grupo2s.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:33:84:e7:c0:99:59:6b:c8:ad:9b:05:dc:38:81:ce:a1:b8 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=grupo2s.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:84:e7:c0:99:59:6b:c8:ad:9b:05:dc:38:81:ce:a1:b8
Serial Number (int): 278867919930638759251325013964616702534072
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f3:96:93:15:a3:e0:1f:b4:f4:38:40:eb:65:d0:91:ca:fa:3f:16:f4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:36:23:9b:88:0e:1c:35:eb:b8:e7:d0:1c:5e:64:f4:53:51:fb:ae
Fingerprint (sha256): 41:db:6b:0e:08:49:b8:f4:58:a1:69:fd:be:4e:8b:87:71:60:25:94:90:01:1e:90:e0:60:cd:d0:b9:16:b7:f1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate grupo2s.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grupo2s.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chooselatam.com
chooselatam.maximanet.net
grupo2s.com
grupo2s.maximanet.net
mail.chooselatam.com
mail.grupo2s.com
mail.meetinecuador.com
mail.reginacasale.com
meetinecuador.com
meetinecuador.maximanet.net
reginacasale.com
reginacasale.maximanet.net
www.chooselatam.com
www.chooselatam.maximanet.net
www.grupo2s.com
www.grupo2s.maximanet.net
www.meetinecuador.com
www.meetinecuador.maximanet.net
www.reginacasale.com
www.reginacasale.maximanet.net

Other certificates including the domain name grupo2s.com

(limited to 100 certificates)
grupo2s.com
maximanet.net
grupo2s.com
grupo2s.com
grupo2s.com
grupo2s.com
grupo2s.com
grupo2s.com
grupo2s.com
grupo2s.com
*.grupo2s.com

Certificate

The complete raw certificate details for grupo2s.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHGzCCBgOgAwIBAgISAzOE58CZWWvIrZsF3DiBzqG4MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTgxNTUwMTFaFw0x
OTEwMTYxNTUwMTFaMBYxFDASBgNVBAMTC2dydXBvMnMuY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfIcyodFDeB+qEcYAjhLgBR9OG1A2io6rhr0
DpGlTSWYG36WMLq8te5l1Ce/2a7Fq4Kn7a18mC8hXAOvhKFmT9TvsRsnkoKosoNV
vg1Tyl3ZKBYj/dqcYQEqr5mBAa5rIBOiF+VDs/5TbKgcG0ztuPQOAvgpDWO5OEpd
w/ges6Mj0LlWQUdIltOLtvvZL3DIdyL+ThQHiAAXoXHytinVQlto9Qw4pxO+jbDR
+MzSAeLHaZrqB8T7sHABemRe+gAGSQJpg73DJRrOfdF1vzvyNta9dUgX4GhvutxN
0ELr9cBFQ8fEVWpF6QPOD06B6SPFCP2zIlHEjPbvgJ0DVtg4XQIDAQABo4IELTCC
BCkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTzlpMVo+AftPQ4QOtl0JHK+j8W9DAf
BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw
LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw
LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv
MIIB4AYDVR0RBIIB1zCCAdOCD2Nob29zZWxhdGFtLmNvbYIZY2hvb3NlbGF0YW0u
bWF4aW1hbmV0Lm5ldIILZ3J1cG8ycy5jb22CFWdydXBvMnMubWF4aW1hbmV0Lm5l
dIIUbWFpbC5jaG9vc2VsYXRhbS5jb22CEG1haWwuZ3J1cG8ycy5jb22CFm1haWwu
bWVldGluZWN1YWRvci5jb22CFW1haWwucmVnaW5hY2FzYWxlLmNvbYIRbWVldGlu
ZWN1YWRvci5jb22CG21lZXRpbmVjdWFkb3IubWF4aW1hbmV0Lm5ldIIQcmVnaW5h
Y2FzYWxlLmNvbYIacmVnaW5hY2FzYWxlLm1heGltYW5ldC5uZXSCE3d3dy5jaG9v
c2VsYXRhbS5jb22CHXd3dy5jaG9vc2VsYXRhbS5tYXhpbWFuZXQubmV0gg93d3cu
Z3J1cG8ycy5jb22CGXd3dy5ncnVwbzJzLm1heGltYW5ldC5uZXSCFXd3dy5tZWV0
aW5lY3VhZG9yLmNvbYIfd3d3Lm1lZXRpbmVjdWFkb3IubWF4aW1hbmV0Lm5ldIIU
d3d3LnJlZ2luYWNhc2FsZS5jb22CHnd3dy5yZWdpbmFjYXNhbGUubWF4aW1hbmV0
Lm5ldDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkC
BAIEgfYEgfMA8QB2AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAAB
bAX9vuUAAAQDAEcwRQIgXi8QDnWbgRI8Cr9oG7SCLw1HHdZ+sC4X1pm8LAN5O04C
IQC9o2uHBr+j39/5NcvhQTULFlmnhN37Ez15cB841DKCgwB3AGPy283oO8wszwty
hCdXazOkjWF3j711pjixx2hUS9iNAAABbAX9wPwAAAQDAEgwRgIhAJMQF5Kgb9RM
c8XFtwFBjboF0DYkHsNMvbUmqNJpdf1+AiEA2gs4PNWABn8R/VESXtKSzuD8FvVC
hzLueO1zLvuy+cQwDQYJKoZIhvcNAQELBQADggEBAI/+kdSccRVmaHUXd4o3+zRO
eNrKvK93nXuxBYV6XvFBXZTXrDhGJeIBI/qWyRyxah5D8yzmESViFAzEGx9Kig1d
eoPYv94L3Uh7ymvd5rF0UDbva8/zA1vqRdeu1mldfzmQGy8T9Y1qWtfXW03le0ER
Aqwe+1oc60E1eVUBKPIfIpopNMzcRUQwRy+7/Fbup7DqdL6vN7uKt1+1xEvpeFvf
PMxji7WQxYXJTT9u5B0YU7eF3xNcCntwRRyv0SLNtuDOtgd+i4+xK34Zz7Rv6j/3
PJ/N3EA2wl9jq0wYGq7dJHu8d3XgfNGMhg0+K0460viRj8hI6mLGfcGJ5qiQMd8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfIcyodFDeB+qEcYAjhL
gBR9OG1A2io6rhr0DpGlTSWYG36WMLq8te5l1Ce/2a7Fq4Kn7a18mC8hXAOvhKFm
T9TvsRsnkoKosoNVvg1Tyl3ZKBYj/dqcYQEqr5mBAa5rIBOiF+VDs/5TbKgcG0zt
uPQOAvgpDWO5OEpdw/ges6Mj0LlWQUdIltOLtvvZL3DIdyL+ThQHiAAXoXHytinV
Qlto9Qw4pxO+jbDR+MzSAeLHaZrqB8T7sHABemRe+gAGSQJpg73DJRrOfdF1vzvy
Nta9dUgX4GhvutxN0ELr9cBFQ8fEVWpF6QPOD06B6SPFCP2zIlHEjPbvgJ0DVtg4
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278867919930638759251325013964616702534072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 15:50:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 15:50:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grupo2s.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24988336184701965815294307436258466924137077393569654870309514304643531927246466965706622187327889787827040557315322093924192279261683458806364747461795631224006923583936449960145263476301684962265985045113721900888310987224179386381633210822747796543992653314616272794882137054879167573878500297296373744567380839868096148570676229372579185924886880361515407122070706232474988701318645805504678064442582583025227765254995191902984340621932555487801267624385469741391130580880323298470953014637137043460230183478169220677577435978712512694266699135189984588012109985625987110040966927363919657207123387153940307523677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3969315a3e01fb4f43840eb65d091cafa3f16f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (471 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chooselatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chooselatam.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupo2s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupo2s.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.chooselatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.grupo2s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.meetinecuador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.reginacasale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetinecuador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetinecuador.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reginacasale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reginacasale.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chooselatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chooselatam.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupo2s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupo2s.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meetinecuador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meetinecuador.maximanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reginacasale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reginacasale.maximanet.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c05fdbee5000004030047304502205e2f100e759b81123c0abf681bb4822f0d471dd67eb02e17d699bc2c03793b4e022100bda36b8706bfa3dfdff935cbe141350b1659a784ddfb133d79701f38d432828300770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c05fdc0fc000004030048304602210093101792a06fd44c73c5c5b701418dba05d036241ec34cbdb526a8d26975fd7e022100da0b383cd580067f11fd51125ed292cee0fc16f5428732ee78ed732efbb2f9c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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