bournelocal.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ad:db:21:0d:ff:d0:4c:87:2e:ab:68:31:c1:85:36:38:e6 was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bournelocal.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ad:db:21:0d:ff:d0:4c:87:2e:ab:68:31:c1:85:36:38:e6
Serial Number (int): 320496979833415294031907809521132193069286
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 48:d6:cb:d9:7a:5d:6e:6a:42:29:1c:70:d7:32:ed:22:36:52:53:3d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a6:11:d0:4e:13:74:0b:31:9f:f2:e8:15:69:3b:da:1a:7d:28:51:ee
Fingerprint (sha256): 6f:01:ce:eb:58:15:25:0f:fd:67:bd:93:40:42:55:bd:ee:ca:2b:31:39:ad:a8:e8:a5:00:47:02:02:27:a4:12

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bournelocal.co.uk

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bournelocal.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bishopsstortfordindependent.co.uk
bournelocal.co.uk
buryfreepress.co.uk
cambridgeindependent.co.uk
destinationeastanglia.co.uk
directory.bishopsstortfordindependent.co.uk
directory.cambridgeindependent.co.uk
dissexpress.co.uk
fenlandcitizen.co.uk
granthamjournal.co.uk
haverhillecho.co.uk
iliffemediapromotions.co.uk
imrecruit.co.uk
lynnnews.co.uk
newarkadvertiser.co.uk
newmarketjournal.co.uk
rutland-times.co.uk
spaldingtoday.co.uk
stamfordmercury.co.uk
suffolkfreepress.co.uk
velvetmag.co.uk
www.bishopsstortfordindependent.co.uk
www.bournelocal.co.uk
www.buryfreepress.co.uk
www.cambridgeindependent.co.uk
www.destinationeastanglia.co.uk
www.dissexpress.co.uk
www.fenlandcitizen.co.uk
www.granthamjournal.co.uk
www.haverhillecho.co.uk
www.iliffemediapromotions.co.uk
www.imrecruit.co.uk
www.lynnnews.co.uk
www.newarkadvertiser.co.uk
www.newmarketjournal.co.uk
www.rutland-times.co.uk
www.spaldingtoday.co.uk
www.stamfordmercury.co.uk
www.suffolkfreepress.co.uk
www.velvetmag.co.uk

Other certificates including the domain name bournelocal.co.uk

(limited to 100 certificates)
eastyorkbeach.toronto.com
bournelocal.co.uk
da.ballymenatimes.com
bournelocal.co.uk
local.wahpetondailynews.com
local.ripongazette.co.uk
local.daily-chronicle.com
local.lutontoday.co.uk
georgina.yorkregion.com

local.hertsad.co.uk
bournelocal.co.uk
bournelocal.co.uk
www.bournelocal.co.uk
www.bournelocal.co.uk
local.cambstimes.co.uk
local.pontiacdailyleader.com
local.eastlondonadvertiser.co.uk
local.uintacountyherald.com
local.cessnockadvertiser.com.au
local.moorefieldexaminer.com
www.miltonkeynes.co.uk
bournelocal.co.uk
bournelocal.co.uk
bournelocal.co.uk
www.bournelocal.co.uk
bournelocal.co.uk
shopping.silive.com
bournelocal.co.uk
fk.local.kentonline.co.uk
local.thegazette.com
www.bournelocal.co.uk
bournelocal.co.uk
www.bournelocal.co.uk
bournelocal.co.uk
local.ijn.com
local.eastlondonadvertiser.co.uk
local.stcatharinesstandard.ca
local.yourokmulgee.com
www.bournelocal.co.uk
local.wisbechstandard.co.uk
da.ballymenatimes.com
local.toronto.cjnews.com
www.bournelocal.co.uk
eastyorkbeach.toronto.com
local.hertsad.co.uk
www.bournelocal.co.uk
property.bournelocal.co.uk
bournelocal.co.uk
local.eastlondonadvertiser.co.uk
local.hertsad.co.uk
admin.adforge.com
bournelocal.co.uk
bournelocal.co.uk
local.kcchronicle.com
local.daily-chronicle.com
bournelocal.co.uk
www.peterboroughtoday.co.uk
local.cambstimes.co.uk
findit.bournelocal.co.uk
local.cornwalllife.co.uk
www.bournelocal.co.uk
western-leader.origami.neighbourly.co.nz
shopping.nola.com
bournelocal.co.uk
st.local.kentonline.co.uk
bournelocal.co.uk
bournelocal.co.uk
local.madisoncourier.com
local.perutribune.com
bournelocal.co.uk
st.local.kentonline.co.uk
eastyorkbeach.toronto.com
local.news-banner.com

Certificate

The complete raw certificate details for bournelocal.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjYcwtsn1C15QiqcfuTL
1v7guQvedTOTjU4Mqkgs7bfiURLhVqS8zpA0Mt1Iucy6bu0VQ8Iy+dxVV9BeQ3xJ
51dqeNydzvmruaVkkv09WAfLILw4PwUclN/sbTSthKqGEAdYbvWwzvjb3R7usZPN
eO3v3XqbylLVfkbm64FEGWgfH0ucq0rdD3j/OMSpFjqXk1ZcHDoLW1J9Nd/PfibP
BxqvgpKkKhnmm9a7TkthlkFfm+ULQ9Gt9SwynNOSxxCWlQdiLf3Cih2HIqRDxIZ5
hu5siKcgQrFPCMM4q8xzlyAKz6nr8T5kJTYSHn9AtTwf5TCjcryXeW3o3+vVMPl9
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320496979833415294031907809521132193069286
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 08:52:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-23 08:52:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bournelocal.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18457476318493996973107208622189145462316654743152663281693200264397491144890711606752503692190134708809986842517327796356121607421150930214723081758614018634837601607794474661452710454499700145088364937887924812627739875734364883304987874120082474112682708711217089870922450724813233087008054224293816744514824287074009634405739383535655599734868710723491482395948591871068274602064860618517911594576721373576821718627272117741240109093711541550009601389417776804973318268919544320256792942635436146970567463739655599348590336468861546487576732909330568355660197985308766303169051880608608841595197411026016755350831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48d6cbd97a5d6e6a42291c70d732ed223652533d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1029 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bishopsstortfordindependent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bournelocal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buryfreepress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgeindependent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'destinationeastanglia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.bishopsstortfordindependent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.cambridgeindependent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dissexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fenlandcitizen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granthamjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haverhillecho.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iliffemediapromotions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imrecruit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynnnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newarkadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmarketjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rutland-times.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaldingtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stamfordmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suffolkfreepress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velvetmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bishopsstortfordindependent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bournelocal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buryfreepress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgeindependent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.destinationeastanglia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dissexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fenlandcitizen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.granthamjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haverhillecho.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iliffemediapromotions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imrecruit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynnnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newarkadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newmarketjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rutland-times.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spaldingtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stamfordmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suffolkfreepress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velvetmag.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fd6f7807c0000040300483046022100d695a50fe7fe4ad9e0fab95287c5fdbd56535499bca00ea45a51e0b71f40ec7e022100f278f35715b0f5f196a38fdd8ce3f6b501b9b8858b2f6173b93b8e041cb3aa210076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fd6f7827b00000403004730450220140043cd1c7c4d4f2d71c14c10393e90cbfb04b868bbb93439384a5cadbc8e92022100a2ba95f601f059c124f62a1fc6f759d9e63345e74e1da9d3055527122e115105
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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