assistenza.xsystems.srl

Issued by R3

About this certificate

This digital certificate with serial number 03:dd:fd:cc:6b:00:d6:5f:0f:04:7a:74:40:04:bf:da:8b:4c was issued on by Let's Encrypt.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=assistenza.xsystems.srl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dd:fd:cc:6b:00:d6:5f:0f:04:7a:74:40:04:bf:da:8b:4c
Serial Number (int): 336876616966585037487659844721654021917516
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b5:0d:ba:86:77:90:30:e7:18:7d:8d:d2:c3:e2:c0:dc:a6:d6:19:13
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5b:49:7e:cf:45:f1:22:bd:e8:55:07:01:4e:cc:92:04:7c:ba:1a:c1
Fingerprint (sha256): 46:76:0b:1a:de:e6:e6:ee:d2:a6:62:f4:a0:c7:b6:ef:9e:e1:b5:97:0f:cf:74:85:cc:7d:ca:9f:98:3d:44:b4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate assistenza.xsystems.srl

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assistenza.xsystems.srl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assistenza.soluzione1.it
assistenza.xsystems.srl
cs.dawalifesciences.com
help.insightlegal.co.uk
help.lastbill.com
help.tallstoriestickets.org.uk
help.workineurope.com
helpcentre.bespokeconnected.co.uk
helpdesk.bau-master.com
helpdesk.djautomatisering.nl
helpdesk.geodesis.ch
helpdesk.southport.ac.uk
hilfe.blic.de
insurance.mobilversichert.de
portal.crydent.com
sales.mobilversichert.de
service.zerica.com
support.advancecu.org.uk
support.aloxtech.eu
support.avalanchewebservices.com
support.cali.immo
support.cranimax.com
support.dmfa.co.uk
support.dreamdigital.agency
support.funeral-manager-se.co.uk
support.gauravkathuria.co.uk
support.iaxsys.com
support.impactreporting.co.uk
support.industrialgate.com
support.infrastructure-essentials.co.uk
support.macintyrecharity.org
support.marketing-autopilot.com
support.mcroberts.nl
support.myridecompany.com
support.orgasoftware.com
support.springcast.fm
support.subrosagroup.co.uk
support.thgingenuity.com
support.utilitiespassport.co.uk
support.viveflamenco.com
support.what-now.co.uk
test.service.idgard.de
ticket.artaqua.com
ticket.it-in-hamburg.de
titulacion.imf.com
www.desk-abteilung-a.hauptsache-digital.de
www.first-mkit.de

Other certificates including the domain name xsystems.srl

(limited to 100 certificates)
supporto.teameis.it
zoho.allgreenhosting.eu
support.itmagix.nl
support.robethood.net
support.itmagix.nl
xsystems.srl
support.itmagix.nl
support.glastechnology.com
support.viveflamenco.com
support.axondevelopment.co.uk
supporto.teameis.it
support.itmagix.nl
support.viveflamenco.com
support.robethood.net
xsystems.srl
support.teletechnics.com
support.itmagix.nl
petbase.mobile-xl.eu
support.bitexen.com
support.sirrahsoft.co.uk
support.sirrahsoft.co.uk
customerservice.herful.com
support.robethood.net
help.markus.support
help.someday.com
support.itmagix.nl
supporto.noau.it
support.bitexen.com
help.adozi.com
supporto.teameis.it
support.itmagix.nl
xsystems.srl
support.itmagix.nl
support.jackbaker.dev
support.newlink.fr
xsystems.srl
supporto.noau.it
support.glastechnology.com
support.teletechnics.com
assistenza.amotive.it
support.astrad-austrokommunal.at
customerservice.herful.com
support.hayaperegrinaciones.com
support.newlink.fr
assistenza.xsystems.srl
services.espats.ch
assistenza.xsystems.srl
supporto.noau.it
zoho.allgreenhosting.eu
soporte.error304.com
support.jackbaker.dev
kennisbank.nobelinstallaties.nl
support.glastechnology.com
support.robethood.net
services.espats.ch
help.adozi.com
support.itmagix.nl
support.itmagix.nl
kennisbank.nobelinstallaties.nl
assistenza.amotive.it
myportalsupport.thingco.com
petbase.mobile-xl.eu
support.axondevelopment.co.uk
xsystems.srl
support.inexdu.com
xsystems.srl
suitecrm.xsystems.srl
help.markus.support
support.itmagix.nl
help.adozi.com
help.wau73.com
supporto.noau.it
support.inexdu.com
support.glastechnology.com
customerservice.herful.com
support.barion.nl
helpdesk.articad.com
support.itmagix.nl
support.newlink.fr
assistenza.amotive.it
help.markus.support
help.wau73.com
support.itmagix.nl
services.espats.ch
xsystems.srl
tickets.geostruct.com
xsystems.srl
soporte.error304.com
www.xsystems.srl
assistenza.amotive.it
tickets.geostruct.com
support.hayaperegrinaciones.com
soporte.error304.com
petbase.mobile-xl.eu
support.sirrahsoft.co.uk
support.viveflamenco.com
assistenza.xsystems.srl
support.itmagix.nl
petbase.mobile-xl.eu
support.itmagix.nl

Certificate

The complete raw certificate details for assistenza.xsystems.srl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr+oRSKSVP8iMqFEvr7A
tZ/T6ZOKYcnZbG8pUi0NziBk00u9JOuuDwLGpFBmyUEa6bHOyVismmhqFNP7jhyz
JQS3r/NVJCQAZB/9+7mH/JJ43NASjVVV9NZid0nSVQNs7QdvYFEB9eWdJQ6fw74s
9OBQCDPZjaBHgbLQ7mcrutW860eWeUCUWtRWCmUjoVweyk25RnvGdxsrldA1PmxN
naydJKlrr2Jw9KQgezWh7l2hxSdKnjA+QvkWO2T+SzCnGhSab8LBW34wl1nIJuZU
Fzqx1Bg7mCpdyIAFqjaBQfAnTZET5bodT92rN5MD9O+kLSSn6aNnYzQ0AczhdHC7
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336876616966585037487659844721654021917516
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-30 07:56:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-28 07:56:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assistenza.xsystems.srl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25594647342624679396296879824344217237286332445412934101554232527135982295624392937882215576501564135592053764811681570990487066440144599301047524560222931638959762038875324519174083127849260583708569289805294583440449441144379221265131356414804881893774442572827079786456559805914644353599984515544795227982651744501923244921592326210780711415241697222863318442717959955686441147682040292390178469602971456559067111189129667440881822784397546678579698927691894469437201508221967585743226056290893042277491845689631587247126619396875217574317686273017801652524209293537090662050328196646362882316657899996961368488859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b50dba86779030e7187d8dd2c3e2c0dca6d61913
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1233 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistenza.soluzione1.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistenza.xsystems.srl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.dawalifesciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.insightlegal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.lastbill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.tallstoriestickets.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.workineurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcentre.bespokeconnected.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.bau-master.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.djautomatisering.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.geodesis.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.southport.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilfe.blic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurance.mobilversichert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.crydent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.mobilversichert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.zerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.advancecu.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.aloxtech.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.avalanchewebservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cali.immo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cranimax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dmfa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dreamdigital.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.funeral-manager-se.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gauravkathuria.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.iaxsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.impactreporting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.industrialgate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.infrastructure-essentials.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.macintyrecharity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.marketing-autopilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mcroberts.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.myridecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.orgasoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.springcast.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.subrosagroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.thgingenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.utilitiespassport.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.viveflamenco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.what-now.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.service.idgard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.artaqua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.it-in-hamburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titulacion.imf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desk-abteilung-a.hauptsache-digital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.first-mkit.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000181b3d3dd2c000004030047304502205f60494ece673d27ba8ad9a739f62586f649bb00c0ae4c022c228ef13558d146022100f2106ea112bedc03724384f78081164ed2d31defe8e615bf73c81f8088f530d00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000181b3d3de7d0000040300463044022027a3fcd8db8129806a86b154863914ee723a93f06024f7f965ca784665d05e5802206799519e718569446e2b9f0c3752758c0a1cdf11d2c4f259e0862dd093eae818
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0064f69e5e1a41698e4460c660aed4d5f614efc010d4142205d7c88e183cbe20cfcfcb0b8037ee4da9fd08d35a571ce8f5bb4c71262ca6826e281342b73690bef58a109428944e27076de96cb0891a1a9430e26fbfbd89f0ea298bc86d81c1561a6139677640781e556c41c57fbec12503398084e31e1f822a374f6fe63d686c2750121da0e0b55c6d1c864321e7a10810ac4791782cdd9d89d632cdf4a0724376606cf32ab2d70ab59d97f4d5b788a79382cedaa40649ca4d3ff9538a39af11e3ebae34948a1f9f5ea59eb0bfcabc8824a16fde1c4e62014516dae7d76c3156894be3c75fe70005466279c9d567aa7dac485d224dfbbe3af421ba55b83102425a