christthekingjerseycity.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8b:39:d9:ef:34:5c:ee:9d:92:ff:2a:d8:73:e6:fb:9e:4c was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=christthekingjerseycity.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:39:d9:ef:34:5c:ee:9d:92:ff:2a:d8:73:e6:fb:9e:4c
Serial Number (int): 308713004373113749436494435158793685540428
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:d4:48:e9:81:67:7d:30:60:54:99:fe:52:7b:98:f9:17:09:d8:61
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b1:c1:c8:28:ca:ea:f9:f5:05:65:d8:40:7f:13:2f:fb:90:e1:09:06
Fingerprint (sha256): 62:08:c9:55:4f:c4:c8:b8:01:43:5c:d0:f4:09:88:51:13:fb:bb:d1:93:9d:f4:1b:5e:5d:9a:76:67:5e:4a:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate christthekingjerseycity.org

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for christthekingjerseycity.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cbstorenola.com
chapelholycross.com
christthekingjerseycity.org
drvcschools.org
holyangelsregional.org
holytrinityhs.org
lbcrs.org
ndsnet.org
parish.staugustinenj.org
preblecountycatholics.org
romancatholic.kingston.on.ca
saintjamesbr.org
spsbayshore.org
spssmith.org
srsny.org
sspjschool.net
stbernardschs.com
stchris-school.org
steas.com
stedwardconfessor.org
stfaustina.ca
stjamesschoolsa.org
stjohnthebaptistdhs.net
stlawrencebrindisiwaskom.org
stmary11030.org
stmaryhudson.cc
stroseschool.net
stthomasschool.net
umncatholic.com
www.cbstorenola.com
www.chapelholycross.com
www.drvcschools.org
www.holyangelsregional.org
www.holytrinityhs.org
www.lbcrs.org
www.ndsnet.org
www.preblecountycatholics.org
www.saintjamesbr.org
www.spsbayshore.org
www.spssmith.org
www.srsny.org
www.sspjschool.net
www.stbernardschs.com
www.stchris-school.org
www.steas.com
www.stedwardconfessor.org
www.stfaustina.ca
www.stjamesschoolsa.org
www.stjohnthebaptistdhs.net
www.stlawrencebrindisiwaskom.org
www.stmary11030.org
www.stmaryhudson.cc
www.stroseschool.net
www.stthomasschool.net
www.umncatholic.com
www.youthencounter906.com
youthencounter906.com

Other certificates including the domain name christthekingjerseycity.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for christthekingjerseycity.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK6FWHFTQ/aAAb9JVOwk
rdZsBWgytofFeh7fzyHzAGvjx6ficatb8UDoDv2/NioILyH02cFFNIn2fCm7j07z
3YC3U8LoSx7SNhSB8peBcRqSxD9M1KWRUQjrs1QTtMFF6mFyE22Z2dRsw279TMgf
He2llrgk7VImhLl1coadglcgYjNz03F9dG54qf0sBipidGZeJ6BbJ4bTtuMUVOMt
v9rtw0ZnDTs4Z3n0xP39jafm7jxNdd7rME7U6Oj2XsZgh6kd7tasbuKWOQM8MNTy
+IhPWouTQ/L5vS3uojgu5reLYWCoOm4+Tk3Zxk5qyJBD3SIByXe5xzjYGAZMpjDe
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308713004373113749436494435158793685540428
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-30 05:38:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 05:38:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'christthekingjerseycity.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21799047907953556257393028244191035783709729452179351355950084660778085438423892726739137902682457549784267007885600356255146156361168153798577361149679940011333691814103441436896523136876125991643020767949239790869004839695944919334030160681750928316024358028156183865904158523389641436984649724900422782163153953740328954411590475193434580689905056864949658765216298548475206185806729293315464396128976308169968738214170705786377475595148276357920822374116958322145208510327254729161611070299970720210316325735377080724877010068690278726584693885018315292123733833209318488692066233509579374391560239372693400510051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4d448e981677d30605499fe527b98f91709d861
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1197 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbstorenola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapelholycross.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christthekingjerseycity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drvcschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyangelsregional.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holytrinityhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbcrs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.staugustinenj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preblecountycatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romancatholic.kingston.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintjamesbr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spsbayshore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spssmith.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srsny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sspjschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbernardschs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stchris-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stedwardconfessor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfaustina.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesschoolsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnthebaptistdhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlawrencebrindisiwaskom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmary11030.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryhudson.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stroseschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stthomasschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umncatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbstorenola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chapelholycross.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drvcschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyangelsregional.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holytrinityhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbcrs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ndsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preblecountycatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjamesbr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spsbayshore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spssmith.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srsny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sspjschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbernardschs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stchris-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stedwardconfessor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfaustina.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjamesschoolsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnthebaptistdhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlawrencebrindisiwaskom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmary11030.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryhudson.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stroseschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stthomasschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umncatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youthencounter906.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youthencounter906.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ba71b05b20000040300473045022021e327351380a8663fa7dd109ccb11f738adbf86cf71f1d645810a76d187b907022100bbc1f586ebf17f60ac98307de85d24e9ecd9ccb967bfe8bfb0ac85f065521cfa007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ba71b03ad000004030047304502203646fd073953d2704e2d7817e2c95b314ab5b73e0a1fe6c48b4a2b26e45da466022100a69242ed10cdaeb5ee945cc3d21f66758e87c156ff983affb1ab7f77fe438c81
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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