masseyrfc.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9c:75:6c:31:f1:aa:56:6c:9c:eb:c9:a2:03:84:f3:e4:9a was issued on by Let's Encrypt.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=masseyrfc.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9c:75:6c:31:f1:aa:56:6c:9c:eb:c9:a2:03:84:f3:e4:9a
Serial Number (int): 314576988491499471835741698154487430243482
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:d4:89:0d:ea:37:b2:62:0c:db:9c:87:80:fa:9f:09:c4:55:8e:9d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 08:38:97:31:bb:ae:11:c7:2d:42:d1:db:45:1e:40:ec:6e:3a:49:d3
Fingerprint (sha256): 3e:6c:16:6d:97:69:8e:e3:3f:8e:8f:63:42:c7:cf:7a:1c:50:e6:98:e7:07:d3:f2:8a:60:a9:66:56:c0:71:d7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate masseyrfc.co.nz

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for masseyrfc.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aklbadminton.com
gonville.school.nz
masseyrfc.co.nz
omusc.org.nz
www.aklbadminton.com
www.aucklandleague.co.nz
www.aurfc.co.nz
www.avalonrugby.co.nz
www.canterburywaterpolo.org.nz
www.centralcitybaseball.org.nz
www.dunedinnetball.co.nz
www.eastcoastexpo.co.nz
www.flaxmillbaymotel.co.nz
www.gonville.school.nz
www.hastingsrugbyandsports.co.nz
www.hawkesbayfarmersmarket.co.nz
www.hawkesbayrugbyreferees.co.nz
www.hbmagpies.co.nz
www.hbrfu.co.nz
www.hbru.co.nz
www.hni.school.nz
www.magpies.co.nz
www.maraetaitennis.co.nz
www.marsdensport.school.nz
www.montressors.co.nz
www.netballchristchurch.org.nz
www.nzsssc.co.nz
www.nzsssc.org.nz
www.ojcc.org.nz
www.omusc.org.nz
www.pngolf.co.nz
www.purc.co.nz
www.rowandale.school.nz
www.rugbyfoundation.co.nz
www.rugbyfoundation.com
www.rugbyfoundation.nz
www.scrfu.co.nz
www.southlandschoolsport.org.nz
www.sporthb.co.nz
www.sporthb.net.nz
www.sporthbchb.co.nz
www.sporthbwairoa.co.nz
www.sportspay.co.nz
www.storans.school.nz
www.takapunarugby.co.nz
www.touchnz.co.nz
www.touchnz.nz
www.turbotouch.co.nz
www.waikatogolf.co.nz
www.waikatogolf.nz
www.waikatotouch.co.nz
www.wellingtonsoftball.org.nz

Other certificates including the domain name masseyrfc.co.nz

(limited to 100 certificates)
www.montressors.co.nz
sporty.org.nz
www.bophockey.co.nz
www.sporty.co.nz
www.hbcricket.co.nz
sporty.org.nz
masseyrfc.co.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.hbcricket.co.nz
kjcc.org.nz
www.sporty.co.nz
bowlsnapier.co.nz
www.sportsground.com
sporty.org.nz
www.darfieldrugby.co.nz
www.sporty.co.nz
bowlsnapier.co.nz

Certificate

The complete raw certificate details for masseyrfc.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst55pVfgn0XZdG/TEap8
LibjtgR++tR9FP9Ru1ihZSOEEwNBESplh4Jb5upesANuYmOFAK0su5pAkX1yFUMq
53SKOfJ7vw/0ldx48CE6OlmKgGHhmRvCImZlhs3v3pPPpHxa6r0xa6nHpepG7uqo
GOXXQgDEWcX0ZAF0/7ufHm7biPJXN+Z50PMVPzIx1Wlkbfv8y8dV41Y0k4r33aqy
YlNbAp0RD8c0w3RaDoB8hYKj1EnZUCo2PAN++mkKRCSSxty8bgj2ZyctHxbHCr+D
BCbYq823y1o1g8ahY3MCsSykAKhLmcqIK5HH9zoCUIerNQcx3FsGBWGqfQ7uAV8S
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314576988491499471835741698154487430243482
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 02:28:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 02:28:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'masseyrfc.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22580124883637050760862307557029504105783153373139233527530198188326411494159190880392465605291746778173919458196370393284828697607314863749423858187738664489001821237618203413251810151941608244022778073475253279043887244415435279216376830108456134046939896431501709629325360610988104309426311973218082193530157587261208042251400765888904579788995869693210322632489857807321853870194139439005103618320807380277818656306703125124115867893899684908745239984562275697251312162341774416621547304807362925632371554348264463757702212481682860778957262074869522915813403135650174882904511380895367789946250758831095192425199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afd4890dea37b2620cdb9c8780fa9f09c4558e9d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aklbadminton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonville.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masseyrfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omusc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aklbadminton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avalonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunedinnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastcoastexpo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gonville.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsrugbyandsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbayfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hni.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maraetaitennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montressors.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballchristchurch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsssc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsssc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ojcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omusc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pngolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rowandale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbyfoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbyfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandschoolsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthb.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthbchb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthbwairoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportspay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storans.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takapunarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnz.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatogolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatogolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e7c8db72a0000040300473045022026a5cdde2ad8652518220e262695712b523c09f591123c862a66d35b101572cc022100e21fb44d33af3912426b4a0b0e39d5ef96c120affbc006c35335e79d969cdf3f00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e7c8db75c0000040300473045022100bd56aa651b044144cf57a34ab26610aacffceab57b2a53c1da4c0b55b582e49f022038c183dab8447d57bdfc3203eef4c904573cf25bd6183ab6649f55aba9d7553f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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