mtrbmx.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0e:47:7c:2f:69:d1:ef:3b:6c:2c:36:ec:a6:49:09:ad:27 was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mtrbmx.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0e:47:7c:2f:69:d1:ef:3b:6c:2c:36:ec:a6:49:09:ad:27
Serial Number (int): 266195830926342245790525922326301672844583
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:93:d1:1b:49:c9:be:97:09:39:7a:ab:7d:0d:15:a4:55:7e:6b:5c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 33:1b:4b:e4:cf:9c:25:81:cf:97:b2:63:d5:82:32:35:c6:4c:65:2f
Fingerprint (sha256): 44:e7:41:92:ad:65:ca:da:e5:3f:a4:06:85:94:5e:f9:0d:0d:22:4e:2c:96:09:50:ce:5b:ea:84:15:72:f9:44

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mtrbmx.co.nz

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mtrbmx.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ararimu.school.nz
ashleyforestrallysprint.co.nz
aucklandrugby.co.nz
aucklandsquashjuniors.nz
aucklandtouch.co.nz
beckenhamtennisclub.co.nz
bowlshawkesbay.org.nz
bowlswaikanae.com
cometswimming.co.nz
eakfc.org
ecbsoftball.org.nz
generatenetwork.org
glenfieldsoftballclub.co.nz
harbourhockey.org.nz
hawkesbaylandingpad.co.nz
hblp.co.nz
hbsfc.co.nz
juniorcricket.co.nz
jyf.co.nz
karakacricket.co.nz
karakatennis.co.nz
kensingtonfitness.co.nz
kiwikidz.co.nz
marlborough-car-club.co.nz
marlboroughvolleyball.org.nz
mtrbmx.co.nz
netballwairarapa.co.nz
northharboursoftball.co.nz
nskfc.org.nz
osssa.org.nz
parafednorthland.co.nz
playbowls.co.nz
porritt.school.nz
prdf.co.nz
ratec.org.nz
roosterssoftball.co.nz
schoolsportaoraki.co.nz
sissnetball.co.nz
sportotago.co.nz
sporty.co.nz
tabletennissc.org.nz
taradale.co.nz
tgahockey.co.nz
torbaytennis.org.nz
touchpapamoa.co.nz
twyford.school.nz
waiopehu.ac.nz
waiukuponyclub.co.nz
wmcc.net.nz

Other certificates including the domain name mtrbmx.co.nz

(limited to 100 certificates)
sporty.co.nz
www.sporty.co.nz
northcanterburyrugby.co.nz
www.rugby-foundation.org.nz
hastings-central.school.nz
www.karakacricket.co.nz
ultrarunner.org.nz
mtrbmx.co.nz
mtrbmx.co.nz
www.rugby-foundation.org.nz
aafl.co.nz
www.hockeysouthcanterbury.co.nz
northharbourtag.co.nz
www.sporty.co.nz
www.rugby-foundation.org.nz
aucklandmarist.co.nz
mtrbmx.co.nz
lucknow.school.nz
mtrbmx.co.nz
www.rugby-foundation.org.nz
www.sporty.co.nz
www.whangareitri.co.nz
basketballtaranaki.co.nz

Certificate

The complete raw certificate details for mtrbmx.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZdgigZJF27DHO7mW+Ko
Ynx1n7aAq8eom9Q50o+RcXWTUrMmzHHbFrfGFz7mMewlZaofZrZyAk0YNwkTI3Cb
tZVsWPLCp3+O8P5Vfm+YEwFMoJggpBXiX/hFP3OMWUDQhl2JyLQEcRXYsoksVHjw
ic14h4eqolOkVNMxqMiU3IZfngFJNEd/ZXwFF9EYsHtTlF4jvkHT7B07/gVqfD3b
zt6TbBZYw6AQbu5pnZYK0GaotT/Kvk9Aai1H2yEKtYzXD3MMfamTSxtXxhjlcnjp
vffSlEW0kkd8I/jj3JCFoPO9MwFm7581FjmopgQFFfZmiu39Cv+ivZOlFoBCIhof
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266195830926342245790525922326301672844583
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-29 03:40:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-27 03:40:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mtrbmx.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16864341393623132053075543143557467065770014022640490542741687795664542902117982071324532582134105077019002229520316121139320221426856153113078573738056312533865432249682528738416298281430530268340874536547924854507571145356007840957781211521820715913348182431800256152805944376700776820119392974914430467854430481645343323704692030428819897382884481125181283270603093444160122129298807318710934146897723479839969351066295963419311616066016861930490041506936427638505356336490047821339528329931795128431050888549257643997954652186803826751736863746810344816298569330042883971338458380052748751061162377371417252077419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d093d11b49c9be9709397aab7d0d15a4557e6b5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (985 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ararimu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyforestrallysprint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandsquashjuniors.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandtouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckenhamtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswaikanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cometswimming.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eakfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecbsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldsoftballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaylandingpad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hblp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbsfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jyf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakacricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakatennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kensingtonfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwikidz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-car-club.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughvolleyball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtrbmx.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwairarapa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharboursoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nskfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parafednorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porritt.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prdf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratec.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosterssoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sissnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletennissc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torbaytennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchpapamoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twyford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiopehu.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiukuponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmcc.net.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001675dc4f3400000040300473045022100e504190188544b87c21a84f5c87de75bd49777cb3153ba3b40206ba81655f3b50220366596ccf0cc7ed9b3bbe264dabd078e1078aa0a88a5f7a85cdaf8c5f5ab7f41007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001675dc4f1480000040300473045022100c627792270994399ecdb67fdc937318b5a3c5ed00b1aeff0443ca45337bc3e8b022013c666685db2a06dfedb090eb701eed6b5e7f8c44bdf003fc49bdfc798c83ad4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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