atpwiki.atonarp.com

Issued by R3

About this certificate

This digital certificate with serial number 04:bc:dd:3f:11:0e:1b:95:7b:91:14:a6:70:fa:9b:d9:76:50 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=atpwiki.atonarp.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bc:dd:3f:11:0e:1b:95:7b:91:14:a6:70:fa:9b:d9:76:50
Serial Number (int): 412716315555866666165680103103512054429264
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ac:0a:3d:bb:98:bc:10:29:00:a7:4c:39:89:fd:23:ec:36:87:31:9b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:4d:57:9d:9f:23:de:d8:80:ad:9b:38:28:34:a4:f7:0f:7d:13:8f
Fingerprint (sha256): 3e:3d:02:69:d0:17:28:98:1d:61:ae:a9:1b:96:de:da:73:e7:b8:80:44:fb:ca:82:99:d6:93:f6:18:cd:aa:cb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate atpwiki.atonarp.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atpwiki.atonarp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atpwiki.atonarp.com
blrvpn.atonarp.com
builds.atonarp.com
code.atonarp.com
codereview.atonarp.com
inv.atonarp.com
inventory.atonarp.com
kb.atonarp.com
ldap.atonarp.com
network.atonarp.com
phw.atonarp.com
projects.atonarp.com
python.atonarp.com
sonarq.atonarp.com

Other certificates including the domain name atonarp.com

(limited to 100 certificates)
atpinfo.atonarp.com
hrms.rzpeople.in
myhrms.fusionhawk.io
hr.crm.dunlark.com
people.nuronics.com
*.atonarp.com
people.trustea.org
hrms.digitaldhi.com
people.igenero.com
atpinfo.atonarp.com
myhr.briltechgroup.com
hrms.eedgetechnology.com
people.kovenantz.com
hrms.stellaripe.co.uk
atonarp.com
atonarp.com
notebook.aos.atonarp.com
hr.fraxus3d.com
myhrms.fusionhawk.io
atonarp.com
hrms.rzpeople.in
people.hanatechpvt.com
zohopeople.roundhill.com
hrms.rzpeople.in
portal.zero-pixels.com
atpinfo.atonarp.com
people.toplineindia.co.in
hr.ennovamind.com
myhrms.spidersoftech.com
atonarp.com
people.pawsome.tech
hrm.autojagat.com
hrms.stellaripe.co.uk
timesheet.remoteadmin.net
hrms.rzpeople.in
people.kovenantz.com
people.igenero.com
hrms.stellaripe.co.uk
hr.ennovamind.com
myhrportal.kidzbrains.in
people.kovenantz.com
atonarp.com
www.atonarp.com
people.uwa.edu.in
hrms.hexacorp.com
hrhub.ftxinfotech.com
people.igenero.com
atonarp.com
people.kovenantz.com
atpinfo.atonarp.com
atonarp.com
myhr.briltechgroup.com
hrm.instyn.com
people.kovenantz.com
people.kovenantz.com
people.igenero.com
people.kovenantz.com
hrms.hexacorp.com
people.igenero.com
*.atonarp.com
hrms.rzpeople.in
hr.tazapay.com
hrms.myverkoper.com
hrms.rzpeople.in
people.igenero.com
www.atonarp.com
people.igenero.com
people.upconnect.in
hrms.rzpeople.in
yvr.peopletimetracker.tk
e-office.upsad.co.in
ja.atonarp.com
people.nuronics.com
ja.atonarp.com
people.igenero.com
tataorg.ashwinsubers.epizy.com
atpwiki.atonarp.com
hrms.alternative-path.com
people.igenero.com
myhrms.excelsiorbilling.com
hrms.thinkdigits.co.in
*.atonarp.com
www.atonarp.com
hr.tazapay.com
people.kovenantz.com
people.kovenantz.com
people.contrivers.in
www.atonarp.com
atpwiki.atonarp.com
hrm.autojagat.com
ja.atonarp.com
ja.atonarp.com
people.kovenantz.com
hr.fraxus3d.com
atonarp.com
people.nuronics.com
*.cloud4.cloud3.aosservices.atonarp.com
people.igenero.com
node1.nats.aosservices.atonarp.com
hrhub.ftxinfotech.com

Certificate

The complete raw certificate details for atpwiki.atonarp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgISBLzdPxEOG5V7kRSmcPqb2XZQMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjAyMjAxMjQxMjdaFw0yMjA1MjExMjQxMjZaMB4xHDAaBgNVBAMT
E2F0cHdpa2kuYXRvbmFycC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZHOWr7SXNXT24RACtTrcG/fvGNjMi047WYnvH3lfpoXRVn9tSlDCm4ZuQ
qnhxadlmk8UjCZNz16tcOr8ZK8Q4W0Z20HqJBkhqujpDC49Yzqi8ma+v7rTDD9NT
FAZcCjuQFuTFPR6fMf1+8LG9r0LOqVoK8+dYJTLs1E3pKt1/1rlm89lEeeqtrz01
am35RFWaaTYzaigB6l14R6qiDqQgD04jXzDUSp+1lddSsjnT6bqJGt3EfWh2Bkwp
4As3rlVm4ilI8UD68z+xKeu9Waawrm0vPP5ObkP5p2tF1ZwUOi+Glv3v7B9xTlRK
Y927o9B1/4619UvogEtjEjo7LkxTAgMBAAGjggNTMIIDTzAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFKwKPbuYvBApAKdMOYn9I+w2hzGbMB8GA1UdIwQYMBaAFBQusxe3
WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0
cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j
ci5vcmcvMIIBIgYDVR0RBIIBGTCCARWCE2F0cHdpa2kuYXRvbmFycC5jb22CEmJs
cnZwbi5hdG9uYXJwLmNvbYISYnVpbGRzLmF0b25hcnAuY29tghBjb2RlLmF0b25h
cnAuY29tghZjb2RlcmV2aWV3LmF0b25hcnAuY29tgg9pbnYuYXRvbmFycC5jb22C
FWludmVudG9yeS5hdG9uYXJwLmNvbYIOa2IuYXRvbmFycC5jb22CEGxkYXAuYXRv
bmFycC5jb22CE25ldHdvcmsuYXRvbmFycC5jb22CD3Body5hdG9uYXJwLmNvbYIU
cHJvamVjdHMuYXRvbmFycC5jb22CEnB5dGhvbi5hdG9uYXJwLmNvbYISc29uYXJx
LmF0b25hcnAuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYK
KwYBBAHWeQIEAgSB9ASB8QDvAHUA36Veq2iCTx9sre64X04+WurNohKkal6OOxLA
IERcKnMAAAF/F12k7AAABAMARjBEAiBwnNrojY3T7qI1ZVpi5Ej7FWL8rJx5jh29
HbCLu0MIuwIgKw4F8QIyO3EAyXS8wqGydNQtchdqeIayUQAdTg30posAdgBGpVXr
dfqRIDC1oolp9PN9ESxBdL79SbiFq/L8cP5tRwAAAX8XXaUTAAAEAwBHMEUCIQCf
xSxMBolmC5qAQW9Shfgo6jBYKb3w0rVSnEjuVKtWWQIgcWWIp/9MhviZEJCddI/e
p5XHr3QpFh0hmLUIuyQ3J8QwDQYJKoZIhvcNAQELBQADggEBABkzHj0BHa221Vc5
w03QWcxWD9Z//eiB75bzBxBuBkc3BVweU5qBrR8feubCJ4t3JTfPqKPEH4D/Yw4k
XDVWuDU89NPB82QyjnITV0FTc/9iDNwNV1qn2CmTK0GY2sZ6bwgWTsj2D8WUCMUL
KFhK2gzYBsq9X9ZBd3ED+IcS5S4trSxAfb8Ol+8rAPM1GoJjVf39RlmB1Bkvh5WA
EZmA6zR/rE2VE68hkUOilT5xgtiy1qcndCvvyyd63SjjwjaDZYhQeIi/JQZOIrgk
JGyJb8F8+QsB1Vgf3pAsagA339t+hGd8r9B2xHQ/KDUXpJNSsePl530PRTzkaZU4
0IbVyG0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Rzlq+0lzV09uEQArU63
Bv37xjYzItOO1mJ7x95X6aF0VZ/bUpQwpuGbkKp4cWnZZpPFIwmTc9erXDq/GSvE
OFtGdtB6iQZIaro6QwuPWM6ovJmvr+60ww/TUxQGXAo7kBbkxT0enzH9fvCxva9C
zqlaCvPnWCUy7NRN6Srdf9a5ZvPZRHnqra89NWpt+URVmmk2M2ooAepdeEeqog6k
IA9OI18w1EqftZXXUrI50+m6iRrdxH1odgZMKeALN65VZuIpSPFA+vM/sSnrvVmm
sK5tLzz+Tm5D+adrRdWcFDovhpb97+wfcU5USmPdu6PQdf+OtfVL6IBLYxI6Oy5M
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412716315555866666165680103103512054429264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-20 12:41:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-21 12:41:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'atpwiki.atonarp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27407961895680999314795750430318739562118891196352115208953479937117500815442350774313256912516647317912237039301821547144275818807583478174092617567055739803266012492508317489164326274618221034222467616410954264371631858418205757367979442157277001419763412420225974610296574880254785283025363686968795471699736333437549364471640770150799315202402268402486197519739614060594647702841094783082592892585906523387881760473345553218579605307624616099167089448308547280174151335031283830695977495714537812914812934208731513435587664463383703152010748837185937047269952520108860500989158092252217530144910789772781284117587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac0a3dbb98bc102900a74c3989fd23ec3687319b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (281 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atpwiki.atonarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blrvpn.atonarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'builds.atonarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'code.atonarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codereview.atonarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inv.atonarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inventory.atonarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kb.atonarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap.atonarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'network.atonarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phw.atonarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.atonarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'python.atonarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonarq.atonarp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017f175da4ec00000403004630440220709cdae88d8dd3eea235655a62e448fb1562fcac9c798e1dbd1db08bbb4308bb02202b0e05f102323b7100c974bcc2a1b274d42d72176a7886b251001d4e0df4a68b00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017f175da51300000403004730450221009fc52c4c0689660b9a80416f5285f828ea305829bdf0d2b5529c48ee54ab56590220716588a7ff4c86f89910909d748fdea795c7af7429161d2198b508bb243727c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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