sp.usatoday.com

Issued by R3

About this certificate

This digital certificate with serial number 03:8b:09:32:cd:50:4a:79:3f:46:69:ba:3b:22:4d:e1:7d:dd was issued on by Let's Encrypt.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sp.usatoday.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:09:32:cd:50:4a:79:3f:46:69:ba:3b:22:4d:e1:7d:dd
Serial Number (int): 308648333628351447564810845523544044043741
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 66:4d:68:34:06:95:a8:96:18:cf:3b:d5:0a:cd:07:f0:1d:8b:90:c8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4c:46:33:cf:f6:9d:97:15:fa:1e:33:67:a0:d9:a4:1b:88:0c:cc:f9
Fingerprint (sha256): 31:04:18:8c:0b:aa:da:4d:e1:42:e9:23:84:f7:c9:08:44:2d:ae:a2:1d:7a:f5:e8:5c:b5:52:e6:42:6e:fc:00

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sp.usatoday.com

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sp.usatoday.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sp.ardmoreite.com
sp.news-star.com
sp.postcrescent.com
sp.poughkeepsiejournal.com
sp.press-citizen.com
sp.pressconnects.com
sp.publicopiniononline.com
sp.pushsquare.com
sp.recordonline.com
sp.redding.com
sp.reporternews.com
sp.rgj.com
sp.ruidosonews.com
sp.scsun-news.com
sp.sctimes.com
sp.sheboyganpress.com
sp.shreveporttimes.com
sp.stargazette.com
sp.statesmanjournal.com
sp.stevenspointjournal.com
sp.tallahassee.com
sp.tcpalm.com
sp.tennessean.com
sp.theadvertiser.com
sp.thecalifornian.com
sp.thedailyjournal.com
sp.thegleaner.com
sp.theleafchronicle.com
sp.thenews-messenger.com
sp.thenewsstar.com
sp.thenorthwestern.com
sp.thespectrum.com
sp.thestarpress.com
sp.thetimesherald.com
sp.thetowntalk.com
sp.timesrecordnews.com
sp.todaysgolfer.co.uk
sp.upstateparent.com
sp.usatoday.com
sp.vcstar.com
sp.visaliatimesdelta.com
sp.wausaudailyherald.com
sp.wisconsinrapidstribune.com
sp.wisfarmer.com
sp.wunderground.com
sp.ydr.com
sp.yorkdispatch.com
sp.zanesvilletimesrecorder.com

Other certificates including the domain name usatoday.com

(limited to 100 certificates)
ydr.com
gannett.com
ugaforum.usatoday.com
gannett.com
classroom.synonym.com
cdn-le4.arkadiumhosted.com
hoosiertimes.com
columbiatribune.com
amestrib.com
southernkitchen.com
golftips.golfweek.usatoday.com
recordnet.com
echo-pilot.com
reporternews.com
gadsdentimes.com
*.scsun-news.com
the-daily-record.com
*.usatodaynetwork.com
chiefsforum.usatoday.com
the-review.com
examiner-enterprise.com
coloradoan.com
dnj.com
mycentraljersey.com
journalstandard.com
gannett.com
tcpalm.com
cantondailyledger.com
siskiyoudaily.com
coloradoan.com
tricountyindependent.com
*.gannett.com
secure17.nexternal.com
adelnews.com
sussexcountian.com
reviewatlas.com
jobs.thejobnetwork.com
news-press.com
providencejournal.com
scsuntimes.com
games.usatoday.com
hollandsentinel.com
marionstar.com
mt-edge-b.3scale.net
classroom.synonym.com
savannahnow.com
gannett.com
san-005.ceros.com
dnj.com
paris-express.com
gannett.com
patriotledger.com
dailyamerican.com
progress-index.com
cdn-le5.arkadiumhosted.com
*.scsun-news.com
secure12.nexternal.com
mtshastanews.com
delawareonline.com
journalstandard.com
rgj.com
databases.floridatoday.com
giantsforum.usatoday.com
secure17.nexternal.com
draftwire.usatoday.com
ftw.usatoday.com
gannett.com
wickedlocal.com
br.bikeradar.com
the-leader.com
sentinel-standard.com
ydr.com
wickedlocal.com
ndinsider.com
gannett.com
newarkadvocate.com
billswire.usatoday.com
gannett.com
blackmountainnews.com
cdn-le4.arkadiumhosted.com
*.gannett.com
mortontimesnews.com
celticswire.usatoday.com
gosanangelo.com
marionstar.com
duckswire.usatoday.com
getcreative.usatoday.com
chillicothetimesbulletin.com
gainesville.com
timesonline.com
cdn-le4.arkadiumhosted.com
gannett.com
gannett.com
hockessincommunitynews.com
lebronwire.usatoday.com
classroom.synonym.com
cdn-le4.arkadiumhosted.com
gannett.com
ruidosonews.com
fightingirishforum.usatoday.com

Certificate

The complete raw certificate details for sp.usatoday.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKevuo5Yh7F43ea/RVJG
e8ywYZ2MLQ4ztNFEDFTteuAoShcVCcW7gH5bi+OaiTfTEzlbcgh2PSLyuKjcUrlA
+iIlqezOrWLw0Or0wskJkUiNoLiG3pTSxSASS+9GlAwiOhyySyK57e7XqkY94UY7
tKwTER1wR1AXZDYp1Pe/ccjx7FaCMgl20RzgDpvgKEsVmY/yiiOchsSzgXS6jpyw
lRGzjP6iEvBGM4V4hVyi4CDnzkF4zReuSxwEsvdMINcv+tIE56mGmNYTCbY2lZOy
J4TVE8B9GzziBJj2ZdsytK6+uLVguLKQJSutpPw+lw8t1PaFgPvcaL8WweTZw3U5
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308648333628351447564810845523544044043741
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-17 17:06:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-16 17:06:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sp.usatoday.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25330350258828930045762143148092133528600223962139670389732529233836121426588959326097947668374355300943412713563096545181856778518882859136144267500126563810098957729493191899286574556022784638416228053843246803404196948043926210457262594391536863716343839854340017262207214021366830541729197056264034975148007464419518959723978043064770533643840578890204675925166184075766141324063142179173984581968726668681124995031698859125337269462969751013676544398434574999757465250776618418400985544956784629079402367385682553467778230249824788815463212763414350417259824182028905452495777256402203577747643129617506060548361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							664d68340695a89618cf3bd50acd07f01d8b90c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1035 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.ardmoreite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.news-star.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.postcrescent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.poughkeepsiejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.press-citizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.pressconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.publicopiniononline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.pushsquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.recordonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.redding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.reporternews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.rgj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.ruidosonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.scsun-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.sctimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.sheboyganpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.shreveporttimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.stargazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.statesmanjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.stevenspointjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.tallahassee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.tcpalm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.tennessean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.theadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thecalifornian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thedailyjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thegleaner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.theleafchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thenews-messenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thenewsstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thenorthwestern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thespectrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thestarpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thetimesherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thetowntalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.timesrecordnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.todaysgolfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.upstateparent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.usatoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.vcstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.visaliatimesdelta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.wausaudailyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.wisconsinrapidstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.wisfarmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.wunderground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.ydr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.yorkdispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.zanesvilletimesrecorder.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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