trajesregionalesdelistmo.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:17:b2:5b:22:94:53:3d:ee:a8:4d:5d:07:cb:73:f6:0b:b7 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=trajesregionalesdelistmo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:b2:5b:22:94:53:3d:ee:a8:4d:5d:07:cb:73:f6:0b:b7
Serial Number (int): 269400428018079622997806323469402303237047
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:eb:31:59:b1:22:db:e8:2c:0c:ba:54:7d:07:a2:db:0e:9a:7b:ab
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 39:99:79:3b:ad:f5:e8:06:80:ab:bf:11:2a:20:a5:81:e8:b0:a4:bf
Fingerprint (sha256): 6a:f2:d2:26:5a:09:af:27:a7:70:04:fa:8e:78:2f:90:db:11:1a:eb:e9:42:45:1b:67:37:1f:1b:4c:b5:aa:cf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate trajesregionalesdelistmo.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trajesregionalesdelistmo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.sefeso.com.mx
cpanel.trajesregionalesdelistmo.com
mail.sefeso.com.mx
mail.trajesregionalesdelistmo.com
sefeso.com.mx
sefeso.sefeso.mx
tap.sefeso.mx
trajesregionalesdelistmo.com
trajesregionalesdelistmo.sefeso.mx
webdisk.sefeso.com.mx
webdisk.trajesregionalesdelistmo.com
webmail.sefeso.com.mx
webmail.trajesregionalesdelistmo.com
www.sefeso.com.mx
www.sefeso.sefeso.mx
www.tap.sefeso.mx
www.trajesregionalesdelistmo.com
www.trajesregionalesdelistmo.sefeso.mx

Other certificates including the domain name trajesregionalesdelistmo.com

(limited to 100 certificates)
trajesregionalesdelistmo.com
dmpeninsular.mx
trajesregionalesdelistmo.com
trajesregionalesdelistmo.com
trajesregionalesdelistmo.sefeso.mx
trajesregionalesdelistmo.com
sipseguridad.mx
trajesregionalesdelistmo.com
trajesregionalesdelistmo.com
trajesregionalesdelistmo.sefeso.mx
dmpeninsular.mx
sipseguridad.mx
trajesregionalesdelistmo.sefeso.mx
trajesregionalesdelistmo.com
trajesregionalesdelistmo.com

Certificate

The complete raw certificate details for trajesregionalesdelistmo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHOzCCBiOgAwIBAgISAxeyWyKUUz3uqE1dB8tz9gu3MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MDQwMzIyMTBaFw0x
OTA5MDIwMzIyMTBaMCcxJTAjBgNVBAMTHHRyYWplc3JlZ2lvbmFsZXNkZWxpc3Rt
by5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgGvCZr0hswzir
1zPGi6EAOIcG4vAcN/uRdwh4EcXdsDZx6efmaGRRI5jALLbpAcJL07mEUww0Gusf
sPPROBahpYzeuYEB+m/NxhrxSq4vrv28L9oOs825cgGOYBznRXFE5uwDkTN4pSyr
x742buUCLfLg0Lbv9HMCF6brnH0+Kllabw8O7M2uLyI9p0tssjxMRMx0v4vCeXbc
55FYOrzC1AdXBa/gsnVBk3FSocDhHNKgA7y2N4gzv++QMm1CLgJMBSmc5KAnq/d3
OjOmZ6DXJxrHI4R5nkvIrDkGh6SldBPkD4vFJcvFhsF9+m1pwycOFY9m+fyKNut7
wpLpgPZPAgMBAAGjggQ8MIIEODAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFLrMVmx
ItvoLAy6VH0HotsOmnurMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wggHxBgNVHREEggHoMIIB5IIUY3BhbmVsLnNlZmVz
by5jb20ubXiCI2NwYW5lbC50cmFqZXNyZWdpb25hbGVzZGVsaXN0bW8uY29tghJt
YWlsLnNlZmVzby5jb20ubXiCIW1haWwudHJhamVzcmVnaW9uYWxlc2RlbGlzdG1v
LmNvbYINc2VmZXNvLmNvbS5teIIQc2VmZXNvLnNlZmVzby5teIINdGFwLnNlZmVz
by5teIIcdHJhamVzcmVnaW9uYWxlc2RlbGlzdG1vLmNvbYIidHJhamVzcmVnaW9u
YWxlc2RlbGlzdG1vLnNlZmVzby5teIIVd2ViZGlzay5zZWZlc28uY29tLm14giR3
ZWJkaXNrLnRyYWplc3JlZ2lvbmFsZXNkZWxpc3Rtby5jb22CFXdlYm1haWwuc2Vm
ZXNvLmNvbS5teIIkd2VibWFpbC50cmFqZXNyZWdpb25hbGVzZGVsaXN0bW8uY29t
ghF3d3cuc2VmZXNvLmNvbS5teIIUd3d3LnNlZmVzby5zZWZlc28ubXiCEXd3dy50
YXAuc2VmZXNvLm14giB3d3cudHJhamVzcmVnaW9uYWxlc2RlbGlzdG1vLmNvbYIm
d3d3LnRyYWplc3JlZ2lvbmFsZXNkZWxpc3Rtby5zZWZlc28ubXgwTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBv
U3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWsguR1XAAAEAwBGMEQC
IFKky7KvYE2RVcZIG6TSk/uDoYRaRqXR2QTHz1PuwfVGAiBvYpHHUC874buOKkY7
s3npiTjpNsznlHz+e4zmXe0V1AB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM
9OVFR/R4AAABayC5HKMAAAQDAEcwRQIhAIMUUUjy0tncX+PA4WD0hc3onNO41C/t
HHDnKAdYNIueAiAQEf6IIs2XMaTUoYtcwvJiTFrYQ/lkNeg7+1tJZaulHTANBgkq
hkiG9w0BAQsFAAOCAQEADtVqq/sX863d+mBzkkVkao31MGgFfV00FEjiAzcV68Ow
hRS3sbd4xC1tae/0daQyXmm3agdh9eRLyTymCLXPjvhxe7R5QW+QTGvlVQLIOCRe
koDasxkHojiDhivr6EZaYBNQ1eago5Rr2zZhZR7KsM2sHdXWtuX4CXI3Om7wHYay
9Hd/SHet9CUrSH75An2lEHSpTVEPeozhXVNc6uI0qJxmstNlHTYkgSUc4aC9BGmu
43pbFy8rD0hIhgon/6yAYR1sPfsN/Ue67BUAWD3T9jKtcfSlyK5aFuxR6w1sHBol
lCw2TEweK4q7ApGd7iJuVl+yXovd6yVUgQNMrAbFCQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Brwma9IbMM4q9czxouh
ADiHBuLwHDf7kXcIeBHF3bA2cenn5mhkUSOYwCy26QHCS9O5hFMMNBrrH7Dz0TgW
oaWM3rmBAfpvzcYa8UquL679vC/aDrPNuXIBjmAc50VxRObsA5EzeKUsq8e+Nm7l
Ai3y4NC27/RzAhem65x9PipZWm8PDuzNri8iPadLbLI8TETMdL+Lwnl23OeRWDq8
wtQHVwWv4LJ1QZNxUqHA4RzSoAO8tjeIM7/vkDJtQi4CTAUpnOSgJ6v3dzozpmeg
1ycaxyOEeZ5LyKw5BoekpXQT5A+LxSXLxYbBffptacMnDhWPZvn8ijbre8KS6YD2
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269400428018079622997806323469402303237047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 03:22:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-02 03:22:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trajesregionalesdelistmo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28290664845108854519946598112993638594552934963390060686098016201922104360327914202347627418158333936134709992923577542060919090799673350439303136112979531540938302902490015354726837749468508397829677259183929353430158022993413283702690164625893892342653636329392529655866504454792356166126277741050090744714454493526009522906148198754547999770529945701705174717490309360678430480068809238841496712205389962150871911289719874154930818345814855132551696300125321151071176052914791112249547053545745993001052737919805439844115952244500150035079436920137358792699681476735881662695584649973955169576663310735538720405071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52eb3159b122dbe82c0cba547d07a2db0e9a7bab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.sefeso.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.trajesregionalesdelistmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sefeso.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.trajesregionalesdelistmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sefeso.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sefeso.sefeso.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tap.sefeso.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trajesregionalesdelistmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trajesregionalesdelistmo.sefeso.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.sefeso.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.trajesregionalesdelistmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.sefeso.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.trajesregionalesdelistmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sefeso.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sefeso.sefeso.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tap.sefeso.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trajesregionalesdelistmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trajesregionalesdelistmo.sefeso.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b20b91d570000040300463044022052a4cbb2af604d9155c6481ba4d293fb83a1845a46a5d1d904c7cf53eec1f54602206f6291c7502f3be1bb8e2a463bb379e98938e936cce7947cfe7b8ce65ded15d4007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b20b91ca3000004030047304502210083145148f2d2d9dc5fe3c0e160f485cde89cd3b8d42fed1c70e7280758348b9e02201011fe8822cd9731a4d4a18b5cc2f2624c5ad843f96435e83bfb5b4965aba51d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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