*.konviva.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:68:e0:fb:a6:e3:9a:56:bd:21:05:e9:63:35:32:fe:75:4c was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.konviva.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:e0:fb:a6:e3:9a:56:bd:21:05:e9:63:35:32:fe:75:4c
Serial Number (int): 297025277677538206186512574421769406805324
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c0:41:7e:7d:b6:7d:f3:a2:1b:3c:d3:fc:47:70:b6:33:96:21:86:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 39:7f:e7:8f:ef:ff:17:44:13:7d:c7:7d:03:a7:70:9f:71:67:08:c7
Fingerprint (sha256): 89:e4:b5:e2:3b:f6:70:71:52:c9:f2:6f:0a:83:5b:b2:11:80:56:e5:0e:31:a4:f3:e1:d3:b4:ec:42:e4:d4:fa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.konviva.com.br

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.konviva.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ava.portalescudo.konviva.com.br
*.edutivo.com.br
*.evolke.konviva.com.br
*.homol.konviva.com.br
*.konviva.com.br
*.portalescudo.konviva.com.br
*.previnsadigital.konviva.com.br
*.services.konviva.com.br
*.teste.konviva.com.br

Other certificates including the domain name konviva.com.br

(limited to 100 certificates)
*.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
*.ava.portalescudo.konviva.com.br
customurl.konviva.com.br
vetorsolucoes.edutivo.com.br
customurl.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
master.us1.konviva.com.br
vetorsolucoes.edutivo.com.br
adfs.qa.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
master.us1.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
analytics.konviva.com.br
analytics.konviva.com.br
master.us1.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
qa.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
1ssl.konviva.com.br
*.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
*.konviva.com.br
cdn.konviva.com.br
customurl.konviva.com.br
cdn.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
www.ilog.com.br
analytics.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
vetorsolucoes.edutivo.com.br
customurls.konviva.com.br
customurl.konviva.com.br
vetorsolucoes.edutivo.com.br
2ssl.konviva.com.br
www.edcacademy.com.br
2ssl.konviva.com.br
*.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
backendhomol.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
*.homol.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
cdn.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
master.us1.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
*.qa.konviva.com.br
portalescudo.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
qa.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
qa.konviva.com.br
customurls.konviva.com.br
analytics.konviva.com.br
*.konviva.com.br

Certificate

The complete raw certificate details for *.konviva.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGNDCCBRygAwIBAgISA2jg+6bjmla9IQXpYzUy/nVMMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MTkyMjA0MTVaFw0x
OTA3MTgyMjA0MTVaMBsxGTAXBgNVBAMMECoua29udml2YS5jb20uYnIwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbfVaQ8d/b+mvcBylQOUFLU2dbiwMu
hpsViiM5hCM5F2Q8cLs8zEB8wVUVFEdlYV67CdJjCRLZcTuk3/CT7cZ3CpXyve3S
tVEZrw60pZsc6ezpDhTYMo1A2DOaZdj4F7ZWYvpXkxXnP/uRF90buXmPEjh3qtfY
04YEzxME0Dl0qypD8fFOe+DPKqVIGxLpT6vcpmUdq5O1FTlWNs0Foiizx6cgeUsp
DzQXnUHoFXA/tYCuivSMGHUXScDVSIcSayMALQQpjLl0JFC9+zMk7tNKB19J5PQt
aw9H7wsHGEUgYK5zO8tb7mzm4i3JrqFrJzb8rFF7/ptWxhBtMw7kwuy9AgMBAAGj
ggNBMIIDPTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMBBfn22ffOiGzzT/EdwtjOW
IYZCMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8wgfcGA1UdEQSB7zCB7IIhKi5hdmEucG9ydGFsZXNjdWRvLmtvbnZpdmEu
Y29tLmJyghAqLmVkdXRpdm8uY29tLmJyghcqLmV2b2xrZS5rb252aXZhLmNvbS5i
coIWKi5ob21vbC5rb252aXZhLmNvbS5icoIQKi5rb252aXZhLmNvbS5icoIdKi5w
b3J0YWxlc2N1ZG8ua29udml2YS5jb20uYnKCICoucHJldmluc2FkaWdpdGFsLmtv
bnZpdmEuY29tLmJyghkqLnNlcnZpY2VzLmtvbnZpdmEuY29tLmJyghYqLnRlc3Rl
LmtvbnZpdmEuY29tLmJyMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T
AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB
AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SP
KJMBnd3x2/4AAAFqN9fhjgAABAMARzBFAiEA++RWZMAM3nMqX9rJOM41OGbwUML8
WSv31Qj0wz911ZoCIBqpG68Z3kl7vjqo6Op9rXCnpVLRSaNLU83AakDUBYV8AHUA
Y/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFqN9fhkwAABAMARjBE
AiBKCFDLUHsHsweHTfRUCfJBatIRW6qmJ75AyB4othbxzQIgHVBximedXR4t0aA2
OnEOheeKVSMdGeYKJF6VDbjTBhMwDQYJKoZIhvcNAQELBQADggEBADfuqe5SJZBs
zS4VnnqYOt/UzCDAEf6avj7GBzEpr3Ig4N5X0Vb+a9dXSiegrIVg1qdeSwzyi6r4
9PqGSIFYbNp5V7L7w8mLPj4FM4+tfIdgN9+Hx/vsBm2pqPMMarkQkfYRjfh7iv+7
P35vgDfiEYAmCCGieIBjX+qiv967w6d7DcJQQXCi1fDMu1Kd0R0Chcp0BTi/h2h9
AlRoyrpMMl/URyvoV0xlhJQRIKeURUoq4AsQbUrNl57LX8PxT4Jsl9FvoVHs0gQj
bonjaj4/CJYJLArTAVLlW4WeRUTTplGfcBlTsMfYF61QT2uHPaVIktUPT28+q+QK
d9NZEUtMMaM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm31WkPHf2/pr3AcpUDlB
S1NnW4sDLoabFYojOYQjORdkPHC7PMxAfMFVFRRHZWFeuwnSYwkS2XE7pN/wk+3G
dwqV8r3t0rVRGa8OtKWbHOns6Q4U2DKNQNgzmmXY+Be2VmL6V5MV5z/7kRfdG7l5
jxI4d6rX2NOGBM8TBNA5dKsqQ/HxTnvgzyqlSBsS6U+r3KZlHauTtRU5VjbNBaIo
s8enIHlLKQ80F51B6BVwP7WAror0jBh1F0nA1UiHEmsjAC0EKYy5dCRQvfszJO7T
SgdfSeT0LWsPR+8LBxhFIGCuczvLW+5s5uItya6hayc2/KxRe/6bVsYQbTMO5MLs
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297025277677538206186512574421769406805324
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-19 22:04:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 22:04:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.konviva.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19628743814662435886730779512340463286587169467401492684487667302200618444568007234306984482792517542374320941580558406673852301048772011056049119663804045951123939963395128083177006415776574768111742154630144563326557220952531760336570826091998350497834822011624428502006439125812720907593418358296132071290673784361407922935236419380774218037245292607294788589211745315341217680477844073277238471568546399052070586226678519031280988396728552748014595318103804841410485876285202430972596601416098486574672516810425960408410107604518856229815283280736760424181724169386715981914059680372189639070224140177838656646333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0417e7db67df3a21b3cd3fc4770b63396218642
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (239 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ava.portalescudo.konviva.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edutivo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evolke.konviva.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homol.konviva.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konviva.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portalescudo.konviva.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.previnsadigital.konviva.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.konviva.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teste.konviva.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a37d7e18e0000040300473045022100fbe45664c00cde732a5fdac938ce353866f050c2fc592bf7d508f4c33f75d59a02201aa91baf19de497bbe3aa8e8ea7dad70a7a552d149a34b53cdc06a40d405857c00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a37d7e193000004030046304402204a0850cb507b07b307874df45409f2416ad2115baaa627be40c81e28b616f1cd02201d50718a679d5d1e2dd1a0363a710e85e78a55231d19e60a245e950db8d30613
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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