sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:5e:7e:50:ce:aa:57:a6:32:d7:32:f4:8c:ab:99:5b:f7:81 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5e:7e:50:ce:aa:57:a6:32:d7:32:f4:8c:ab:99:5b:f7:81
Serial Number (int): 380603588520499076435546576845071483402113
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9d:80:84:40:40:44:86:4f:bd:f0:c8:52:98:d3:ec:b7:37:e1:c7:6b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 13:6a:8d:8d:90:39:27:22:4f:b5:a7:b0:fa:b6:b8:e1:5f:a1:35:c4
Fingerprint (sha256): 63:37:37:03:25:2c:85:7c:ba:06:a5:e2:29:98:bd:4c:3d:46:ac:ec:91:39:39:f0:f9:c6:5f:3a:62:23:ae:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arataki.school.nz
aucklandnetball.co.nz
beachlandsspeedway.co.nz
boprugby.co.nz
brucepulmanpark.com
cityrovers.co.nz
clevedongamefishingclub.co.nz
cliftonmarineclub.co.nz
dunedintriclub.co.nz
frimley.school.nz
gateballnz.co.nz
glenedenunited.co.nz
glenfieldsoftballclub.co.nz
hibiscuscoast.basketball
huntlyinternationalspeedway.co.nz
iona.school.nz
kaiparabasketball.com
karatenz.co.nz
kartsportrotorua.nz
mknetball.co.nz
motuekanetball.co.nz
myrugby.co.nz
netballhuttvalley.co.nz
netballwellington.co.nz
nghs.school.nz
northcanterbury.basketball
northernunitedfootball.co.nz
northernunitedsports.co.nz
ohopefootball.org.nz
oldboys.co.nz
onemanaslsc.org.nz
otagocricket.co.nz
otagocricket.nz
otagosoftball.com
otagotouch.co.nz
papnorth.school.nz
poriruaindoorsports.co.nz
prebbletonvillagesquare.co.nz
rockynookbowls.nz
rotoruaspeedway.co.nz
runtimaru.co.nz
sacredheartnapier.school.nz
sportschaplaincy.co.nz
sporty.co.nz
squashwaikato.co.nz
tairuarsc.co.nz
teatatusoccer.org.nz
tetauihubaseball.nz
thelongroom.co.nz
workingequitationkaikoheboi.co.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYRAtHfO7E8XJ5bgb7SK
hlkUCEl+dw69ctLhuiadwB7FyAI2cwn7OP96HPstX5oPTzOUxS11lUx3tPel17xb
Wq2LCTU4HO1B/HqWP1vk4QB59aSznPNMb0UKBPqhRIr3rf9f9ryB3klCkfEr6Fn/
WSUAxpQoV9VAdkniwYqhUTq8dO9Bu8uBk8fbTit/hVtoQ+wJb+ZcMHvVN4hMeQ/5
+9Bs6kOQMp3rLIY42UcrSSm9gbE/KCUcnoiD8Y3/Rfqf4IcBtiBVv6pyfm/aZoiF
KDegA5huYzIodkgzug1dTEo+PsaOLFL/lUO6C7IQcoYZI5Fb70UynBKNfqLI9rXC
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380603588520499076435546576845071483402113
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-03 03:30:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-01 03:30:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21399489802768225800240647983065084981755254484097455127920722699453604861505850334573614108688251061746302120899285152389546344395010319286048458204709124558987381075060834649588787202424205057997845391324204643442046689883715437044787322036392111152327618637243856775884647069819132898941104934409190660045288323326286474979907780951445697161899839353880796912284688941107332951392193294705529892173890331703566412729443550659489058027109787025472061951963779913637172618319003313006933435791081206050386681944970748339276466808054243239811308392918183561991877794144990560546729508817703752037916072276485163303609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d8084404044864fbdf0c85298d3ecb737e1c76b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arataki.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachlandsspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boprugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brucepulmanpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityrovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedongamefishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliftonmarineclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunedintriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimley.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateballnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenedenunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldsoftballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hibiscuscoast.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntlyinternationalspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iona.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaiparabasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karatenz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsportrotorua.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mknetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motuekanetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballhuttvalley.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nghs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernunitedfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernunitedsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohopefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldboys.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onemanaslsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagocricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagosoftball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papnorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poriruaindoorsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonvillagesquare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockynookbowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruaspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runtimaru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartnapier.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportschaplaincy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squashwaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tairuarsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teatatusoccer.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tetauihubaseball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelongroom.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingequitationkaikoheboi.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187dfdff3250000040300483046022100d371cfe4893e1a7c95f410439aed577b4abed382e4969cfaf55ac5a038c34f85022100fa2d1b8d2b8aa5917035b9bf61ded58885633fa953c0715bea322ab962babd230075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187dfdff3370000040300463044022049ad56fc2f1f29e7e65bc6ff6ef42a13843858c4a9780201aef8e83c1917ce6602207a1311cef904857e58a28a6f3065251263147e8d257fcf87d40b48d143b51422
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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