nupragaan.or.id

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d8:61:67:ea:8e:20:41:69:88:b9:59:50:77:a4:9c:bc:c8 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nupragaan.or.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d8:61:67:ea:8e:20:41:69:88:b9:59:50:77:a4:9c:bc:c8
Serial Number (int): 422079609661475489551881487966379259509960
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7a:b1:07:65:49:c6:24:9c:5f:c9:7b:d5:11:8a:a0:a3:68:ad:73:55
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 94:ff:73:58:49:7c:07:e9:7f:ad:05:9d:88:01:fe:a6:1f:b2:b1:62
Fingerprint (sha256): 74:b8:53:79:fa:a9:10:d8:20:24:3d:da:ae:98:13:ab:27:d7:a1:bd:13:96:26:46:f0:9d:8b:0e:8e:3a:0b:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nupragaan.or.id

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nupragaan.or.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.bumiaswaja.com
autodiscover.nupragaan.or.id
bumiaswaja.com
cpanel.bumiaswaja.com
cpanel.nupragaan.or.id
mail.bumiaswaja.com
mail.nupragaan.or.id
nupragaan.bumiaswaja.com
nupragaan.or.id
webdisk.bumiaswaja.com
webdisk.nupragaan.or.id
webmail.bumiaswaja.com
webmail.nupragaan.or.id
www.bumiaswaja.com
www.nupragaan.bumiaswaja.com
www.nupragaan.or.id

Other certificates including the domain name nupragaan.or.id

(limited to 100 certificates)
nupragaan.bumiaswaja.com
*.nupragaan.or.id
dev.nupragaan.or.id
bumiaswaja.com
dev.nupragaan.or.id
lubab.sch.id
bumiaswaja.com
nupragaan.or.id
terkininews.com
bumiaswaja.com
keprisatu.com
keprisatu.com
nupragaan.or.id
nupragaan.or.id
dev.nupragaan.or.id
bumiaswaja.com
dev.nupragaan.or.id
dev.nupragaan.or.id
nupragaan.or.id
*.esofthmd.masuk.id
steimadani.ac.id
dev.nupragaan.or.id
nupragaan.or.id
nupragaan.or.id
dev.nupragaan.or.id
nupragaan.or.id
klinik.nupragaan.or.id
nupragaan.or.id
terkininews.com
alhuda.sch.id
lib.pasca.instika.ac.id.esofthmd.masuk.id
nupragaan.or.id
klinik.nupragaan.or.id
lubab.sch.id
bumiaswaja.com
klinik.nupragaan.or.id
dev.nupragaan.or.id
nupragaan.or.id
yapphit.sch.id
ma.dev.nupragaan.or.id
nupragaan.or.id
dev.nupragaan.or.id
nupragaan.or.id
nupragaan.or.id
nupragaan.or.id
dev.nupragaan.or.id

Certificate

The complete raw certificate details for nupragaan.or.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGwjCCBaqgAwIBAgISBNhhZ+qOIEFpiLlZUHeknLzIMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMjExODU2MzRaFw0x
OTAzMjExODU2MzRaMBoxGDAWBgNVBAMTD251cHJhZ2Fhbi5vci5pZDCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMKQS2vkQtuWwRGobQOQmsM7O3wyWj+W
vcoo4e9TKFeu/wFZ0st15Z0trlkc298YNyNJ8cE2GAs4zfTSwf9l7LvdmJ0+gowZ
ZddR1KuCnBqsHVLWSjiVVOr6Wny2bYM4h+ixminJP96ih8aKKXFIvLoCLxxbqSrg
8ZIIHVQsVrNWsYlD5pCq7GbYWF4Y3kN3suvzo37r1aDEVApZNBdtctgUXK+oVKQf
6q0TPl6tn/y9q8COamaAtZ0CGaZwpOhwfmvsBc/mzU/5cUV3gmOZ1quhefFWPdm9
3LJgJHt9TlMqbuEqvAU5LxiNN7uZPyD4C99o1pG7t5nsZTWDZIjSpU8CAwEAAaOC
A9AwggPMMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUerEHZUnGJJxfyXvVEYqgo2it
c1UwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCCAYYGA1UdEQSCAX0wggF5ghthdXRvZGlzY292ZXIuYnVtaWFzd2FqYS5j
b22CHGF1dG9kaXNjb3Zlci5udXByYWdhYW4ub3IuaWSCDmJ1bWlhc3dhamEuY29t
ghVjcGFuZWwuYnVtaWFzd2FqYS5jb22CFmNwYW5lbC5udXByYWdhYW4ub3IuaWSC
E21haWwuYnVtaWFzd2FqYS5jb22CFG1haWwubnVwcmFnYWFuLm9yLmlkghhudXBy
YWdhYW4uYnVtaWFzd2FqYS5jb22CD251cHJhZ2Fhbi5vci5pZIIWd2ViZGlzay5i
dW1pYXN3YWphLmNvbYIXd2ViZGlzay5udXByYWdhYW4ub3IuaWSCFndlYm1haWwu
YnVtaWFzd2FqYS5jb22CF3dlYm1haWwubnVwcmFnYWFuLm9yLmlkghJ3d3cuYnVt
aWFzd2FqYS5jb22CHHd3dy5udXByYWdhYW4uYnVtaWFzd2FqYS5jb22CE3d3dy5u
dXByYWdhYW4ub3IuaWQwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEC
BgorBgEEAdZ5AgQCBIHzBIHwAO4AdQB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3
NXnmEHvMVgAAAWfSV0dsAAAEAwBGMEQCIFJT88fO8PsRher1tYpWawyYCW3uQ9d4
IdZuQC/i5WTGAiBEYaKkGTWX4jeaqey+IhP0/Wrimwyx9fh4bNryi5ohVQB1AGPy
283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABZ9JXRvQAAAQDAEYwRAIg
eKq6C7hqB2/7Y01p93aapav0ASFzsaOWFZVPduCv7HcCID7nHY9EzfHE1DR2dSP8
vYct9GFGTHo2eUIJu9kdj1HAMA0GCSqGSIb3DQEBCwUAA4IBAQBqtgf/u531Jmg3
AMqNzrO7bcp33V3Yf8cH98Q562WyEKOQ+VWwc2UT+KL/NyQw5YuiE8Z1UbecOETN
bSctkc85ZeSfgmulvmXI1uAn8HZcIvrp49aD5EPJ87X/RHXb9c86PCbPRYEI6qxZ
5/HuS2vsebAr9RZtMp2wXizqjkmKMFsCeHk0GREIsn0hjL8AVtSfmUh6KHsaW0LH
lHKmbdZ222XL0Kz7jw9GU7VYqQvaBcGcKGUmtWHNsYzdd3mm+IDsM80Zn7nh6ipr
pf1Sx5dlxeWyOC/36zojfKUKqLOufgAKNYvEA+EADAgr8xiTJUpldF57IZQr+5mn
zT0yg8jr
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpBLa+RC25bBEahtA5Ca
wzs7fDJaP5a9yijh71MoV67/AVnSy3XlnS2uWRzb3xg3I0nxwTYYCzjN9NLB/2Xs
u92YnT6CjBll11HUq4KcGqwdUtZKOJVU6vpafLZtgziH6LGaKck/3qKHxoopcUi8
ugIvHFupKuDxkggdVCxWs1axiUPmkKrsZthYXhjeQ3ey6/OjfuvVoMRUClk0F21y
2BRcr6hUpB/qrRM+Xq2f/L2rwI5qZoC1nQIZpnCk6HB+a+wFz+bNT/lxRXeCY5nW
q6F58VY92b3csmAke31OUypu4Sq8BTkvGI03u5k/IPgL32jWkbu3mexlNYNkiNKl
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422079609661475489551881487966379259509960
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-21 18:56:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-21 18:56:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nupragaan.or.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24561385490052555157351503052448306815123242497160805826137707913604889346482082267264685664305957727463368281254586514288250161697336737481639237957012948798608789833764548892297179825903296105214762618356844591029515444240815468486861759107929845965949879953645693103311632233618728479877137218304430795850089258543708298712294660224245273696920997601501737034853189075841790548105495195267709762275118896484129773982432331788592457569127811332043608498183606165709008462604686019521805005870737104354296341833828081128632436253297031491022298277261484686913283315377579637755523471570933478366894232367802594010447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ab1076549c6249c5fc97bd5118aa0a368ad7355
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (381 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bumiaswaja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nupragaan.or.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bumiaswaja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.bumiaswaja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.nupragaan.or.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bumiaswaja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nupragaan.or.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nupragaan.bumiaswaja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nupragaan.or.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.bumiaswaja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.nupragaan.or.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bumiaswaja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.nupragaan.or.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bumiaswaja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nupragaan.bumiaswaja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nupragaan.or.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167d257476c000004030046304402205253f3c7cef0fb1185eaf5b58a566b0c98096dee43d77821d66e402fe2e564c602204461a2a4193597e2379aa9ecbe2213f4fd6ae29b0cb1f5f8786cdaf28b9a215500750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167d25746f40000040300463044022078aaba0bb86a076ffb634d69f7769aa5abf4012173b1a39615954f76e0afec7702203ee71d8f44cdf1c4d434767523fcbd872df461464c7a36794209bbd91d8f51c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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