codafish.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e5:91:92:65:81:84:61:ae:6e:83:ef:0c:ee:5e:d5:5e:d0 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=codafish.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e5:91:92:65:81:84:61:ae:6e:83:ef:0c:ee:5e:d5:5e:d0
Serial Number (int): 426567303945450826650003349823534105190096
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 24:96:d1:0e:ab:2b:28:91:bf:68:2e:31:31:80:46:8a:9a:98:47:62
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:00:44:69:91:b0:1f:fb:8d:c2:9d:3c:0e:3b:9c:33:ba:8c:d8:26
Fingerprint (sha256): 37:9b:40:88:b2:6f:b8:94:24:70:25:b6:86:b0:51:59:ba:c6:e6:23:c0:0b:2e:04:d2:b5:54:b7:4a:5e:13:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate codafish.net

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for codafish.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coda.fish
codafish.com
codafish.de
codafish.es
codafish.eu
codafish.net
codafish.org
webmail.codafish.net
www.coda.fish
www.codafish.com
www.codafish.de
www.codafish.es
www.codafish.eu
www.codafish.net
www.codafish.org

Other certificates including the domain name codafish.net

(limited to 100 certificates)
crucible.codafish.net
composer.codafish.net
codafish.net
wiki.codafish.net
deployment.codafish.net
codafish.net
bitbucket.codafish.net
support.codafish.net
wiki.codafish.net
bitbucket.codafish.net
bamboo.codafish.net
support.codafish.net
exchange.codafish.net
deployment.codafish.net
wiki.codafish.net
www.upecajme.com
codafish.net
job-board.job-offensive.client.codafish.net
vacialanevera.codafish.net
crucible.codafish.net
deployment.codafish.net
service.codafish.net
support.codafish.net
composer.codafish.net
oemeta.client.codafish.net
deployment.codafish.net
composer.codafish.net
bitbucket.codafish.net
codafish.net
codafish.net
bitbucket.codafish.net
oemeta.client.codafish.net
starsforfree.client.codafish.net
wiki.codafish.net
bamboo.codafish.net
bitbucket.codafish.net
codafish.net
umfrage.erdbaron.com
codafish.net
forms.wimenetwork.com
analytics.codafish.net
hosting.codafish.net
support.easylogic.nu
oemeta.client.codafish.net
exchange.codafish.net
bamboo.codafish.net
crucible.codafish.net
codafish.net
hosting.codafish.net
new.development.codafish.net
events.netwyl-informatik.ch
bitbucket.codafish.net
failover.codafish.net
crucible.codafish.net
codafish.net
bitbucket.codafish.net
support.codafish.net
development.codafish.net
*.codafish.net
exchange.codafish.net
status.codafish.net
status.codafish.net
crucible.codafish.net
new.development.codafish.net
crucible.codafish.net
failover.codafish.net
etmgroup.support.ignitehospitality.com
composer.codafish.net
codafish.net
job-board.job-offensive.client.codafish.net
hosting.codafish.net
*.codafish.net
codafish.net
oemeta.client.codafish.net
bitbucket.codafish.net
exchange.codafish.net
portal.ezireturns.com
crucible.codafish.net
hosting.codafish.net
codafish.net
service.codafish.net
wiki.codafish.net
wesound.client.codafish.net
bitbucket.codafish.net
portal.ezireturns.com
composer.codafish.net
bamboo.codafish.net
codafish.net
oemeta.client.codafish.net
statistic.codafish.net
oemeta.client.codafish.net
positivomusic.client.codafish.net
expense.dyrtyinc.com
exchange.codafish.net
bamboo.codafish.net
hosting.codafish.net
oemeta.client.codafish.net
books.a2zcloud.com
codafish.net
wiki.codafish.net

Certificate

The complete raw certificate details for codafish.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgISBOWRkmWBhGGuboPvDO5e1V7QMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MDgwNjM3NTNaFw0x
OTA5MDYwNjM3NTNaMBcxFTATBgNVBAMTDGNvZGFmaXNoLm5ldDCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAJ9MzTfbDBoxf1yIcqBMHgpJ1EtR9A/wGahe
mZ08dWC8ZCyES/W8l48uz3dh7roPKerN/fgnXxmgWmMWncpyMOAyo0+LgeYtzPRw
Xxs5fwiwb4Hlzp6MaT+jhT2M77oa3DBuIk4FGeLrH7NHEUrEPGV4rvxETF8wljFW
qCq/B6W2xEwVQSdekONsywB5Z4DI2yk7S3uISIqiYULBH/dHuc48rFhPBnCNKm+y
3SuYGOKrvUdV4pmDuRRS+Bxpokq/PK4v/yqZp+qEY2JOlHGATBQbhM5qdaPXOTx+
dcvJmt0W34DmfsWFIXpVbbz3qTEMUpTQUTb9XBjLHt2bBaajiA0CAwEAAaOCA0Ew
ggM9MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJJbRDqsrKJG/aC4xMYBGipqYR2Iw
HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh
MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
LzCB9QYDVR0RBIHtMIHqggljb2RhLmZpc2iCDGNvZGFmaXNoLmNvbYILY29kYWZp
c2guZGWCC2NvZGFmaXNoLmVzggtjb2RhZmlzaC5ldYIMY29kYWZpc2gubmV0ggxj
b2RhZmlzaC5vcmeCFHdlYm1haWwuY29kYWZpc2gubmV0gg13d3cuY29kYS5maXNo
ghB3d3cuY29kYWZpc2guY29tgg93d3cuY29kYWZpc2guZGWCD3d3dy5jb2RhZmlz
aC5lc4IPd3d3LmNvZGFmaXNoLmV1ghB3d3cuY29kYWZpc2gubmV0ghB3d3cuY29k
YWZpc2gub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYB
BAHWeQIEAgSB9gSB8wDxAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo3
2RMAAAFrNgW7HAAABAMARzBFAiA6dZ0xN6hS+yXUfOR/j1XpPxZjpQovZ5A16XJ6
oLH6WgIhANnv8Mixc8JrVZ5EAwbKrK//uoDGoWtlSc4KiHjFQST2AHcAY/Lbzeg7
zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFrNgW67AAABAMASDBGAiEAo6CO
g4idspCXElq+3duFUc5d31T2COKXe7q8k4PnpS0CIQCttjF9664NHV9DYQ3Jm0eH
mJ2BunVn7EtDlXke7vni2DANBgkqhkiG9w0BAQsFAAOCAQEARLONqDrkavi1lqhl
5cxHyH9iKmrqqEgAywBDty//9ALcj300Nx4/wGyQK0z17uQXe1Br1D5BKnlJeDea
13fUAos8P7v8ol2OKjCiWirFPzpB6j6d0FJ4B1jRIaLCjPQdeOCz3TXOoJ7NL9DL
8r4XHP5hvyh5rictVX+mCqRyK5me77J/ivTDSzSnKxhe/vLbYmAvl8Zf2A6TWoME
WZ7r8UPvGyyOB/4taDDsxbEaWddmhRvfOe9mSFU6b0cJHD7v2rz15x/B7ZYCm9G5
hNjjOCQvJ7OW0UN+mZt5VkR8eyKE8XUNZGQWoil57CTX6DxSB5DvgTbM7/uOqi5Y
wX1clg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0zNN9sMGjF/XIhyoEwe
CknUS1H0D/AZqF6ZnTx1YLxkLIRL9byXjy7Pd2Huug8p6s39+CdfGaBaYxadynIw
4DKjT4uB5i3M9HBfGzl/CLBvgeXOnoxpP6OFPYzvuhrcMG4iTgUZ4usfs0cRSsQ8
ZXiu/ERMXzCWMVaoKr8HpbbETBVBJ16Q42zLAHlngMjbKTtLe4hIiqJhQsEf90e5
zjysWE8GcI0qb7LdK5gY4qu9R1XimYO5FFL4HGmiSr88ri//Kpmn6oRjYk6UcYBM
FBuEzmp1o9c5PH51y8ma3RbfgOZ+xYUhelVtvPepMQxSlNBRNv1cGMse3ZsFpqOI
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426567303945450826650003349823534105190096
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-08 06:37:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-06 06:37:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'codafish.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20109762786621554228737728302089757057401803838090325418217805695365328346954009618566891604658779036467973231220155632683110366260328456401583111195089716935324529023825307362466927847079973758480264524640999300063215997616198522256557979128493808061339670215449363198010786852589511090515401228914722066698313808186240134794313738448456592201389337167589445675323973829386283096856662128642993317142507472764204009993903026813494623817342048739533841384901329356254589940836150668176913265172619058745993090541190765517724326065512210163044041244597044084346020343236821516953984554759663213517943125694012796930061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2496d10eab2b2891bf682e313180468a9a984762
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (237 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coda.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codafish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.codafish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coda.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codafish.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b3605bb1c000004030047304502203a759d3137a852fb25d47ce47f8f55e93f1663a50a2f679035e9727aa0b1fa5a022100d9eff0c8b173c26b559e440306caacafffba80c6a16b6549ce0a8878c54124f600770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b3605baec0000040300483046022100a3a08e83889db29097125abedddb8551ce5ddf54f608e2977bbabc9383e7a52d022100adb6317debae0d1d5f43610dc99b4787989d81ba7567ec4b4395791eeef9e2d8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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