cn.cifa-fashion.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:4c:31:8b:5a:9c:5b:af:95:19:9b:ef:83:e8:85:f7:d5:70 was issued on by Let's Encrypt.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cn.cifa-fashion.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4c:31:8b:5a:9c:5b:af:95:19:9b:ef:83:e8:85:f7:d5:70
Serial Number (int): 374376459351893940111417481135143423300976
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fe:39:88:33:47:62:38:6e:1a:f2:e6:e9:14:ae:02:4c:5f:b5:3c:d8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:d5:00:5a:31:68:dc:8e:b4:c2:af:3d:1f:e6:29:e6:3a:c4:25:92
Fingerprint (sha256): 44:7b:e7:64:22:0a:ed:34:55:2f:b1:99:2c:44:f9:1b:14:38:30:e7:c7:7c:2a:71:76:f9:44:61:43:34:0a:ba

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cn.cifa-fashion.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cn.cifa-fashion.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

annuaire.parisfashionshops.com
backoffice.cifa-fashion.com
bfm.parisfashionshops.com
blog.parisfashionshops.com
cdn.cifa-fashion.com
cifa-express.com
cifa-fashion.com
cn.cifa-fashion.com
crm.cifa-fashion.com
cron.cifa-fashion.com
directorio.parisfashionshops.com
directory.parisfashionshops.com
download.parisfashionshops.com
en.cifa-fashion.com
event.cifa-fashion.com
forherparis.com
intranet.cifa-fashion.com
invitation.phygital.events
location.cifa-fashion.com
lookbook.parisfashionshops.com
magazine.parisfashionshops.com
masterclass.parisfashionshops.com
nextclic.com
old.cifa-fashion.com
pfs.cifa-fashion.com
phygital.events
pick-up.cifa-fashion.com
sandbox.marketplace.paris
sms.marketplace.paris
staysafe.parisfashionshops.com
style.parisfashionshops.com
v2.cifa-fashion.com
verzeichnis.parisfashionshops.com
wsn.parisfashionshops.com
www.cifa-fashion.com
www.forherparis.com
www.intranet.cifa-fashion.com
www.location.cifa-fashion.com
www.old.cifa-fashion.com
www.pfs.cifa-fashion.com
www.phygital.events
www.pick-up.cifa-fashion.com

Other certificates including the domain name cifa-fashion.com

(limited to 100 certificates)
intranet.cifa-fashion.com
www.intranet.cifa-fashion.com
crm.cifa-fashion.com
www.escandelle.marketplace.paris
sandbox.marketplace.paris
tw.parisfashionshops.com
forherparis.com
magazine.parisfashionshops.com
www.pick-up.cifa-fashion.com
old.cifa-fashion.com
forherparis.com
cdn.cifa-fashion.com
hnathalie.marketplace.paris
www.old.cifa-fashion.com
www.location.cifa-fashion.com
annuaire.parisfashionshops.com
sandbox.marketplace.paris
intranet.cifa-fashion.com
event.cifa-fashion.com
forherparis.marketplace.paris
cn.cifa-fashion.com
ru.parisfashionshops.com
directory.parisfashionshops.com
www.michaelkors.marketplace.paris
bestacces.marketplace.paris
www.intranet.cifa-fashion.com
pick-up.cifa-fashion.com
kr.parisfashionshops.com
cn.cifa-fashion.com
tw.parisfashionshops.com
sms.marketplace.paris
cn.cifa-fashion.com
ledesk.marketplace.paris
verzeichnis.parisfashionshops.com
cifa-fashion.com
michaelkors.marketplace.paris
masterclass.parisfashionshops.com
backoffice.cifa-fashion.com
intranet.cifa-fashion.com
pfs.cifa-fashion.com
www.pfs.cifa-fashion.com
cn.cifa-fashion.com
cdn.cifa-fashion.com
cdn.cifa-fashion.fr
old.cifa-fashion.com
wsn.parisfashionshops.com
ru.parisfashionshops.com
marketplace.paris
sms.marketplace.paris
sms.marketplace.paris
styleshoes-paris.com
www.bestacces.marketplace.paris
pfs.cifa-fashion.com
marketplace.paris
www.pick-up.cifa-fashion.com
sms.marketplace.paris
style.parisfashionshops.com
bestacces.marketplace.paris
marketplace.paris
sandbox.marketplace.paris
marketplace.paris
www.sandbox.marketplace.paris
backoffice.cifa-fashion.com
www.jubylee.marketplace.paris
cron.cifa-fashion.com
intranet.cifa-fashion.com
sandbox.marketplace.paris
blog.parisfashionshops.com
cdn.cifa-fashion.fr
crm.cifa-fashion.com
marketplace.paris
sms.marketplace.paris
v2.cifa-fashion.com
intranet.cifa-fashion.com
survey.parisfashionshops.com
forherparis.com
efashioncenter.com
marketplace.paris
michaelkors.marketplace.paris
directory.parisfashionshops.com
marketplace.paris
annuaire.parisfashionshops.com
directory.parisfashionshops.com
survey.parisfashionshops.com
www.michaelkors.marketplace.paris
bestacces.marketplace.paris
masterclass.parisfashionshops.com
event.cifa-fashion.com
www.old.cifa-fashion.com
sg.parisfashionshops.com
cron.cifa-fashion.com
marketplace.paris
fi.parisfashionshops.com
pick-up.cifa-fashion.com
marketplace.paris
marketplace.paris
phygital.events
www.forherparis.com
sandbox.marketplace.paris
v2.cifa-fashion.com

Certificate

The complete raw certificate details for cn.cifa-fashion.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmoQZsUDS+0fg6yT0mbF
iSQQPOqX1qCEWjXojFCotxtBGtHCR9PSeTISQiQpEOYgRg/j1ng1nKnt1IYPCnvY
NxgB638N1QPX2VDDMZ7h6Uf764OuecZ/sKYZm8a70TW7dhuTb7kRzuJe6GbsJzYZ
iseCbUcpB9LZpy3tTs0JuwpL04nj7NZQxD0/kFpgfDaFUDq9EhY97GVtHv8+ANAN
eKfN3Sg2UqIVOOb7UhFfyO/w56hf2plKGRfj05gTUgg2GUbBHqlRCh8SeQI0UXyT
C6xYNzfr4i1FFlWH1gd5QFmmuD8+2egKftOHQvdJMek5hrrRMAcOIC9GIcfoT/fR
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374376459351893940111417481135143423300976
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-02 12:04:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-01 12:04:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cn.cifa-fashion.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26057392964335100507442124040904928145504317133482989879119901682748639651302644482722099938898595264473504876015279633976698194663474085191844287509804199577390430420347249871433192799592680370106591163498527656842541627457714489891200972363312303826383185282961299161884681551415934090351851752465320995507938064422986556768328823199180604230940562327612533934490885353509712226784282324215620784929184704511399477162836011905368949342079889534793910481476056121123120947020105165910551685272308020085464108553495332358920164922287583176753910276379466506074779494205514873157863757828367604543876036570662380753347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe3988334762386e1af2e6e914ae024c5fb53cd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1089 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annuaire.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfm.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cifa-express.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cron.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directorio.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forherparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invitation.phygital.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'location.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lookbook.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterclass.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextclic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phygital.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.marketplace.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staysafe.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'style.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verzeichnis.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsn.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forherparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.location.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.old.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfs.cifa-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phygital.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pick-up.cifa-fashion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005500c1bd4756900ddceb3d4afa6d8977a32aec0c6b1b63fd757252cfeb69ef76fb70675c941fbb4e5745f6abec59b5476fa1cee945897e60198b4261b291820da6ca50eb4651a803e1437bdc459deeb5fa1ca24f52cab09ad0fea82e50bacefb54f619045eb9a725968c3cd32c08ef65ef430b1becf5a7ef2523a82106d27a9ee3fb4b34e9e57569649830d8dcfbd8c92a8737e195b99035afcfa81c0a3a7e019ddc335005cc0398e0017a39ab81b91e8765392b8d157a9c03a617956dcd8ec193c741909c33d80a3a4d869f061d02d0a45b79c0479da6ee1f68da0d3d3d369dda066c78832adf9d6971ef32b25989b09ef30cb45c6dd5e9e4b04c958ddef761