lenztest.assist-domain.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e7:d5:91:a7:91:52:df:70:2f:e5:00:82:f6:e7:fd:f0:ef was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lenztest.assist-domain.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e7:d5:91:a7:91:52:df:70:2f:e5:00:82:f6:e7:fd:f0:ef
Serial Number (int): 427338252330600581542918738646769048875247
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 13:50:24:fd:92:26:96:95:b8:35:3c:6d:d7:eb:39:7c:38:bd:e7:36
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 34:0a:a7:3d:27:39:b8:59:69:68:f1:d1:6d:cc:53:a0:1b:12:ac:12
Fingerprint (sha256): 56:6d:7e:00:2c:1c:7f:28:b2:59:1e:e3:01:da:3b:11:32:d7:0c:0a:ba:07:a2:0c:b2:ac:7a:86:f2:54:94:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lenztest.assist-domain.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lenztest.assist-domain.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ar.kiloism.com
ar.norttech.com
connect.mwm.ltd
eyes.halcyon.support
lens.commsgateway.com
lens.hwpmmd.com
lens.machenservices.com
lens.powertogrow.com
lens.stricklybizzness.com
lens.techilogic.com
lens.totalcinemasolutions.com
lenztest.assist-domain.com
msmani.assist-domain.com
pilot.infothink.com.au
view.theitexperience.com

Other certificates including the domain name assist-domain.com

(limited to 100 certificates)
assist.nci.fr
meeting.roancom.es
events.nightjarr.com
assist.nci.fr
assist.nci.fr
meeting.katerosewellness.com
qatest.assist-domain.com
meeting.digitalcomtech.com
customdomain4.assist-domain.com
assist.nci.fr
metting.fiscal.io
meet.zanno.com.br
lens.eplug.eu
meeting.qbsint.com
yardim.novasisbilisim.com
webinars.strategia20.com
conferencias.convivere.mx
meeting.feret.com
assist.mindsprint.org
meeting.scaleupproject.ch
assist.nci.fr
meeting.theopenkey.com
lens.ca2l.fr
remote.flm380.com
meeting.qbsint.com
meeting.assetbrothers.jp
asistencia.pbshon.com
meeting.scaleupproject.ch
assist.gprsinc.com
welcome.spiritualplaydate.com
assist.reignenterprizes.com
yardim.novasisbilisim.com
meeting.qbsint.com
help.altitudemedia.co.za
meeting.krantiindustries.com
meeting.gestionjoseelabrie.com
meeting.synapsedigital.io
hari.assist-domain.com
meet.hegedus.co
soporte.karzo.com.mx
meet.zanno.com.br
assist.nci.fr
meeting.gestionjoseelabrie.com
ank.lirium.com
meeting.synapsedigital.io
meeting.capacitacionsinfronteras.com
webinar.check.uy
meeting.qbsint.com
meetings.onetabco.com
assist.gprsinc.com
meeting.synapsedigital.io
gethelp.impactfoundry.org
assist.nci.fr
meetings.progressivepost.tech
meetings.vaultwealth.us
meeting.haydenhunter.com
assist.testcrew.com
meeting.curb360.com
meeting.katerosewellness.com
assist.abfrl.com
help.smiledu.in
access.crowe.tech
meeting.fruits360.io
meeting.slnee.com
meet.mdcsi.co
meeting.vanguardati.com.br
meeting.heritageheights.ca
assist.theholdingbox.com
meeting.theopenkey.com
meeting.page.team
fernwartung.pdr.cloud
meeting.clm.com.br
support.tmit.ca
webinar.check.uy
meeting.ammoyyc.com
assist.certificationguru.org
meeting.djedankh.online
conferencias.convivere.mx
meet.hiriart.tech
meeting.synapsedigital.io
meetings.vaultwealth.us
webinars.strategia20.com
meeting.capacitacionsinfronteras.com
meet.1cloudconsultants.com
meeting.paznetworks.com
meeting.remodelingprofessor.com
meeting.acgofamericas.com
conferencias.convivere.mx
assist.reignenterprizes.com
assist.theholdingbox.com
support.serbinconsulting.com
assist.nci.fr
meeting.synapsedigital.io
masterclasses.transfigurationnation.com
support.prsystems.co.uk
meeting.synapsedigital.io
support.prsystems.co.uk
meeting.virtualopservices.com
meeting.synapsedigital.io
meeting.katerosewellness.com

Certificate

The complete raw certificate details for lenztest.assist-domain.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISBOfVkaeRUt9wL+UAgvbn/fDvMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjAzMTgxMDMxMTlaFw0yMjA2MTYxMDMxMThaMCUxIzAhBgNVBAMT
Gmxlbnp0ZXN0LmFzc2lzdC1kb21haW4uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA65+V98nqNacSE8qJvz8DyqzMGj69OzE/0H2+LtOrWzarOnvu
Y4ALQ5YHkgRfQk/gmNs3Io+bjs3fIk+VMaZFsaNGPaTmpHMuZj85AB2XDvfuC0ni
yMsWyCnYvbDiERJKGGdA/cyAvY+h7TzT0iliqLTbSRuaCM/YkqT+xm5c1dSLlPt9
2HpMRXSQI3fZM1eGWInEA3feit2C+Ww2RndIhVXs58c5bJMLkhRKMQGoLS7vUZUZ
XWAYIQl0W/Bq0CWxXew+hI6TcR7YcOsvs5elHE3Cix0IhbJbQoiUomQZEK1rljwL
6GG0SpIzWFRAFKz/+nU13y2U9LasKALMKcj2DwIDAQABo4ICojCCAp4wDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBQTUCT9kiaWlbg1PG3X6zl8OL3nNjAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzCCAWMGA1UdEQSCAVowggFWgg5hci5raWxvaXNtLmNvbYIP
YXIubm9ydHRlY2guY29tgg9jb25uZWN0Lm13bS5sdGSCFGV5ZXMuaGFsY3lvbi5z
dXBwb3J0ghVsZW5zLmNvbW1zZ2F0ZXdheS5jb22CD2xlbnMuaHdwbW1kLmNvbYIX
bGVucy5tYWNoZW5zZXJ2aWNlcy5jb22CFGxlbnMucG93ZXJ0b2dyb3cuY29tghls
ZW5zLnN0cmlja2x5Yml6em5lc3MuY29tghNsZW5zLnRlY2hpbG9naWMuY29tgh1s
ZW5zLnRvdGFsY2luZW1hc29sdXRpb25zLmNvbYIabGVuenRlc3QuYXNzaXN0LWRv
bWFpbi5jb22CGG1zbWFuaS5hc3Npc3QtZG9tYWluLmNvbYIWcGlsb3QuaW5mb3Ro
aW5rLmNvbS5hdYIYdmlldy50aGVpdGV4cGVyaWVuY2UuY29tMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQC3ONVQw5IAo8+ncyZCvC9BUPd3ICZjqUWWjt3BZ2RAqei+b4ih
C7HAODQGlNkobvJyPPMDJ+vxIlOojQvbO+MBJtz0XIEPe7yRjrS17DwFO861XI8J
aaCCd1pZ7eAXe6IrUUB6TaM1Pcu79TJammya5L3w8Rf7uLBWDWd3qFvcIILJto5v
2Y2duxUHH8UiC7+JV0j6i4yQnPdSCB+FkYI/pIOwLDPiIaDdmVw5Fwjf77xsha3M
VsD102YYO1mv/UaEi0tX5AokEh5vvCbdfXQbthozPbgslBl8wonF5tLY2qO6JCIC
gNcA74yztIbfmu26So7iDR53i4gZLMQuJ3+b
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65+V98nqNacSE8qJvz8D
yqzMGj69OzE/0H2+LtOrWzarOnvuY4ALQ5YHkgRfQk/gmNs3Io+bjs3fIk+VMaZF
saNGPaTmpHMuZj85AB2XDvfuC0niyMsWyCnYvbDiERJKGGdA/cyAvY+h7TzT0ili
qLTbSRuaCM/YkqT+xm5c1dSLlPt92HpMRXSQI3fZM1eGWInEA3feit2C+Ww2RndI
hVXs58c5bJMLkhRKMQGoLS7vUZUZXWAYIQl0W/Bq0CWxXew+hI6TcR7YcOsvs5el
HE3Cix0IhbJbQoiUomQZEK1rljwL6GG0SpIzWFRAFKz/+nU13y2U9LasKALMKcj2
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427338252330600581542918738646769048875247
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-18 10:31:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-16 10:31:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lenztest.assist-domain.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29744696364014059606227661551681930965307805425849597636577702667190732883317855303994033867641555542287539717465763550586186790592257183275499577570345711267908042670718994514313049608341591655700904733586489466488208653825019908036420629726279886530638974634490575910394883358600784532408615191069762639020702888973219069180887340433209448840551886941573588451310276584150070382507190077331245025987702829970539261895847944348938773482747915558706191119850655007620739457883928359255704372265946971065687738770398361516395789789046521461849396195609356084386024273716356139764537092364001275737141817504999378843151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							135024fd92269695b8353c6dd7eb397c38bde736
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (346 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.kiloism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.norttech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.mwm.ltd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyes.halcyon.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lens.commsgateway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lens.hwpmmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lens.machenservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lens.powertogrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lens.stricklybizzness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lens.techilogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lens.totalcinemasolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lenztest.assist-domain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msmani.assist-domain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.infothink.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.theitexperience.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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