status.adaptive.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:59:b1:38:93:69:91:a6:6c:00:58:69:0b:a4:bc:3c:43:8c was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=status.adaptive.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:59:b1:38:93:69:91:a6:6c:00:58:69:0b:a4:bc:3c:43:8c
Serial Number (int): 291857555565000516566888619743337298805644
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ac:70:c4:c3:3c:ef:4a:fa:1b:74:42:9b:85:28:b9:ad:71:e5:34:5e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 18:d6:81:a1:94:a5:eb:6c:29:e4:f4:57:55:ba:8f:9c:39:cf:cf:8a
Fingerprint (sha256): 54:bd:42:8a:aa:29:08:db:07:87:bd:54:6a:8d:03:28:c8:b6:4b:17:da:fa:6d:84:a7:17:17:ad:9e:57:75:28

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate status.adaptive.co.uk

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for status.adaptive.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

status.adaptive.co.uk
status.castle.io
status.checkpoint.com
status.filecoin.io
status.goodtime.io
status.opensciencegrid.org
status.pinewood-builders.com
status.sb.biodatacatalyst.nhlbi.nih.gov
status.switch-bot.com
status.tbc.qc.ca
status.tide.co
statuspage-gamma-prod.plumenet.io
statuspage-kappa-prod.plumenet.io

Other certificates including the domain name adaptive.co.uk

(limited to 100 certificates)
it.lesl.cloud
status.adaptive.co.uk
it.lesl.cloud
git.devpad.co.uk
adaptive.co.uk
vault.adaptive.co.uk
chat.adaptive.co.uk
mattermost.adaptive.co.uk
it.lesl.cloud
adaptive.co.uk
it.lesl.cloud
it.lesl.cloud
it.lesl.cloud
status.adaptive.co.uk
status.acloud.guru
platformstatus.northebridge.com
status.acloud.guru
it.lesl.cloud
status.acloud.guru
status.adaptive.co.uk
it.lesl.cloud
it.lesl.cloud
platformstatus.northebridge.com
it.lesl.cloud
status.adaptive.co.uk
it.lesl.cloud
chat.adaptive.co.uk
servicedesk.adaptive.co.uk
status.acloud.guru
it.lesl.cloud
it.lesl.cloud
chat.adaptive.co.uk
adaptive.co.uk
git.devpad.co.uk
it.lesl.cloud
it.lesl.cloud
it.lesl.cloud
it.lesl.cloud
status.adaptive.co.uk
adaptive.co.uk
status.acloud.guru
adaptive.co.uk
it.lesl.cloud
status.adaptive.co.uk
*.adaptive.co.uk
status.adaptive.co.uk
platformstatus.northebridge.com
it.lesl.cloud
status.adaptive.co.uk
it.lesl.cloud
chat.adaptive.co.uk
it.lesl.cloud
adaptive.co.uk
it.lesl.cloud
it.lesl.cloud
it.lesl.cloud
it.lesl.cloud
status.acloud.guru
chat.adaptive.co.uk
it.lesl.cloud
adaptive.co.uk
it.lesl.cloud
adaptive.co.uk
status.adaptive.co.uk
status.adaptive.co.uk
adaptive.co.uk
it.lesl.cloud
chat.adaptive.co.uk
it.lesl.cloud
it.lesl.cloud
it.lesl.cloud
status.acloud.guru
it.lesl.cloud
adaptive.co.uk
chat.adaptive.co.uk
it.lesl.cloud
it.lesl.cloud
it.lesl.cloud
*.adaptive.co.uk
it.lesl.cloud
platformstatus.northebridge.com
git.devpad.co.uk
it.lesl.cloud
vault.adaptive.co.uk
git.devpad.co.uk
chat.adaptive.co.uk
nagios.adaptive.co.uk
adaptive.co.uk
status.acloud.guru
it.lesl.cloud
it.lesl.cloud
it.lesl.cloud
chat.adaptive.co.uk
chat.adaptive.co.uk
it.lesl.cloud
*.adaptive.co.uk
platformstatus.northebridge.com
status.acloud.guru
chat.adaptive.co.uk
status.adaptive.co.uk

Certificate

The complete raw certificate details for status.adaptive.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGaDCCBVCgAwIBAgISA1mxOJNpkaZsAFhpC6S8PEOMMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMDEyMjExODQ4MjJaFw0yMTAzMjExODQ4MjJaMCAxHjAcBgNVBAMT
FXN0YXR1cy5hZGFwdGl2ZS5jby51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBALTJMfbsQ739nxk32Y8vr5w6e+sSFHkNKWvMXwa3j9wTKEx5uH2SQ4Lx
KfOwgLInADyelOFDfKs9Dsj4rIEInGd4Vd5QC9wMhtIVz4nz25yW4wv8Klqqgjwm
BV7ys9JAPnx6TEHEu2dX8XfWP4JDAI6CFxgXTQ6Ni/p8wb+3onWjNrparQ2/k/Lk
kebx3MHoTon5tLsqCGMTt+iLiq3ibAkQoSvqyJ/Vb45M6/6jIextXF/8atveW2oN
EwM5aNvu/U9fdKhClsgAF8u0iGZiM2d88RG4dXGRI6iyalciWCXvC9dUs0b5hmc9
vmHYfGCrsemuXOCk1KEufoZzeabAzS8CAwEAAaOCA4gwggOEMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQUrHDEwzzvSvobdEKbhSi5rXHlNF4wHwYDVR0jBBgwFoAUFC6z
F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo
dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl
bmNyLm9yZy8wggFXBgNVHREEggFOMIIBSoIVc3RhdHVzLmFkYXB0aXZlLmNvLnVr
ghBzdGF0dXMuY2FzdGxlLmlvghVzdGF0dXMuY2hlY2twb2ludC5jb22CEnN0YXR1
cy5maWxlY29pbi5pb4ISc3RhdHVzLmdvb2R0aW1lLmlvghpzdGF0dXMub3BlbnNj
aWVuY2VncmlkLm9yZ4Icc3RhdHVzLnBpbmV3b29kLWJ1aWxkZXJzLmNvbYInc3Rh
dHVzLnNiLmJpb2RhdGFjYXRhbHlzdC5uaGxiaS5uaWguZ292ghVzdGF0dXMuc3dp
dGNoLWJvdC5jb22CEHN0YXR1cy50YmMucWMuY2GCDnN0YXR1cy50aWRlLmNvgiFz
dGF0dXNwYWdlLWdhbW1hLXByb2QucGx1bWVuZXQuaW+CIXN0YXR1c3BhZ2Uta2Fw
cGEtcHJvZC5wbHVtZW5ldC5pbzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEE
AYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y
ZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AFzcQ5L+5qtFRLFemtRW5hA3+9X6
R9yhc5SyXub2xw7KAAABdobYeY0AAAQDAEcwRQIgAg2PbXuZh1XTb3ocVSXQY34C
v0AidSgREeah1E6s1BwCIQDoaJ7LcNDoczfvWQQOXtFDvFOqWDrQbn1yBdQ1mPFP
YAB1APZclC/RdzAiFFQYCDCUVo7jTRMZM7/fDC8gC8xO8WTjAAABdobYeY0AAAQD
AEYwRAIgIH5ItwoXkSa8JXJtK5Ru2d1GX84ZYknEJ5OuLCYmZuoCIAEc8enSMuLh
gEudz99DrbTDVIzx70bfqPV9JV/tr3/NMA0GCSqGSIb3DQEBCwUAA4IBAQBAP5su
OPo+r8XdenABJrmSOB04NI3WtNbsw/N4H5a+Y6qnM1PO8bU0VYnxEeRLKQ+OS0gv
q0CUyHvqclbz4VVmQNaTm6Xp+IYB+hVsh6jJdqOdLwQwVm629bu64+i/wfjdVK99
6Ti5f38IXv9qdtE7eu2euhr51VV2qPpweVghlBQNO/7NrlRey7e/HLdPXC0efsX1
6Ll/uTBimKNkmv/qLHxHePXeZbtOfooFRVykdZLkAhwGEXJo/u+VYq5qAGTgDnRS
faa+gSB3DEF1VP5TUL/74G3Us893eaU22sVSPEt2E8RP0ETIVDuDHuiN5Q7PvfcY
s2OmjzFf9Ef56ZGQ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMkx9uxDvf2fGTfZjy+v
nDp76xIUeQ0pa8xfBreP3BMoTHm4fZJDgvEp87CAsicAPJ6U4UN8qz0OyPisgQic
Z3hV3lAL3AyG0hXPifPbnJbjC/wqWqqCPCYFXvKz0kA+fHpMQcS7Z1fxd9Y/gkMA
joIXGBdNDo2L+nzBv7eidaM2ulqtDb+T8uSR5vHcwehOifm0uyoIYxO36IuKreJs
CRChK+rIn9Vvjkzr/qMh7G1cX/xq295bag0TAzlo2+79T190qEKWyAAXy7SIZmIz
Z3zxEbh1cZEjqLJqVyJYJe8L11SzRvmGZz2+Ydh8YKux6a5c4KTUoS5+hnN5psDN
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291857555565000516566888619743337298805644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-21 18:48:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-21 18:48:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'status.adaptive.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22822107931907844052584362288648354585848183416743243193822362861578373746502145907370366148270277863800511002169048407398616922329383916862431012806222167415080488139330487813942760750919161564360507813476200422124023705083971163101866646175881397237340123402968724302135903355039087467470411099668448340961294508820417355991812582409667712449867462365362648293907510543105572606300406847367939886845433421215873999544055430162621803515370408817134961785823282791235739771679306578558421381311432331177875130761029784582513661744362270336386345668744764105222861056770363738649313054085960459012942274599422779247919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac70c4c33cef4afa1b74429b8528b9ad71e5345e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (334 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.adaptive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.castle.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.checkpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.filecoin.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.goodtime.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.opensciencegrid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.pinewood-builders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sb.biodatacatalyst.nhlbi.nih.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.switch-bot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.tbc.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.tide.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statuspage-gamma-prod.plumenet.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statuspage-kappa-prod.plumenet.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017686d8798d00000403004730450220020d8f6d7b998755d36f7a1c5525d0637e02bf402275281111e6a1d44eacd41c022100e8689ecb70d0e87337ef59040e5ed143bc53aa583ad06e7d7205d43598f14f60007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017686d8798d00000403004630440220207e48b70a179126bc25726d2b946ed9dd465fce196249c42793ae2c262666ea0220011cf1e9d232e2e1804b9dcfdf43adb4c3548cf1ef46dfa8f57d255fedaf7fcd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00403f9b2e38fa3eafc5dd7a700126b992381d38348dd6b4d6ecc3f3781f96be63aaa73353cef1b5345589f111e44b290f8e4b482fab4094c87bea7256f3e1556640d6939ba5e9f88601fa156c87a8c976a39d2f0430566eb6f5bbbae3e8bfc1f8dd54af7de938b97f7f085eff6a76d13b7aed9eba1af9d55576a8fa7079582194140d3bfecdae545ecbb7bf1cb74f5c2d1e7ec5f5e8b97fb9306298a3649affea2c7c4778f5de65bb4e7e8a05455ca47592e4021c06117268feef9562ae6a0064e00e74527da6be8120770c417554fe5350bffbe06dd4b3cf7779a536dac5523c4b7613c44fd044c8543b831ee88de50ecfbdf718b363a68f315ff447f9e99190