neman.hr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:00:f9:01:6d:bf:ea:ed:21:f1:58:d7:ba:94:e4:d2:86:9d was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=neman.hr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:00:f9:01:6d:bf:ea:ed:21:f1:58:d7:ba:94:e4:d2:86:9d
Serial Number (int): 261667842984515974533316544146923691607709
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:c8:ba:a5:e8:a3:ca:af:53:1a:09:1e:c5:a5:af:27:64:8c:74:67
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 45:47:1f:73:d2:a2:73:c6:5b:0d:fd:f7:16:33:f9:7e:b0:04:42:48
Fingerprint (sha256): 4f:17:bc:aa:fd:08:6e:65:9c:2a:40:cf:67:68:5d:bd:db:67:90:ed:bb:fb:27:5b:3f:a8:15:13:16:cf:8a:36

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate neman.hr

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for neman.hr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

docker.neman.hr
emby.neman.hr
home.neman.hr
hub.neman.hr
minecraft.neman.hr
mqtt.neman.hr
mssql.neman.hr
nas.neman.hr
neman.hr
print.neman.hr
server.neman.hr
storage.neman.hr
tv.neman.hr
vpn.neman.hr
www.neman.hr

Other certificates including the domain name neman.hr

(limited to 100 certificates)
sni187764.cloudflaressl.com
www.focusfriend.xyz
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
andressalinasj.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
bookaclub.com
sni187764.cloudflaressl.com
l.famenun.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
neman.hr
sni187764.cloudflaressl.com
stack-staging.mediumra.re
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
www.come-to-egypt.co
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
account.neman.hr
sni187764.cloudflaressl.com
www.pfinz.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
blessinghub.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
neman.hr
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
backoffice.word-hop.com
sni187764.cloudflaressl.com
neman.hr
sni187764.cloudflaressl.com
builder-uat.hedged.in
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
www.nsjtt.fr
www.artilas.app
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
magicbros.app
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com
sni187764.cloudflaressl.com

Certificate

The complete raw certificate details for neman.hr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGJDCCBQygAwIBAgISAwD5AW2/6u0h8VjXupTk0oadMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMDgxOTI2NTBaFw0x
OTAzMDgxOTI2NTBaMBMxETAPBgNVBAMTCG5lbWFuLmhyMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA3XfkWkcmz9vzH7E8pbhsFsOVAfRQcRkrO4dFvt+Q
BF2r7WAfTjk6VhU366JpSpGkA3yzcooROr2ARx17IInChP2EmRy+FIEI+RNYpGUz
deWAbf69FL9YfnsHoQLBGGYnHs0piBzSqXVKObIXYas0yevtaJyGex5wIt8OFXcz
HjiB5ARutXV4ivL668nz0F7uTRp/9wuVLAwOj8jQA20m7pqb+4ngGVT9bLIE0E7u
aFnVwAgionBNduoXn3xD/sRAcN+HpYWe/c8SIFnjatis/ZN7pueaD5HhoI6AycB5
TMeiEX8Kb1C+L5QKDAzRlWwvUt53U0jTmtAZHT4WkivPWQIDAQABo4IDOTCCAzUw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQHyLql6KPKr1MaCR7Fpa8nZIx0ZzAfBgNV
HSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYI
KwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYI
KwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIHv
BgNVHREEgecwgeSCD2RvY2tlci5uZW1hbi5ocoINZW1ieS5uZW1hbi5ocoINaG9t
ZS5uZW1hbi5ocoIMaHViLm5lbWFuLmhyghJtaW5lY3JhZnQubmVtYW4uaHKCDW1x
dHQubmVtYW4uaHKCDm1zc3FsLm5lbWFuLmhyggxuYXMubmVtYW4uaHKCCG5lbWFu
Lmhygg5wcmludC5uZW1hbi5ocoIPc2VydmVyLm5lbWFuLmhyghBzdG9yYWdlLm5l
bWFuLmhyggt0di5uZW1hbi5ocoIMdnBuLm5lbWFuLmhyggx3d3cubmVtYW4uaHIw
TAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcC
ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0
BIHxAO8AdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWePgFJP
AAAEAwBGMEQCIGjiRVQST37Wy9zoAmp75zGS2ReeTs4vInQk+oUb1MBAAiACVpN6
VRXaKh9g0BjPC7zfS5HPNdFYW4eRZkloUIFhqwB2AGPy283oO8wszwtyhCdXazOk
jWF3j711pjixx2hUS9iNAAABZ4+AUvIAAAQDAEcwRQIhAM0mIELLzlcCS1OA0lw0
jaRwdemNHtSpzmPu340uuFt3AiAzCO440ghzi+spRrUyzFUTao6/BTsey5+sSa4+
czgN0DANBgkqhkiG9w0BAQsFAAOCAQEAMsPtsPUug+V9+mWDZBtGb6QnsL07vych
ecNjQ8WgYiGhZJP/n/ddF/OJkNjs9C0Ov9JzBakV3SkLv/2c9P5XTHtPxScStX6J
S+XNW3pduGQpGOj4w3++Sx2AQQDEzxaFHyUGXddIqocScr9fEA7+lSv0gWd0azks
0u5cYa1e66qyd1QH9AeV4QH1SlRUngFwGeCBZBZpVIEfj3qyf8MtwmqzLIneno6t
gWggtZfEUaMxqY3QKsAS6ba0hQsEvnqI8Kku3LZk1bOL2wyx6docLcQgGNIK91Ip
g4vifaknZlGUbLYdf3f88+8XfoCvP7V3GsXz2yWFnQafXn1UcB8v7w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XfkWkcmz9vzH7E8pbhs
FsOVAfRQcRkrO4dFvt+QBF2r7WAfTjk6VhU366JpSpGkA3yzcooROr2ARx17IInC
hP2EmRy+FIEI+RNYpGUzdeWAbf69FL9YfnsHoQLBGGYnHs0piBzSqXVKObIXYas0
yevtaJyGex5wIt8OFXczHjiB5ARutXV4ivL668nz0F7uTRp/9wuVLAwOj8jQA20m
7pqb+4ngGVT9bLIE0E7uaFnVwAgionBNduoXn3xD/sRAcN+HpYWe/c8SIFnjatis
/ZN7pueaD5HhoI6AycB5TMeiEX8Kb1C+L5QKDAzRlWwvUt53U0jTmtAZHT4WkivP
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261667842984515974533316544146923691607709
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-08 19:26:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-08 19:26:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'neman.hr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27957786347415454811012486732220758321521266972122915440811586300527903306399615384608523816443138708691500501770015435585354794259915790644001185355457295564087762513946300667506002569445131122261640860680057576625408691555506733340876187415516738923871285656322962303975328275413804883576787565994103980607434332794716801728776184680094730930781102602509815856218826242618154212990293513180746463674558430912806146934956078075056880090116091219487939141911198243924103675150667541487973941830467042511057591706348091956490752895571980512681498205534353897357645602871874019195775903908585502825047698963078803345241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07c8baa5e8a3caaf531a091ec5a5af27648c7467
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (231 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docker.neman.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emby.neman.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.neman.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.neman.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minecraft.neman.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mqtt.neman.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mssql.neman.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nas.neman.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neman.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'print.neman.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server.neman.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storage.neman.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.neman.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.neman.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neman.hr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001678f80524f0000040300463044022068e24554124f7ed6cbdce8026a7be73192d9179e4ece2f227424fa851bd4c04002200256937a5515da2a1f60d018cf0bbcdf4b91cf35d1585b8791664968508161ab00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001678f8052f20000040300473045022100cd262042cbce57024b5380d25c348da47075e98d1ed4a9ce63eedf8d2eb85b7702203308ee38d208738beb2946b532cc55136a8ebf053b1ecb9fac49ae3e73380dd0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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