customdomain.niceshop.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:29:05:bb:da:40:8c:e5:65:86:af:75:96:29:a1:29:52:11 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=customdomain.niceshop.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:05:bb:da:40:8c:e5:65:86:af:75:96:29:a1:29:52:11
Serial Number (int): 275296056365210188755809383388951219884561
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:5f:fe:fe:cb:d8:4c:00:5a:de:51:cf:0a:1d:4f:5b:f1:8d:f9:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:55:3f:20:26:24:54:1b:f1:d9:a3:6a:0a:4d:2e:82:65:69:c0:9b
Fingerprint (sha256): 6b:ac:59:50:e5:af:ac:f5:91:5c:b0:26:38:19:2c:40:34:e5:53:a3:b5:bc:67:aa:b4:c7:3a:08:5d:d0:c8:ca

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate customdomain.niceshop.co

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for customdomain.niceshop.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

boutique.cheminotencolere.fr
boutique.scok.gg
customdomain.niceshop.co
eshop.petitsfrenchies.com
niceshop.co
niceshop.olybe.com
shop.gymlib.com
shop.lesalondesdames.paris
shop.sportheroes.com
shop.topito.com
shop.zee-factory.com
www.ulterieur.com

Other certificates including the domain name niceshop.co

(limited to 100 certificates)
*.niceshop.co
customdomain.niceshop.co
*.preprod.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
*.niceshop.co
customdomain.niceshop.co
*.preprod.niceshop.co
neon.niceshop.co
customdomain.niceshop.co
*.niceshop.co
api.preproduction.panopli.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
*.niceshop.co
customdomain.niceshop.co
32d6e2d7.niceshop.co
customdomain.niceshop.co
*.niceshop.co
839f61b0.niceshop.co
*.reloaded.niceshop.co
839f61b0.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
*.niceshop.co
2a777ba7.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
2a777ba7.niceshop.co
839f61b0.niceshop.co
839f61b0.niceshop.co
*.niceshop.co
app.panopli.co
*.niceshop.co
customdomain.niceshop.co
*.niceshop.co
customdomain.preproduction.niceshop.co
neon.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
*.preprod.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
*.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
api.production.panopli.co
customdomain.niceshop.co
api.niceshop.co
customdomain.niceshop.co
89a0809b.niceshop.co
api.niceshop.co
*.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
*.niceshop.co
839f61b0.niceshop.co
*.preprod.niceshop.co
89a07c83.niceshop.co
2a777ba7.niceshop.co
839f61b0.niceshop.co
customdomain.niceshop.co
*.niceshop.co
*.niceshop.co
*.production.niceshop.co
api.niceshop.co
ab32b93d.niceshop.co
customdomain.niceshop.co
2a777ba7.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
2578cb33.niceshop.co
*.niceshop.co
customdomain.niceshop.co
*.niceshop.co
*.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
customdomain.niceshop.co
2a777ba7.niceshop.co

Certificate

The complete raw certificate details for customdomain.niceshop.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgISAykFu9pAjOVlhq91limhKVIRMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMjUxNzAxMDhaFw0y
MDA2MjMxNzAxMDhaMCMxITAfBgNVBAMTGGN1c3RvbWRvbWFpbi5uaWNlc2hvcC5j
bzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOr5xakK0LsH69uSkgWS
Zw4itXSxYxkatCLKBqPVCSgNCKteLEF0egTkHuAR1WAvgpu5PHPckXllHCwCE4Pj
xet3XVv3SV3e92u0ri11pUwCFpsD9aJE7uh0NwCYU/L35c37Eq6EdfgJ4Ky/aoKf
CKYILiYeZ8tHkHGQZFWuI1fblAp8lsaSmZu7TFb8BFSkJzoZ509uTEIXL1vkGN7q
nAI+6z74kvFahruMJaherGw4VfMUV2NqPXf1Zu0XJv+KxZdnSd0Du3QZ9prUOs1U
fRXgQUatiB2V7Rl1BPSQ54jrTLb/nXxdk99UuPf5hw12i7xICrwy5Dy56iiXr4RP
a40CAwEAAaOCA1wwggNYMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUy1/+/svYTABa
3lHPCh1PW/GN+ZswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzCCARAGA1UdEQSCAQcwggEDghxib3V0aXF1ZS5jaGVtaW5v
dGVuY29sZXJlLmZyghBib3V0aXF1ZS5zY29rLmdnghhjdXN0b21kb21haW4ubmlj
ZXNob3AuY2+CGWVzaG9wLnBldGl0c2ZyZW5jaGllcy5jb22CC25pY2VzaG9wLmNv
ghJuaWNlc2hvcC5vbHliZS5jb22CD3Nob3AuZ3ltbGliLmNvbYIac2hvcC5sZXNh
bG9uZGVzZGFtZXMucGFyaXOCFHNob3Auc3BvcnRoZXJvZXMuY29tgg9zaG9wLnRv
cGl0by5jb22CFHNob3AuemVlLWZhY3RvcnkuY29tghF3d3cudWx0ZXJpZXVyLmNv
bTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUF
BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIE
gfUEgfIA8AB1AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABcRLa
6CAAAAQDAEYwRAIgA6bO0mrN641QO9u6JJm48Mq0/RMwIxPxXBQ0XJFaee4CIBn6
ieBNWawHdng9ZV6KELo/xz/+oGEgTSTNAVJQXXLPAHcAsh4FzIuizYogTodm+Su5
iiUgZ2va+nDnsklTLe+LkF4AAAFxEtroCwAABAMASDBGAiEAkk4l6UXZNeHirlLX
NJDErNiociBY+f2nTypT0YDkqIcCIQCAl5dYjAkLJkyA6yG71h2kc1xDhn1bM/5x
tRoVueXntDANBgkqhkiG9w0BAQsFAAOCAQEAYLNoxL8QfscSzsXHfhmEeT+42aSe
tnXDxFFmJa/fGzgh2gR7Ii/8g6sLCaR1Km5ktoqxcCKq33flyKvLY33MwKYq98Lo
+vmQlkC9i0HOoQCIFXoL9Ux5pyhWr4KvDIxHl0a2nPNlv1N6g9WK2QzEuVDHl+1K
hxxxEy/Ky9ACIeVEA0gNtNqwDopDUryi6qiK+LIh+B1Y2XNZmtg+19hQByJcaIjd
k5Rowp4npzob3kESbrdQgRoj0H2DTkZCni5AtCNLJcQGW+2jnjxiYKbPMrmIbX3L
izhMgsqyaR/mLTKflA6xoqRyytGMsuJWRBbJ89s+alnPr8Sz/kPm96vzZA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vnFqQrQuwfr25KSBZJn
DiK1dLFjGRq0IsoGo9UJKA0Iq14sQXR6BOQe4BHVYC+Cm7k8c9yReWUcLAITg+PF
63ddW/dJXd73a7SuLXWlTAIWmwP1okTu6HQ3AJhT8vflzfsSroR1+AngrL9qgp8I
pgguJh5ny0eQcZBkVa4jV9uUCnyWxpKZm7tMVvwEVKQnOhnnT25MQhcvW+QY3uqc
Aj7rPviS8VqGu4wlqF6sbDhV8xRXY2o9d/Vm7Rcm/4rFl2dJ3QO7dBn2mtQ6zVR9
FeBBRq2IHZXtGXUE9JDniOtMtv+dfF2T31S49/mHDXaLvEgKvDLkPLnqKJevhE9r
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275296056365210188755809383388951219884561
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 17:01:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-23 17:01:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'customdomain.niceshop.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29662930580314458547198703158607925209884559669306725764820187103796998564535172530562933898063594381307347404089920637611812420866849903313863735747912237145055642419669496274693121159757954515258750457955167940184012624004811320392055900705966964792963577026788110388009895342933082921605147837211296068860760443859275481580224679578971196506702058477174787173649120455144242548527183097236893590935410426932748782235189426406400286419327196111979888910929064995619583025362849452248406012619301813134053080675529638360439369673351257162721594191246093296888824543868964804980047263411655749614871216206302829046669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb5ffefecbd84c005ade51cf0a1d4f5bf18df99b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (263 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique.cheminotencolere.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique.scok.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customdomain.niceshop.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshop.petitsfrenchies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niceshop.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niceshop.olybe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gymlib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lesalondesdames.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sportheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.topito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.zee-factory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ulterieur.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017112dae8200000040300463044022003a6ced26acdeb8d503bdbba2499b8f0cab4fd13302313f15c14345c915a79ee022019fa89e04d59ac0776783d655e8a10ba3fc73ffea061204d24cd0152505d72cf007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017112dae80b0000040300483046022100924e25e945d935e1e2ae52d73490c4acd8a8722058f9fda74f2a53d180e4a887022100809797588c090b264c80eb21bbd61da4735c43867d5b33fe71b51a15b9e5e7b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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