sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:67:e9:97:01:74:5b:16:75:e8:6c:0f:55:f0:11:2c:81:99 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:67:e9:97:01:74:5b:16:75:e8:6c:0f:55:f0:11:2c:81:99
Serial Number (int): 383808721709242239224954094891107376464281
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e0:9b:00:0e:d3:4e:62:36:3c:83:b9:ee:13:c7:24:7e:86:0b:b1:16
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3a:c1:1a:52:61:dd:31:65:da:36:cf:f0:60:c4:f8:db:9c:ed:68:54
Fingerprint (sha256): 36:d8:bb:56:0c:3c:d9:a7:fa:79:e7:b9:c1:d5:fe:f1:38:6f:f5:9e:49:c6:34:e6:a7:0f:d6:29:36:69:c0:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

athleticstauranga.co.nz
automobile.cc
bbafc.org.nz
bopblokartclub.nz
bowlswaikanae.com
cambridgenetball.co.nz
cambridgerowing.org.nz
christchurchbaseball.co.nz
clubsmart.co.nz
communityconnect.nz
curling.nz
curling.org.nz
cyclingchb.co.nz
dunedinnetball.co.nz
gisbornethistle.co.nz
harbourrugby.co.nz
hbaquatic.co.nz
hbaquatic.nz
hbaquatic.org.nz
hbaquaticcentre.co.nz
hbaquaticcentre.nz
hbaquaticcentre.org.nz
hbfutsal.co.nz
hbrac.co.nz
hbrac.nz
kaierau.co.nz
kapimananetball.org.nz
kokkino.co.nz
manurewatennisclub.co.nz
myrugbyleague.co.nz
mysoftball.co.nz
nrf.org.nz
otakarofc.co.nz
ourfc.co.nz
pafc.co.nz
pukekohenetball.co.nz
raglansportfishing.co.nz
schoolboss.co.nz
schoolsportaoraki.co.nz
softballwbop.org.nz
southernfootball.co.nz
sporty.org.nz
taranakirefs.co.nz
trolleyads.co.nz
vknz.co.nz
waipukuraugolfclub.co.nz
waiukunetball.org.nz
weirrosebowl.co.nz
whakatanehockey.co.nz
whakatanenetball.co.nz
wpkgolf.co.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)
sporty.org.nz
www.sportycrm.com
sporty.org.nz
sporty.org.nz
www.giafc.co.nz
sportycrm.com
sporty.org.nz
fdmc.school.nz
arrowtownrugby.co.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmRuQNkFwJbJa3880HW1
dQGDydkEIyy/VBZCGZVdq5Fs1onOt1y+NKm0XRgQFi2zCdQ63X5XlBZUwD1vWqzn
HFAYHPXdiXJpR2qG/KZknuxYG1VisvPd9uk2OkQiZGK2yThTQaOjPEKxkMSHQ7Mj
N5+Zxuabt+v3fT/v8B7YSrV2nNZPT+F9CtlpVFqSZCB4jwhG4hsGNz0sJNBgT0Cy
hketmsUd58xnLnjYManA83XU2+oKar8YTSEB6w6gdkATc/FHeMLblmtRJm3DumY/
cc/jzQZRRm/r3kzfYPxl7YjmxVpunee7pZCqqRA5htA3NFoG06pczDarIstnOOo2
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383808721709242239224954094891107376464281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 00:37:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 00:37:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24034802156171557039004898577883519663115708084303013463644578600325986233325208208817327623396061695214365983770889388126007141784942024859467274750122570165914655158977769801825184525149636083061746630719905027034488747822734409444035792384278482056745233236144888083410246404109119658871084332793176174171013138942521680845486266382845958042800962644088719354229192401553915115173171078962314053669550472826519063386921628158864105037969306996957974771901942399220229209791363805049005192630130606190954820238390991542083535367614862463803893653386928899687467987639518554265974065528140480937199978032744901523033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e09b000ed34e62363c83b9ee13c7247e860bb116
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (981 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticstauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automobile.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bopblokartclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswaikanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgerowing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubsmart.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communityconnect.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curling.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingchb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunedinnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisbornethistle.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbaquatic.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbaquatic.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbaquatic.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbaquaticcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbaquaticcentre.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbaquaticcentre.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbfutsal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrac.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaierau.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapimananetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kokkino.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewatennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrf.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otakarofc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pukekohenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raglansportfishing.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolboss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballwbop.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taranakirefs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trolleyads.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vknz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waipukuraugolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiukunetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weirrosebowl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whakatanehockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whakatanenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpkgolf.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187e467fab60000040300483046022100b01068aa76fc1b3f76028270d81f57c6588c7927705190698cb9b23dd02e83f1022100ed95e825d183955d6b561f1eda5e0e6b37c549a72a35b34304b8d1405e6822f6007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187e467fae30000040300463044022001d4cb2fa26ee3fd99445b9f1a354362a14f6c98b961e22691b89cb44db892fe02207a36bbeaf8eb8806d59c082baecc9f52126cf9a217aec969fa4420642ae9bb85
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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