content.aimatch.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d4:cc:32:cd:31:da:00:4b:0f:2b:08:3a:88:11:e7:c7:b1 was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=content.aimatch.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d4:cc:32:cd:31:da:00:4b:0f:2b:08:3a:88:11:e7:c7:b1
Serial Number (int): 420860431802106607218574548796059899381681
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c9:12:e8:08:09:83:6e:b6:0b:b2:96:cb:33:d6:2a:d1:80:14:4d:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ea:4e:3c:af:30:c1:a0:af:f1:e1:36:d3:33:3d:1f:99:b1:39:1d:6e
Fingerprint (sha256): 5c:f0:f3:ba:ce:39:69:8f:79:1e:72:c5:8e:c1:90:7e:4a:25:8e:7d:e8:24:fb:2a:1b:d6:52:be:8a:91:a3:7d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate content.aimatch.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for content.aimatch.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

con.mm.dm-drogeriemarkt.bg
con.mm.dm.cz
con.mm.dm.de
con.mm.dm.hu
con.mm.mojadm.sk
con.t.mm.dm-drogeriemarkt.bg
con.t.mm.dm.cz
con.t.mm.dm.de
con.t.mm.dm.hu
con.t.mm.mojadm.sk
content-360-cicc1ust.cxtrvl.com
content-360-cicc2ust.cxtrvl.com
content-360-cicc3ust.cxtrvl.com
content-360-cicc4ust.cxtrvl.com
content-360-cicolusp.cxtrvl.com
content-360-cicopusp.coopdeli.jp
content-ci360.chicos.com
content-ci360.frankfurt-airport.com
content-ci360.gopass.sk
content-ci360.marketing.officedepot.eu
content-ci360.nature.org
content-ci360.rwgenting.dev
content-ci360.stoloto.ru
content-ci360.telekom.si
content-ci360.telia.ee
content-ci360.topdanmark.dk
content-ci360.worldwildlife.org
content-test-ci360.nature.org
content.aimatch.com
content.bancsabadell.com
content.ci.tc
content.mktg.sas.com
digitalc.santander.pt
digitalcci360.santander.pt
intcnamedevcontent.ci.tc
poc-content.ci.tc
sovite-content.ci.tc
ssodtstusestage2content.ci.tc
staticcontent.mycwt.com

Other certificates including the domain name aimatch.com

(limited to 100 certificates)
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.dev.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
*.dev.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
cdn.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
foghorn.dev.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
content.dev.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.dev.aimatch.com
*.aimatch.com
content.aimatch.com

Certificate

The complete raw certificate details for content.aimatch.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn03qv3ZFVDLl664dkr3
rKnt9+ncvZbBjRF2epR/+IWonvaioNybzKcgAEn6ovfTBBzIm8Siyt5vQMWJlv+R
6TlX6uqIcyaqWS17NhJyAjJXNIs1qW0x8u/KQ7hCHiWuqAsHgVmF0rAHd7lprKo3
fXiT8am3EpnXgX+AVtFkzZnhUxwRcTGsD56Gc5kqPaa/4mleH0+3zodyMNKQUniA
o8LJOe48W20KVQUc+laHQTwj000IdvVssVRzeLCV5GmiFX5bjKCzyWz/TxvuGpe0
C7zwmmpbrZ4INWcqtIIOUlQAj0GIrzlBRrM78uEKG0bj7Z8QgF4cCVRI7kd7fpYW
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420860431802106607218574548796059899381681
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-05 15:35:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-03 15:35:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'content.aimatch.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24047024970906858254000024802414507087259962455367419629084339626894159476705907378547684393078608963093523936722516545027408978989647540239242622689743186528341549060508724709563627749990307609767243285943869441220767145916647191462998175873794019551262268997164479204670947466284714528400594562638800431519400325118527910209599220026973344300236418252507429910450305017417162908844639376917047749157936768747097288311363028446552180241542704507204576169032198904592835772164229984207794780345678272187834393428324147849983573565025250481621984104133164874776430027586279571671605365720686925073896043818882937788147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:9|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (999 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.mojadm.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm-drogeriemarkt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.mojadm.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-360-cicc1ust.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-360-cicc2ust.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-360-cicc3ust.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-360-cicc4ust.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-360-cicolusp.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-360-cicopusp.coopdeli.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.chicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.frankfurt-airport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.gopass.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.marketing.officedepot.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.rwgenting.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.stoloto.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.telekom.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.telia.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.topdanmark.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.worldwildlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-test-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.aimatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bancsabadell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.ci.tc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.mktg.sas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalc.santander.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalcci360.santander.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intcnamedevcontent.ci.tc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poc-content.ci.tc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovite-content.ci.tc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssodtstusestage2content.ci.tc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticcontent.mycwt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016bc2fd887e0000040300473045022010c0d71c9a461a6945ccf9f4e09de06a47bcb2d7e13b7c4828e54233f478396d022100879e9ccbb0a960101ca8571431509772c3b3b5f0ffb509d2c64b6ecb1be1a44200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bc2fd882d0000040300483046022100cbca03cd5b1e49349ca611f6d746f526bb043b504b5a3a518e0909c951fbc378022100e2e223bd9eefc623c1dd95f31424af5d147abb3a771e2c1297e8de5f2550c2b2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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