tsg.co.th

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fa:09:50:1b:f5:95:57:fc:d5:d6:40:7e:35:c0:92:42:30 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tsg.co.th

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:09:50:1b:f5:95:57:fc:d5:d6:40:7e:35:c0:92:42:30
Serial Number (int): 346419828528308281586362266762903827923504
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0c:60:f9:2c:d6:83:82:2b:55:6b:ae:b2:99:40:d0:2a:ef:41:fa:79
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 11:c9:b8:b2:47:d0:80:ca:37:ab:54:23:80:4f:3a:60:50:6a:a6:23
Fingerprint (sha256): 36:91:3b:db:62:9e:87:bb:5d:c0:15:31:26:16:a6:34:49:a0:33:1c:8a:1c:83:2e:a9:59:26:d5:9b:01:18:0a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tsg.co.th

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tsg.co.th

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tsg.co.th
www.tsg.co.th

Other certificates including the domain name tsg.co.th

(limited to 100 certificates)
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
www.examen.ssmb.ro
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
tsg.co.th
sni79198.cloudflaressl.com
get-to.de
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
consigsys.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
tsg.co.th
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
www.amicritas.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
tsg.co.th
led-vertising.be
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
disforduck.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
tsg.co.th
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
harikrishnainfotech.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
sni79198.cloudflaressl.com
www.starcast.com
sni79198.cloudflaressl.com

Certificate

The complete raw certificate details for tsg.co.th in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHDTCCBfWgAwIBAgISA/oJUBv1lVf81dZAfjXAkkIwMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMDMxMDE3MTNaFw0x
OTAyMDExMDE3MTNaMBQxEjAQBgNVBAMTCXRzZy5jby50aDCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAOqbTWhcKfrPt0DPndeWWrm2cABrYBEqfgH6KIpH
NHPtBItV5z0cXk/lSM67zl8mjvbQcT61O2F9rqP9aejorpnmoUzV10iKcNaeOzNv
ggIi++OJ8VHL45fmv6o/yBxG3nhqUCmnwl0PQylJdNAP+iP5kJOQWEke1uNAQA+8
tbe0XKJIY/HfiC0fKIcfQK7i+OHuAA4NbV550cTQfQR+IhAI+5HjbzKZDv+Qzjo/
kdvbAqHHiFnts9XRKkA6cZXHZnXqp7KOk5crolKpp4uM60tdNQHagcJaWkaUpqgx
DXQbwhA5brUVkQgfGvTK/EhsNBM+vAKYclGeGalguwBVF0wAaQE2PMj0YoG3Oat3
SHRWQ7mFs0WbcSefQvjCv8t7vAWhqSmj2wp8QsMNTfSzOByLltIqUCK443Mx/eSv
PI9n3Bb/DXdQoE8Vw0m+Bm4ZXiTj5QsAyfVkugCxOnRC8Ga6whV4jBhwNR4tp/Gc
qVcE+oq/SFHY52fl+pdt5k5kesUgDripURKwvXwWBgq7/YwZctTUIL+8cEDcwbA5
xGfIUySHevEj3kyrcNurfmqHXDqNXhSIsjaaCYgnQtDT9O9UBUEIEQyVYj2ilC7v
hQiadMNeFIXJMRYLTwWVMcJla2IMRWu3rjZ0pMr44bCKDxH366uLhTPGid6m5LBA
VOp7AgMBAAGjggMhMIIDHTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAxg+SzWg4Ir
VWuusplA0CrvQfp5MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIJdHNnLmNvLnRogg13d3cudHNnLmNv
LnRoMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUF
BwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBv
biBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRo
IHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5j
cnlwdC5vcmcvcmVwb3NpdG9yeS8wggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgDi
aUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWbZSo6iAAAEAwBHMEUC
IQCiK/Bn+TfRZDouz7x3vu8tZMtFq+4/sYrtmafC/0jLBQIge9kdUic8viQQUtaT
TLEKQr3NfLCf/1bo+KnupB5p+hQAdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTD
DPTlRUf0eAAAAWbZSo7cAAAEAwBIMEYCIQD5Qh8mWdcgkCpnYDEzhLTnZMSwAp7r
RPBQ6XNrv/pE/wIhAJEV8qMUEigr5NBFvUU/rsexCa77TGAke5MkCcBJtnAmMA0G
CSqGSIb3DQEBCwUAA4IBAQCHDZwryXQsSKKnsWwyhxjMfv7IV5yynJKeIS+3tRly
WraBUfgZ4vdm0mB+3Q+qf2lKaBwTggPUXOUAWOB8iHzaUmpDb+lAUVA8uckzmXUr
zb8vLnK9i2WpIYGWUYEwLEuClHY/RAxAKvyLrcCs/GsqT4ErkGUcDUe+ejg4WnQy
BvEpVW8WGksmHXsUP4M/YCNky88RBc9SNiCev1I0h1+5wiPObVjIjQmJOYCEUhAe
U121qq9M7YOxNHrAKaKZSfQYchGviVFqepLjBOXZthVBE4yMzuRk3dd/13ckn1Zf
azy5MgUlP32GO5f9waW8wAd2laj9k0SGiydd08NS5i5G
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346419828528308281586362266762903827923504
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-03 10:17:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 10:17:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tsg.co.th'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 957111627570776581068223852604393514177220451724794930811825282407320641822189061609678215961515620563940122647409053396160045931079020239689965841447927389567994034643958268175798746167841052788435481962738086840018622009518236224336297129989235255391575153596148181735853806642679883950308438723374416927737265040267731280249607811449193521421364046095237788397238457991022170827970631393917274161381373390371332019663856865491125448593185188672734003796241808529994108207633509694816624006618755379191202588341920409050847476834243258681521710898847135231747961193360536283692003171324048483077037880253885713852988081865294498732103671930657915721868052123103303188929532556773162396059490330287675261819711431691761193580810153245157540540992459365853350575749280154401831823252368192879524582146618270700438228667290259199672675243219903636608187087403835909799091816726665243985158109357473604538836820853987823356663957945398472851081257552284318886140510993765248755427186468777744682251367509243152987259304670264564056067151106238432331525438980021724922743707151326915606579243452630650550332933997701704825067724029951366116200462680089748861591057964830175829999048368876829517268276848399030027334214720239133120588411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c60f92cd683822b556baeb29940d02aef41fa79
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsg.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsg.co.th'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166d94a8ea20000040300473045022100a22bf067f937d1643a2ecfbc77beef2d64cb45abee3fb18aed99a7c2ff48cb0502207bd91d52273cbe241052d6934cb10a42bdcd7cb09fff56e8f8a9eea41e69fa14007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166d94a8edc0000040300483046022100f9421f2659d720902a6760313384b4e764c4b0029eeb44f050e9736bbffa44ff0221009115f2a31412282be4d045bd453faec7b109aefb4c60247b932409c049b67026
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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