ssl.circlesoft.net

Issued by R3

About this certificate

This digital certificate with serial number 04:a4:91:ed:7d:1d:d1:42:b2:35:20:16:9e:56:74:ce:c1:31 was issued on by Let's Encrypt.

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssl.circlesoft.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a4:91:ed:7d:1d:d1:42:b2:35:20:16:9e:56:74:ce:c1:31
Serial Number (int): 404449423073482760317298495445075825180977
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4a:3a:0b:d9:1f:83:61:f0:e8:37:b5:a7:ac:e0:a7:0e:16:75:25:3c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9e:b3:89:1d:14:2c:e7:08:e9:cd:ea:66:aa:bf:d4:fb:8c:c7:c9:fe
Fingerprint (sha256): 41:39:01:0c:e6:df:6c:3e:09:34:ec:83:af:52:03:27:5f:9e:af:22:4d:a1:1b:50:14:44:a0:03:72:97:62:47

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl.circlesoft.net

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.circlesoft.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dearreader.co.nz
devonportbookshop.com.au
donnybooks.com.au
dorothybutler.co.nz
dunmore.co.nz
elthambookshop.com.au
epicbooks.co.nz
escapehatchbooks.com.au
everestbooks.com.au
hamilton.poppiesbooks.co.nz
hares-hyenas.com.au
hillofcontentbookshop.com
inkbookshop.com.au
ironbirdbookshop.com.au
jasonbooks.co.nz
jeffreysbooks.com.au
johnreedbooks.com.au
kimberleybooks.com.au
shop.farawaytreebookshop.com.au
shop.fullersbookshop.com.au
shop.goodbookshop.nz
shop.iwanbookshop.com.au
shop.oscarandfriends.com.au
ssl.circlesoft.net
www.cowlick.com.au
www.dearreader.co.nz
www.devonportbookshop.com.au
www.donnybooks.com.au
www.dorothybutler.co.nz
www.dunmore.co.nz
www.elthambookshop.com.au
www.epicbooks.co.nz
www.escapehatchbooks.com.au
www.everestbooks.com.au
www.hamilton.poppiesbooks.co.nz
www.hares-hyenas.com.au
www.hillofcontentbookshop.com
www.inkbookshop.com.au
www.ironbirdbookshop.com.au
www.jasonbooks.co.nz
www.jeffreysbooks.com.au
www.johnreedbooks.com.au
www.kimberleybooks.com.au

Other certificates including the domain name circlesoft.net

(limited to 100 certificates)
timeout.circlesoft.net
moransbooks.circlesoft.net
johnreedau.alpha.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
neighbourhoodbooks.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
neighbourhoodbooks.circlesoft.net
booksatstones.circlesoft.net
aesopsattic.com
bookpassion.beta.circlesoft.net
www.teahousebooks.circlesoft.net
torquaybooks.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
childrensbookshop.beta.circlesoft.net
thebookroomatlennox.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
booksatstones.circlesoft.net
teahousebooks.beta.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
*.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
booksatstones.circlesoft.net
*.circlesoft.net
torquaybooks.circlesoft.net
moransbooks.circlesoft.net
pageblackmore.beta.circlesoft.net
ballaratonydiard.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
*.circlesoft.net
metropolis.beta.circlesoft.net
bookpassion.beta.circlesoft.net
boobookonowen.beta.circlesoft.net
*.beta.circlesoft.net
bookpassion.beta.circlesoft.net
timeout.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
wholesale.circlesoft.net
neighbourhoodbooks.circlesoft.net
*.alpha.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
childrensbookshop.beta.circlesoft.net
abacus.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
ballaratbridge.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
circlesoft.net
ssl.circlesoft.net
vivabooks.beta.circlesoft.net
ssl.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
childrensbookshop.beta.circlesoft.net
*.beta.circlesoft.net
ironbirdbookshop.circlesoft.net
matildabookshop.beta.circlesoft.net
johnreedau.beta.circlesoft.net
abacus.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
paradoxbooks.beta.circlesoft.net
cookthebooks.beta.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
pottspoint.beta.circlesoft.net
cowlickbooks.beta.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
area52.circlesoft.net
abacus.circlesoft.net
jasonbooks.circlesoft.net
abacus.beta.circlesoft.net
retail.dev.circlesoft.net
booksatstones.circlesoft.net
moransbooks.circlesoft.net
pageblackmore.beta.circlesoft.net
abacus.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net

Certificate

The complete raw certificate details for ssl.circlesoft.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6t/r+smyIsCdrE8EqqLe
JYu8a0jRRTL8lCG9nDfIA5unSWxnydbOihZ++sD0FIYKvxWcn4mSAmIUJl0mVASn
O4fcQdwXU3sUKH8uVAE2b4o99O2I5MvHxad1aseaMjVb7xXhhhXOxqLwVKmgqRjA
wD3vz5Z57v11ecofk9S9s+mFvHQMjbt5xuQ9ffQ58vI3UWGItTW3SWIW+g1VnylG
UZYs8HS+XZq4v77HJavQ37DMWnGA2ggAUwcRGUG2wxa8XFkpsKPUcRNQG+MfbPwB
BMjreW/ZtveWr0fvOVIJTW8lT7lNVA/kabrEXprER8JuLXKJoar8tt6ihM0eUnHn
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404449423073482760317298495445075825180977
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-28 23:06:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-26 23:06:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.circlesoft.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29650183314811614883338962298807053181449736856112122935797566459599590367534269466126669505187353072573844279435364157787272434631022028600682894880263260457533639845870955104791985010906222179511011018646745552313350270701864615597537906487914889594787745179012898737945353011461496534495619106017696102658629930930076727644189789833286244075629613288722537831169196968349995776753444818385080738489705479609890018137683124777524435557660877217545393538898177830397602586879647036520091418820830210251026849718144178149809517470829893042140411340110151487060728922874668282468671335231921425087405157799311032051587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a3a0bd91f8361f0e837b5a7ace0a70e1675253c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1039 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dearreader.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonportbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donnybooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dorothybutler.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunmore.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elthambookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escapehatchbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everestbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamilton.poppiesbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hares-hyenas.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillofcontentbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ironbirdbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jasonbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeffreysbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnreedbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimberleybooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.farawaytreebookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fullersbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goodbookshop.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.iwanbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.oscarandfriends.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.circlesoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cowlick.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dearreader.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devonportbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donnybooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dorothybutler.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunmore.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elthambookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escapehatchbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.everestbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamilton.poppiesbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hares-hyenas.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillofcontentbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inkbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ironbirdbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jasonbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeffreysbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnreedbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kimberleybooks.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c2000001787b4de48e000004030046304402205a1f183031ddd3a480d7294fa4dc96691e932d5acb8109dc1e4b94a91e70334d022065db8d4c932c825b9437e62380a350b92cd0128dd57d6f841dee25811285c2b0007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001787b4de4840000040300473045022100f90c4e308944f0de6605d741376ae520224b69b5e2d1bc32c24f969159c9fd4e02207e6a62ca585364286b99988dcb3d7b77d5b2e3fbe1e2e4283e8c8bb82868def6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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