www.financeservices.navitas.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e8:39:5f:06:53:8c:d8:16:5b:23:de:72:28:81:7a:ac:e8 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.financeservices.navitas.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e8:39:5f:06:53:8c:d8:16:5b:23:de:72:28:81:7a:ac:e8
Serial Number (int): 427470912244973995368898022929953208315112
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 24:b0:fc:2d:9c:4e:df:2c:1d:98:b4:3c:4d:22:d4:a5:af:9b:91:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 69:d6:1d:a1:3f:76:78:83:fe:25:3b:5a:f3:f7:76:d5:89:78:e3:a1
Fingerprint (sha256): 85:a8:20:84:eb:11:c9:1f:bb:d1:c9:85:1a:34:a1:a5:25:82:c0:c2:2b:c8:6b:32:3a:4b:7c:b9:a8:67:01:92

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.financeservices.navitas.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.financeservices.navitas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

123.shape.com.au
helpdesk.arn.com.au
helpdesk.narromine.nsw.gov.au
helpdesk.wyongccs.nsw.edu.au
sdpcloud.cs.zohohost.com.au
servicedesk.hvccc.com.au
www.financeservices.navitas.com
www.financesharedservices.navitas.com

Other certificates including the domain name navitas.com

(limited to 100 certificates)
www.bcuic.navitas.com
study.hibt.navitas.com
sdp.collinsfoods.com
s4-sni.cloudinary.com
access2.navitas.com
www.upic.navitas.com
s4-sni.cloudinary.com
www.unh.navitas.com
s4-sni.cloudinary.com
helpdesk.thescapegroup.com.au
moodle-sae-au.axis.navitas.com
s4-sni.cloudinary.com
moodle.icrgu.navitas.com
moodle.uml.navitas.com
study.wku.navitas.com
study.bcuic.navitas.com
marketing.navitas.com
www.icp.navitas.com
moodle-sae-au.axis.navitas.com
www.uml.navitas.com
moodle.unic.navitas.com
www.icp.navitas.com
study.puic.navitas.com
www.upic.navitas.com
support.canterbury.qld.edu.au
www.financesharedservices.navitas.com
cdn.navigate.navitas.com
theportal.horizons.govt.nz
study.puic.navitas.com
study.puic.navitas.com
moodle.ucc.navitas.com
study.icrgu.navitas.com
*.hic.navitas.com
study.umd.navitas.com
study.bcuic.navitas.com
s4-sni.cloudinary.com
mynavcareer.pep.navitas.com
icrgu.navitas.com
adfs.navitas.com
helpdesk.grv.org.au
www.umass.navitas.com
sslvpn.navitas.com
code.navitas.com
moodle.training.navitas.com
*.eic.navitas.com
code.navitas.com
moodle.libt.navitas.com
mynavcareer.pep.navitas.com
agents.navitas.com
moodle.libt.navitas.com
learning.uml.navitas.com
moodle.hic.navitas.com
wifi.navitas.com
*.navitas.com
www.cric.navitas.com
fdus-68.freshdesk.com
*.training.navitas.com
www.umb.navitas.com
pathways.navitas.com
study.icrgu.navitas.com
usa.navitas.com
www.qld.navitas.com
servicehub.austal.com
knowledge.navigate.navitas.com
study.icws.navitas.com
study.hic.navitas.com
atrea-support.macmillan-platform.com
www.fau.navitas.com
www.icws.navitas.com
s4-sni.cloudinary.com
www.icgru.navitas.com
fdus-68.freshdesk.com
sslvpn.navitas.com
adfs.navitas.com
usawiki.navitas.com
*.training.navitas.com
www.bcuic.navitas.com
*.navitas.com
*.uat.navitas.com
moodle-analytics.navitas.com
build.navitas.com
study.uml.navitas.com
www.icws.navitas.com
navigate.navitas.com
moodle-ucic.axis.navitas.com
www.icrgu.navitas.com
servicedesk.yooralla.com.au
study.libt.navitas.com
www.icp.navitas.com
fdus-68.freshdesk.com
atrea-support.macmillan-platform.com
helpdesk.phsa.com.au
moodle.icrgu.navitas.com
learning.fau.navitas.com
servicedesk.cockburn.wa.gov.au
www.icws.navitas.com
navigate.navitas.com
s4-sni.cloudinary.com
learning.libt.navitas.com
moodle.bcuic.navitas.com

Certificate

The complete raw certificate details for www.financeservices.navitas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgISBOg5XwZTjNgWWyPeciiBeqzoMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDMwMTAwMThaFw0y
MDA1MDMwMTAwMThaMCoxKDAmBgNVBAMTH3d3dy5maW5hbmNlc2VydmljZXMubmF2
aXRhcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcXkr3eWN3
QL0HQTbHZvYv7xtjk0MHB6i7V/uwIXxTEPcG/cgb1ea+ulvx4s6Bt+z9wo9XCSJT
bWAYaeixVG+GA3mQkij4c8Tl4fhMpRQIUY3WliPXgjX/qohDDkUkXIkqmN74B4do
q7tp/OIdcNwzLc8cs+ABuPyG0xJTMFQbUzOzR/flhVTv/Vo9rRyT9L6mAcENo94s
kYe/8ZLG+FKB7NM4JIyi/DcJZMpTGwZ5HHvDSn4Exum5ApRJhdPMAmWA/JclGl92
33Wo5wLp3t4zTDzF/3wU41fOn80FzOaEf1riPMCMkkn14OfOSaGKWcPGRWqXWf+k
qHgdWj5G5UWPAgMBAAGjggM4MIIDNDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCSw
/C2cTt8sHZi0PE0i1KWvm5GTMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wge4GA1UdEQSB5jCB44IQMTIzLnNoYXBlLmNv
bS5hdYITaGVscGRlc2suYXJuLmNvbS5hdYIdaGVscGRlc2submFycm9taW5lLm5z
dy5nb3YuYXWCHGhlbHBkZXNrLnd5b25nY2NzLm5zdy5lZHUuYXWCG3NkcGNsb3Vk
LmNzLnpvaG9ob3N0LmNvbS5hdYIYc2VydmljZWRlc2suaHZjY2MuY29tLmF1gh93
d3cuZmluYW5jZXNlcnZpY2VzLm5hdml0YXMuY29tgiV3d3cuZmluYW5jZXNoYXJl
ZHNlcnZpY2VzLm5hdml0YXMuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysG
AQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu
b3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAXqdz+d9WwOe1Nkh90EngMnqR
mgyEoRIShBh1loFxRVgAAAFwCMboyQAABAMARjBEAiASuDz5q9bWuqnUTfRhyCUE
VPApRQmIRUxqbelIWwXAAQIgHoUJRqIflUzWEC3Drz1wC6hYLEHuxMoozBt1v4tp
vSAAdgAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAXAIxujsAAAE
AwBHMEUCIAvUy/1IaNQTMMUHNhPg1cnnL+LYWh6xJVaZB4XSYnYRAiEApoASJL5h
5K6iiBp15SBCof8ozwPSDvmD2li2tNg3kQ8wDQYJKoZIhvcNAQELBQADggEBAI88
xF/d6rPlsv5ctOQLiUeGY4HDM5ahNl+egsSSFI5HZP8x63ScufFgAXvDBgGSNYYn
gVvIfvW0a5gQhNJl14K/JjuXN2Q1veZhLR4g5MGVj1geSr7Wf6XpScWwqeVRtR2K
A4ALYu5ZPkdnOjZ1Gwdi5R2/eRJ/iw/gcvxHHe4Q5cRajdE7LfMSqNWo5AEkDZ1A
14h3mQge9uTdPo/UlPXWCz/pV8SexgIM2RiXtOV7j1at/GIMiphyrTFkwGFXzV+b
NonvcclwNgqy8612ccWKaYPdTBPPIzFmghmgN+2nxd8hu1JjAz9Ldp9pN57ohAtn
8VFqydpptqOpoTEfZWQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF5K93ljd0C9B0E2x2b2
L+8bY5NDBweou1f7sCF8UxD3Bv3IG9Xmvrpb8eLOgbfs/cKPVwkiU21gGGnosVRv
hgN5kJIo+HPE5eH4TKUUCFGN1pYj14I1/6qIQw5FJFyJKpje+AeHaKu7afziHXDc
My3PHLPgAbj8htMSUzBUG1Mzs0f35YVU7/1aPa0ck/S+pgHBDaPeLJGHv/GSxvhS
gezTOCSMovw3CWTKUxsGeRx7w0p+BMbpuQKUSYXTzAJlgPyXJRpfdt91qOcC6d7e
M0w8xf98FONXzp/NBczmhH9a4jzAjJJJ9eDnzkmhilnDxkVql1n/pKh4HVo+RuVF
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427470912244973995368898022929953208315112
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 01:00:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 01:00:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.financeservices.navitas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19739673106433266770016830062012258717310904992065553139921111885476314756157179881070030513407565255597209182923567238034124349038213577780775417453592593591434790359579492495751535303992333052703218182093822697074335575001977617922385754521721265755678725444690399947474032936870873856534651614593851012723909180907064461859359013593843084544745182734765835125359913031012454670639054779661011341995948579377747394269999163116975986375374928841414953233265798151420688834782229023300931200247021846929871107598176782008585408964856787114531291612097663225628047662337177440445473643142953131318799227326544820389263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24b0fc2d9c4edf2c1d98b43c4d22d4a5af9b9193
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (230 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.arn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.narromine.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.wyongccs.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdpcloud.cs.zohohost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.hvccc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financeservices.navitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financesharedservices.navitas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017008c6e8c90000040300463044022012b83cf9abd6d6baa9d44df461c8250454f029450988454c6a6de9485b05c00102201e850946a21f954cd6102dc3af3d700ba8582c41eec4ca28cc1b75bf8b69bd2000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017008c6e8ec000004030047304502200bd4cbfd4868d41330c5073613e0d5c9e72fe2d85a1eb12556990785d2627611022100a6801224be61e4aea2881a75e52042a1ff28cf03d20ef983da58b6b4d837910f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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