avivacglobal.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:00:20:89:8f:8c:82:17:37:23:2d:c9:0a:84:36:6f:16:dc was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=avivacglobal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:00:20:89:8f:8c:82:17:37:23:2d:c9:0a:84:36:6f:16:dc
Serial Number (int): 261380107347332253710325324674657699174108
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:7e:89:a0:0e:02:80:24:1b:de:c5:86:78:2e:c3:51:2d:aa:25:7b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ae:ce:f0:f5:c1:84:73:e1:f6:d0:aa:24:7f:2c:bc:ef:e8:77:41:bd
Fingerprint (sha256): 60:35:09:29:f5:d1:fc:51:8c:17:2c:12:df:8b:5e:e8:b5:a6:51:5c:c5:fd:dd:18:3f:23:bf:9b:08:a3:78:f6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate avivacglobal.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avivacglobal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avivacglobal.com
avivacglobal.multistore.sitegiant.info
besthelmet.com.my
besthelmet.multistore.sitegiant.info
cpanel.avivacglobal.com
cpanel.besthelmet.com.my
mail.besthelmet.com.my
webdisk.avivacglobal.com
webdisk.besthelmet.com.my
webmail.avivacglobal.com
webmail.besthelmet.com.my
whm.avivacglobal.com
whm.besthelmet.com.my
www.avivacglobal.com
www.avivacglobal.multistore.sitegiant.info
www.besthelmet.com.my
www.besthelmet.multistore.sitegiant.info

Other certificates including the domain name avivacglobal.com

(limited to 100 certificates)
avivacglobal.com
sni.cloudflaressl.com
avivacglobal.com
store.fireflyz.com.my
avivacglobal.com
flyejuice.com
avivacglobal.com
avivacglobal.com
avivacglobal.com
sni.cloudflaressl.com
e-unison.com.my
besthelmet.com.my
avivacglobal.com
pestcontrolinabox.com
shop.accurator.asia
shop.accurator.asia
avivacglobal.com
e-unison.com.my
avivacglobal.com
flobebe.com
avivacglobal.com
avivacglobal.com
avivacglobal.com
avivacglobal.com
avivacglobal.com
gadgetworld2u.com
avivacglobal.com
avivacglobal.com
avivacglobal.com
avivacglobal.com

Certificate

The complete raw certificate details for avivacglobal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHIzCCBgugAwIBAgISAwAgiY+Mghc3Iy3JCoQ2bxbcMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTQyMTA0NDBaFw0y
MDAxMTIyMTA0NDBaMBsxGTAXBgNVBAMTEGF2aXZhY2dsb2JhbC5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Cle2ji2B7OmsY5mDDFnkREfwdqFU
cS7w/l1RnM+NKicwNNYpe9l+3XfywL73QPeLpsCpXo2JEMErk2AoW2M3MIHvP27T
Vxqnz6QfVPJaxTCWx+qYUcTF8Hlq2V0gAJoaCmEJw5kxU2rRrWpqH7n6Jc4OX2Mr
uYJkun8ysWJqMt66k/HL5sDcNCzQ+WQYSlrKOoqQp7dJEi/cvUC9jQH9nXqSH0Mu
wj4W2QW/Alc3JGlV2UgT0U9F6hIImp/H7Ok/i7Qthmkt1qdDlbqDZ4nxM7qU2sOD
cE6o5FviDuOn8WQcOcI53qIbQLRMlZb0SgGLyIlrB3HoYHjuRTmujkRJAgMBAAGj
ggQwMIIELDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFp+iaAOAoAkG97Fhnguw1Et
qiV7MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8wggHlBgNVHREEggHcMIIB2IIQYXZpdmFjZ2xvYmFsLmNvbYImYXZpdmFj
Z2xvYmFsLm11bHRpc3RvcmUuc2l0ZWdpYW50LmluZm+CEWJlc3RoZWxtZXQuY29t
Lm15giRiZXN0aGVsbWV0Lm11bHRpc3RvcmUuc2l0ZWdpYW50LmluZm+CF2NwYW5l
bC5hdml2YWNnbG9iYWwuY29tghhjcGFuZWwuYmVzdGhlbG1ldC5jb20ubXmCFm1h
aWwuYmVzdGhlbG1ldC5jb20ubXmCGHdlYmRpc2suYXZpdmFjZ2xvYmFsLmNvbYIZ
d2ViZGlzay5iZXN0aGVsbWV0LmNvbS5teYIYd2VibWFpbC5hdml2YWNnbG9iYWwu
Y29tghl3ZWJtYWlsLmJlc3RoZWxtZXQuY29tLm15ghR3aG0uYXZpdmFjZ2xvYmFs
LmNvbYIVd2htLmJlc3RoZWxtZXQuY29tLm15ghR3d3cuYXZpdmFjZ2xvYmFsLmNv
bYIqd3d3LmF2aXZhY2dsb2JhbC5tdWx0aXN0b3JlLnNpdGVnaWFudC5pbmZvghV3
d3cuYmVzdGhlbG1ldC5jb20ubXmCKHd3dy5iZXN0aGVsbWV0Lm11bHRpc3RvcmUu
c2l0ZWdpYW50LmluZm8wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggED
BgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBep3P531bA57U2SH3QSeAyepGaDIShEhKE
GHWWgXFFWAAAAW3MTUm/AAAEAwBHMEUCIQDPlS/upTWSFDnQQVpFM6FKLRJAYzsb
AzMUrCBrHJjTegIgfkbG1yRhjpLz8Tj03WXjZIvQ3HnX1ei1z1zG1DyoySwAdQCy
HgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW3MTUm0AAAEAwBGMEQC
IH8GZ9S3UaA4AeJb5LzA9C38/4oWNSVFSYVRW5xWdTVfAiBYswEstdeR7xrgnpfB
b2wPPmkRR9xDIRi53zykE0SADjANBgkqhkiG9w0BAQsFAAOCAQEAdQRpf5vDZg9C
rjBMAt6Uts4tSm2bKmFWhPWMzwH/diKtPkDALx+u6EQDNqjb/t++aOCTWQpp0Djt
k1nV0eFKfcdKzSpNAiQyw7AzW+UMNS86Ne7GXfJri0ucA6CL9db/sa3U/Mem/bU9
CNM0H1qpAJwtARPKwXKoPWtsyIp9VoGqTdWiy9O/LAbhxl58Zs9MKsGpG7kMHM6h
cVLpCBeoGWAiHznEJUvIzvGz8s9QiF0C2nhduu+C9TEBPAcw94Ncv9Hoe+8mO194
JVxvrArqX6wATSiVQAfIlJ8D92mk86Vp1fqDW91+nY4Z7yGVXjuCIUuKw7c9fjem
J+K36Dcdjw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtApXto4tgezprGOZgwxZ
5ERH8HahVHEu8P5dUZzPjSonMDTWKXvZft138sC+90D3i6bAqV6NiRDBK5NgKFtj
NzCB7z9u01cap8+kH1TyWsUwlsfqmFHExfB5atldIACaGgphCcOZMVNq0a1qah+5
+iXODl9jK7mCZLp/MrFiajLeupPxy+bA3DQs0PlkGEpayjqKkKe3SRIv3L1AvY0B
/Z16kh9DLsI+FtkFvwJXNyRpVdlIE9FPReoSCJqfx+zpP4u0LYZpLdanQ5W6g2eJ
8TO6lNrDg3BOqORb4g7jp/FkHDnCOd6iG0C0TJWW9EoBi8iJawdx6GB47kU5ro5E
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261380107347332253710325324674657699174108
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-14 21:04:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-12 21:04:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avivacglobal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22727995034495091666114852395643569684524421181772250252732992471769850397440904425778480872771007496857661836950932927914196748072897532068026387019819602127607924899327017616386191851040323032311526826936216545394540311203385428529539071696095157016516873849851805572124087882675277256271054794438697862745089579798276663885507009009370946324375312544244505647720816301250599253003828272207452161023909471624654985209787101385940060853868355544556358779081977370975588679805111748015172414295984808243235939345567719614293654098753441188730239291798244164202137168593426667036782499548162053232143651633268280673353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a7e89a00e0280241bdec586782ec3512daa257b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (476 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivacglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivacglobal.multistore.sitegiant.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besthelmet.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besthelmet.multistore.sitegiant.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.avivacglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.besthelmet.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.besthelmet.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.avivacglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.besthelmet.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.avivacglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.besthelmet.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.avivacglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.besthelmet.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivacglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivacglobal.multistore.sitegiant.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besthelmet.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besthelmet.multistore.sitegiant.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dcc4d49bf0000040300473045022100cf952feea535921439d0415a4533a14a2d1240633b1b033314ac206b1c98d37a02207e46c6d724618e92f3f138f4dd65e3648bd0dc79d7d5e8b5cf5cc6d43ca8c92c007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dcc4d49b4000004030046304402207f0667d4b751a03801e25be4bcc0f42dfcff8a163525454985515b9c5675355f022058b3012cb5d791ef1ae09e97c16f6c0f3e691147dc432118b9df3ca41344800e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007504697f9bc3660f42ae304c02de94b6ce2d4a6d9b2a615684f58ccf01ff7622ad3e40c02f1faee8440336a8dbfedfbe68e093590a69d038ed9359d5d1e14a7dc74acd2a4d022432c3b0335be50c352f3a35eec65df26b8b4b9c03a08bf5d6ffb1add4fcc7a6fdb53d08d3341f5aa9009c2d0113cac172a83d6b6cc88a7d5681aa4dd5a2cbd3bf2c06e1c65e7c66cf4c2ac1a91bb90c1ccea17152e90817a81960221f39c4254bc8cef1b3f2cf50885d02da785dbaef82f531013c0730f7835cbfd1e87bef263b5f78255c6fac0aea5fac004d28954007c8949f03f769a4f3a569d5fa835bdd7e9d8e19ef21955e3b82214b8ac3b73d7e37a627e2b7e8371d8f