh3LU9IpCbcZeT98yOu
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269016312142894835104122402688296800652669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 08:25:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 08:25:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nztua.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20767769820287192606839596188575886946663105228638077064499779376718891911636735684404187346878041455141797056296219495030811326836984261520029042759798143415374087631963212189430202091471803281006627445371961074297204299009638030274497228406146371145580671425381373445429881076128837043418887334323913439229488666996948259800511320906753829725130351972960206556646212476617123267752108025298843202739220256690017849528445846759062354491309335729719573752297664095155031767320120699975058704092455994305762551015419763588045349706410306485498870899624420298155823110828595405464243795386919093250908340184645602881047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d343c925c262b971722fa914ead259a7fde7bd6a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (411 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty-production2.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsgevents.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcommunityfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcommunityfitness.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesoball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcoterugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharbourtag.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangitikeigolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunrisecottage.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tutangiora.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d3964840d000004030048304602210094d7f04ddefde471be5c789783b89840c7fe4ae2c14c14505be03dcff89c44e70221009771d6a939d68e0354b6b837df444a492d3fdf1251a85e282c9e787495ac0cf500750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d396485fb000004030046304402203780e67d8276aa5a200eb81824236fdf97a8f5f2a40866eeb97c6c1f4b9d627802204ea75fc951c31a90630004b96067d08611a15829bc2fa11bca17a20ddacf5922
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001b1c43b03f7527ec69192740e45f3f8bbd761528a233805eadf2120c34bcfcbe0c7c67daf6fec9672377c0a877fb329d899ccc6bd49ec0c9cb304130de27a2844104cad707d7e05b3d18cd65b7dbe05f6a3d59c8fe8ca8a2c8e647671c52f0661c8e6783b01a07302aad8603ab34bc2fbde8fd31108bb70a79f544fc4f3ae8ba4f23bb0cd4255528343e7ab3370db45948a1fb0c42430b82e5a2dc07a7811eb279b7858753315fa078a5a0fabfbf992b00083877561cec8b31bc7a5d857064e896a0558bb550d9ad7532ca5f083814610a0ee1919ffd9bbd85025ea164392e495cd1ee8d4bf384b948f0dc9d0e8ae6f598f0cddfdf08a48f049e7a0d9f5ba12a