helpdesk.nogaholding.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c3:0d:44:a0:33:3e:21:21:ad:d1:dc:d0:ad:53:eb:2e:79 was issued on by Let's Encrypt.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=helpdesk.nogaholding.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c3:0d:44:a0:33:3e:21:21:ad:d1:dc:d0:ad:53:eb:2e:79
Serial Number (int): 414821841566000972233180358601255833775737
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a8:79:79:ec:d5:30:1f:de:67:bb:d1:52:9e:b9:ae:bf:69:b8:96:7b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 27:b9:29:24:8e:4c:93:77:62:4f:81:ce:51:99:42:75:61:13:48:19
Fingerprint (sha256): 70:39:73:29:a2:e2:88:6a:c3:bf:61:07:af:57:1d:a5:c7:45:de:65:4a:da:6d:07:c1:76:e0:a6:cf:fb:7e:7d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate helpdesk.nogaholding.com

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for helpdesk.nogaholding.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ask.adu.ac.ae
destek.monotis.com
help.creativecoop.com
help.rpeck.net
helpdesk.almuradgroup.com
helpdesk.grupapgu.pl
helpdesk.ict.ae
helpdesk.iesabroad.org
helpdesk.nogaholding.com
helpdesk.prepa.pr
helpdesk.raktda.com
helpdesk.strider-intel.net
helpdesk.valin.com
itservicedesk.gorillaglue.com
itsupport.upfronthealthcare.com
mambu-support.8west.ie
mesadeservicios.elnayar.com
sd.ali-alsaeed.com
sd.elajouholding.com
sdp.rorikgroup.com
servicedesk.caemklerks.com
servicedesk.dmshealth.com
servicedesk.ilink-systems.com
servicedesk.joinparachute.com
servicedesk.lootahgroup.com
servicedesk.operationsinc.com
servicedesk.prasaga.com
support.callon.com
support.hsi-msp.com

Other certificates including the domain name nogaholding.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for helpdesk.nogaholding.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG6zCCBdOgAwIBAgISBMMNRKAzPiEhrdHc0K1T6y55MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjEwMDYxMDU2MzNaFw0yMzAxMDQxMDU2MzJaMCMxITAfBgNVBAMT
GGhlbHBkZXNrLm5vZ2Fob2xkaW5nLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALWQReI9iECyYXmEAveuHAS8rbVAhgogijh1eU49bqCGPOAAXK87
yEx47YlTIfrSW1mUg1ia5TMrT6fpr3P2Z5D3TShAIM9sFY98Q3yKqPCYAkSqKIxq
G6aa5rpKRpCQdQzf3KjiOD1ik5cmSUj1H0nGTjL0Utp6gre6BDKPzD5jZdrp5ZJa
rlXMBUQ9F5lKz+Atcl3e+COaJAuKTOKSrI6ZdOGuFAsGAtcQwvnkHyR6NxZnf5GM
4F79tIsDJBO9J4UEHOe1gDqpJS90cG/XB8sDQ5EhGk5sObBYzCVgFEVloHnX8YaX
A+bpQrOBn4etJ8kCWv7ehAfxbtRWPOAH+VcCAwEAAaOCBAgwggQEMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUqHl57NUwH95nu9FSnrmuv2m4lnswHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wggLJBgNVHREEggLAMIICvIINYXNrLmFkdS5hYy5hZYISZGVz
dGVrLm1vbm90aXMuY29tghVoZWxwLmNyZWF0aXZlY29vcC5jb22CDmhlbHAucnBl
Y2submV0ghloZWxwZGVzay5hbG11cmFkZ3JvdXAuY29tghRoZWxwZGVzay5ncnVw
YXBndS5wbIIPaGVscGRlc2suaWN0LmFlghZoZWxwZGVzay5pZXNhYnJvYWQub3Jn
ghhoZWxwZGVzay5ub2dhaG9sZGluZy5jb22CEWhlbHBkZXNrLnByZXBhLnByghNo
ZWxwZGVzay5yYWt0ZGEuY29tghpoZWxwZGVzay5zdHJpZGVyLWludGVsLm5ldIIS
aGVscGRlc2sudmFsaW4uY29tgh1pdHNlcnZpY2VkZXNrLmdvcmlsbGFnbHVlLmNv
bYIfaXRzdXBwb3J0LnVwZnJvbnRoZWFsdGhjYXJlLmNvbYIWbWFtYnUtc3VwcG9y
dC44d2VzdC5pZYIbbWVzYWRlc2VydmljaW9zLmVsbmF5YXIuY29tghJzZC5hbGkt
YWxzYWVlZC5jb22CFHNkLmVsYWpvdWhvbGRpbmcuY29tghJzZHAucm9yaWtncm91
cC5jb22CGnNlcnZpY2VkZXNrLmNhZW1rbGVya3MuY29tghlzZXJ2aWNlZGVzay5k
bXNoZWFsdGguY29tgh1zZXJ2aWNlZGVzay5pbGluay1zeXN0ZW1zLmNvbYIdc2Vy
dmljZWRlc2suam9pbnBhcmFjaHV0ZS5jb22CG3NlcnZpY2VkZXNrLmxvb3RhaGdy
b3VwLmNvbYIdc2VydmljZWRlc2sub3BlcmF0aW9uc2luYy5jb22CF3NlcnZpY2Vk
ZXNrLnByYXNhZ2EuY29tghJzdXBwb3J0LmNhbGxvbi5jb22CE3N1cHBvcnQuaHNp
LW1zcC5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYKKwYBBAHW
eQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBABKvZX45ga9N5jApyLo4l7Kd
2v7B8KiTfehYYV9rI9povYbKYwIBJGLtGYM/vog5OITwErghkhvQ15aT0Pi7F3MU
ZYoo1hddyGZ2BU2CAWww352QwjiO0YgwFdTTIMZjNA2w/pzfTd+KNBd9MycFCjdL
hOeddgmzZTaxxAIN4SPQAY9pEtx7U+6FukghS8FS5dmZ5Un1FNn8pCz/94/+K5wq
Vw2CrRv0sHF/EV6GcCIEitDMKw2l1EO9kPlUUQYYBXAWVMnwEU1LjYOCWPBetdrz
Jbnr1PhIr3Kc5/SRMKZKLXE8Rfvu68va/yP8u5HTM/sOsM5ewGxmKZyJubjCQC4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZBF4j2IQLJheYQC964c
BLyttUCGCiCKOHV5Tj1uoIY84ABcrzvITHjtiVMh+tJbWZSDWJrlMytPp+mvc/Zn
kPdNKEAgz2wVj3xDfIqo8JgCRKoojGobpprmukpGkJB1DN/cqOI4PWKTlyZJSPUf
ScZOMvRS2nqCt7oEMo/MPmNl2unlklquVcwFRD0XmUrP4C1yXd74I5okC4pM4pKs
jpl04a4UCwYC1xDC+eQfJHo3Fmd/kYzgXv20iwMkE70nhQQc57WAOqklL3Rwb9cH
ywNDkSEaTmw5sFjMJWAURWWgedfxhpcD5ulCs4Gfh60nyQJa/t6EB/Fu1FY84Af5
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414821841566000972233180358601255833775737
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-06 10:56:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 10:56:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'helpdesk.nogaholding.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22920276858533599280530802598579670884479067876834983861222893044060206028159179991087411792445577495356989613553568897215786942164765575935790598286433278630742350586916776277478679941641304789995876953349451515618821162376125893952277739432173944813658275436624961320660771072085147059571005933158401916302272841336033397629483676118206408738202051873952570618920434040514821456317871202434477828800011017452715584401052867809500801437716609434775874458674676308558930181513445538739960025410447649920295388399734842879085974665271659794991945425052600807320316363098446963359641233596404844271759992183405807139159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a87979ecd5301fde67bbd1529eb9aebf69b8967b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (704 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.adu.ac.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'destek.monotis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.creativecoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.rpeck.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.almuradgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.grupapgu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ict.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.iesabroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.nogaholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.prepa.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.raktda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.strider-intel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.valin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itservicedesk.gorillaglue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport.upfronthealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mambu-support.8west.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesadeservicios.elnayar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sd.ali-alsaeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sd.elajouholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdp.rorikgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.caemklerks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.dmshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.ilink-systems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.joinparachute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.lootahgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.operationsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.prasaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.callon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.hsi-msp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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