turbotouch.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:88:cf:64:58:47:3b:ac:b9:53:a4:a7:dd:9a:68:50:23:9a was issued on by Let's Encrypt.

With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=turbotouch.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:cf:64:58:47:3b:ac:b9:53:a4:a7:dd:9a:68:50:23:9a
Serial Number (int): 307890930911837415125205528365602794644378
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 37:96:60:22:b2:ac:a2:c4:6b:9a:61:cf:46:34:00:a9:5b:88:6a:88
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e7:3e:20:97:76:68:f3:a3:39:0a:45:60:48:71:af:20:db:bd:95:91
Fingerprint (sha256): 8c:4e:16:d9:74:2c:d6:34:fd:ae:93:4e:68:8b:f1:82:1b:f1:9c:e2:0d:73:42:d7:55:78:d0:0d:90:ef:05:62

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate turbotouch.co.nz

55

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for turbotouch.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aurfc.co.nz
belfastrugby.co.nz
cdcricket.co.nz
centralcitybaseball.org.nz
cliftoncricket.nz
cliftoncricketclub.co.nz
collegesportsportal.co.nz
edenrugby.co.nz
fastpitch.co.nz
flaxmillbaymotel.co.nz
goodmanrural.co.nz
greenislandbadmintonclub.net.nz
greertonmaristnz.org.nz
halswellunitedfc.co.nz
harbourcityhockey.org.nz
havelocknorthbridgeclub.co.nz
hawkesbayrugbyreferees.co.nz
hawkfootball.org.nz
hbcricket.co.nz
hbreds.nz
hbrfu.co.nz
hbru.co.nz
healthyfamiliesinvercargill.org.nz
hillseekers.co.nz
hillseekers4wd.co.nz
huttaikido.org.nz
invercargillnetball.co.nz
magpies.co.nz
mesoball.co.nz
mgcarclubcanterbury.nz
mtsquashclub.co.nz
nelsonnetball.co.nz
netballsouthcanterbury.co.nz
northshorerugby.co.nz
nzsssc.co.nz
nzsssc.org.nz
ojcc.org.nz
papakurarugbyleague.co.nz
papatoetoenorth.school.nz
photocard.co.nz
playsoftball.org.nz
southbridgerugby.com
southlandschoolsport.org.nz
sportslink.org.nz
sportspark.co.nz
sportspay.co.nz
sportsportal.co.nz
sportyapp.co.nz
tasmanvolley.org.nz
tuki.co.nz
turbotouch.co.nz
turbotouch.org.nz
waikatogolf.co.nz
waikatogolf.nz
westcoastsoftball.co.nz

Other certificates including the domain name turbotouch.co.nz

(limited to 100 certificates)
www.montressors.co.nz
supersixes.co.nz
www.bophockey.co.nz
turbotouch.co.nz
www.sporty.co.nz
eden.rugby
sporty.org.nz
sporty.org.nz
hbnetball.co.nz
masseyrfc.co.nz
sporty.org.nz
sporty.org.nz
ctfc.co.nz
sporty.org.nz
turbotouch.co.nz
sporty.org.nz
sporty.org.nz
kjcc.org.nz
www.sporty.co.nz
eden.rugby
www.mysporty.co.nz
sked.co.nz
www.darfieldrugby.co.nz
www.mysporty.co.nz
golfnorthland.co.nz
www.mysporty.co.nz
www.sporty.co.nz
www.sporty.co.nz
www.mysporty.co.nz
gonville.school.nz
cfc.co.nz

Certificate

The complete raw certificate details for turbotouch.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsxXhtpQbDTp2yCs8S0k
WDEUh2+NBSRE7J7AFbZBwakNnTycd8tCVpu2cC2NF/P2KawCmK8b3ATiAS9vAaHH
RsjjzqdaaJZ75et3s7HDUMhIoJYic/nKqqc6Q3gwvIiMSpoU4ldtD/+ylqGzq+DZ
7pfJu8Eqr7S/yQx14dMNVIfdCJ7mUzGlEjU8xnJDmYOe4X/lgHULC6H9mx6UV9/o
HBt5r+hzUeNtgElBVLmx4ZYO6SpnTiIrkscjSUkZEfbRofiHEAtnXOIR18Vpzq8+
pGlqsRc6r9olJNJ6MZ9NquCmwSeK+dY0HiIY7nxWfQyJ8TYaMicieqDTcI62qjv5
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307890930911837415125205528365602794644378
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 20:13:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 20:13:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'turbotouch.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22066229811247955451372660882011020649065647423826377210186349602778126170316549815017414577253892173940283930695292042604345900063834438550408164360417776968393261004180706250369884927568451896573187614044066047826978916703460456328766959037057057887673876125655997981879367157216660512457404153340989134453479671169504536569975758987138560315162190307474230316734765935311427227390976911984211480206051966311372124654178740679221556917851732331376520367882748807245962288337595042321156284450262857062797407645633294839687025287283759506536149942713085522717974783149042710744660833433381225473252231642659547773363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37966022b2aca2c46b9a61cf463400a95b886a88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1153 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfastrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliftoncricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliftoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greertonmaristnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halswellunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourcityhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesoball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgcarclubcanterbury.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papatoetoenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southbridgerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandschoolsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportslink.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportspay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportyapp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasmanvolley.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatogolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatogolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westcoastsoftball.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d3bec3ecb0000040300463044022052fd11ec316a852287f5bc2448b06e5d9cde40d3eac3f3d80be25028b0852aa00220698dff2dfa24bf97f1c0458e24f2570f823e37232dd0eca35b4c4848ef2728a700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d3bec3cf90000040300473045022100e34cb09f9abb279cfed6c7483d8b5cd1533ef28e484daf6602129263c4ad98bd0220233f20b0418b079ca7532ec2723dece4a9c7c6c618813e991023510a233b03c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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