tektonik.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:85:05:8e:3e:e5:0a:81:0b:7e:62:4c:26:63:6b:68:38:5a was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tektonik.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:85:05:8e:3e:e5:0a:81:0b:7e:62:4c:26:63:6b:68:38:5a
Serial Number (int): 306601797317554287603364739136681132177498
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:24:76:78:c9:62:79:1c:12:eb:69:bf:42:cc:3a:93:51:1f:7a:19
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 87:75:ab:87:e7:86:41:9b:2f:e1:7e:1d:c5:7b:99:e6:db:48:c1:bf
Fingerprint (sha256): 8d:e9:eb:79:85:bb:43:c8:44:d7:85:14:02:1b:04:8c:18:a3:9f:4b:85:a7:6a:72:ad:fa:1b:b6:50:49:b5:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tektonik.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tektonik.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ftp.tektonik.ca
it.tektonik.ca
it.tektonik.com
mail.tektonik.ca
mail.tektonik.com
pop.tektonik.com
smtp.tektonik.com
tektonik.ca
tektonik.com
ti.tektonik.ca
ti.tektonik.com
www.tektonik.ca
www.tektonik.com

Other certificates including the domain name tektonik.com

(limited to 100 certificates)
tek7.tektonik.com
tektonik.com
subscriptions.linxio.com
bk1.tektonik.com
tek7.tektonik.com
promo.tektonik.com
it.tektonik.ca
tektonik.com
tek7.tektonik.com
tek7.tektonik.com
tek7.tektonik.com
tektonik.com
konto.eriksberg.ax
tektonik.com
it.tektonik.ca
promo.tektonik.com
tek7.tektonik.com
it.tektonik.ca
subscriptions.hdtelly.tv
tek7.tektonik.com
konto.eriksberg.ax
it.tektonik.ca
tek7.tektonik.com
tektonik.com
tek7.tektonik.com
tektonik.com
it.tektonik.ca
tek7.tektonik.com
tek7.tektonik.com
tek7.tektonik.com
tektonik.com
myaccount.mylittlemascaraclub.com
konto.eriksberg.ax
konto.eriksberg.ax
accounts.ntsrd.org
konto.eriksberg.ax
subscriptions.bluume.com
subscriptions.infodriveindia.com
sub.kiwiz.io
subscriptions.regtify.com
tektonik.com
konto.eriksberg.ax
odoo.tektonik.com
konto.eriksberg.ax
konto.eriksberg.ax
it.tektonik.ca
login.minus.io
tek7.tektonik.com
tek7.tektonik.com
tek7.tektonik.com
myaccount.justsoopit.com
promo.tektonik.com
tektonik.com
konto.eriksberg.ax
tek7.tektonik.com
tektonik.ca
tek7.tektonik.com
tek7.tektonik.com
konto.eriksberg.ax
subscriptions.mleap.in
tektonik.com
tek7.tektonik.com
tektonik.ca
konto.eriksberg.ax
tek7.tektonik.com
konto.eriksberg.ax
tektonik.com
tek7.tektonik.com
tektonik.ca
tek7.tektonik.com
subscriptions.hosteddialer.com
promo.tektonik.com
promo.tektonik.com
tektonik.com
odoo.tektonik.com
tek7.tektonik.com
subscriptions.urbanstream.co.uk
tektonik.com
billing.zerotek.com
konto.eriksberg.ax
konto.eriksberg.ax
it.tektonik.ca
it.tektonik.ca
plans.tektonik.com
tek7.tektonik.com
tek7.tektonik.com
konto.eriksberg.ax
konto.eriksberg.ax

Certificate

The complete raw certificate details for tektonik.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHIjCCBgqgAwIBAgISA4UFjj7lCoELfmJMJmNraDhaMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTAwMzIxMTlaFw0x
OTEwMDgwMzIxMTlaMBcxFTATBgNVBAMTDHRla3RvbmlrLmNvbTCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBALQSedhlFK618hqs8ut7qyib1d2fk+KjQctE
fYXLoLjkyYGU+K3R+kA18mdmT9ptbneHBMdE7ov6E6PsI1cgMA0ensgEf6bNj1hF
ZzrybCKang9oEVSLQZLraX5cXU2Apai9u7HUWFpxL940+NsErhc46/fvySDHoyUo
krcBVG1i+ZXr6Hv88jF3Nmub3/A8Q+Rj7HjfOmqVmWitOfTfqrUKOhMjMZrdlRQ7
B+aqRDxFUv7cy8q6z0H1upYnj4c0UeISbtrXLE4QfzEya7Bsy15wJZ5ZDxcsLIOX
1Lmz4vRvkdy/Si1pxMbLZ+A3GhUoF8A7Z5ZgNqOE2SMbyVr8LUTgbncyytmqHB8I
WJTKUirTH7pEH98mQuvGTQaBIV/UzxS2XlX40tEkaJ5jhBcb214XkVz5jg8l7b/F
Xg/8aOEV3PwaBpHEceMvns3t/A9fAjCmnFHmAS+PYRn6+2Ub+CjNm2KD3cv3PirL
EojIHr746sYooB6ZpObThRkGY+L5kUoKaWY59KNukAoAKyV8681KAwJ2K5Rs0UzA
3eB30ptkN7wNmuGC/rmPk3XDs35ZRr9HNnOlmJnzMKnmFEiKA7WLMWXylevUJzi5
X8MAT50MhBxnOTYVDhDDMhcPtijwgApkO2RpVepfa73vRydnS5aDwV1xhVsE4KwW
0PgadNyhAgMBAAGjggMzMIIDLzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJAkdnjJ
YnkcEutpv0LMOpNRH3oZMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wgeYGA1UdEQSB3jCB24IPZnRwLnRla3RvbmlrLmNh
gg5pdC50ZWt0b25pay5jYYIPaXQudGVrdG9uaWsuY29tghBtYWlsLnRla3Rvbmlr
LmNhghFtYWlsLnRla3RvbmlrLmNvbYIQcG9wLnRla3RvbmlrLmNvbYIRc210cC50
ZWt0b25pay5jb22CC3Rla3RvbmlrLmNhggx0ZWt0b25pay5jb22CDnRpLnRla3Rv
bmlrLmNhgg90aS50ZWt0b25pay5jb22CD3d3dy50ZWt0b25pay5jYYIQd3d3LnRl
a3RvbmlrLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQYGCisG
AQQB1nkCBAIEgfcEgfQA8gB3AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQ
e8xWAAABa9odQvYAAAQDAEgwRgIhALD+J+aDnaZsq4QljqhD+qCiks8A5XBSKIrR
yGn2hHTgAiEAqQ671qZpRKDMfpLVrTMLCspAYu5M+5NgEp5uPd7DAaMAdwBj8tvN
6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWvaHULjAAAEAwBIMEYCIQCx
dKhYwC3hk10+NOqCTWVdJ8x4GUalGQXWhocFr+MAFwIhAIE6XCqRp2pVwfYO614/
wUy1pmtYt4pcN8yI3ZuJ1jA5MA0GCSqGSIb3DQEBCwUAA4IBAQAyW2Z7dE0XOgfu
d/3VZfdaIwO46zHsUHGtScwILVs3iXSc/yJgvz59lj79Q9FSdPMXNnq9kDIH24MD
O/ApiXyFNOIvfW8FBQqhunWp7tb55aWXhrMTER5msD+CkHhkl3z0yT3lzR4UDGHI
mgT8aIi1R4nN0cgIR3cUDrnFdgt+mYS7hJr6qgEveNQmkBRbnprrdF44nm66Amju
fURHKL66jEmp6J/nUZfQ+Gv1Jm6iz7NMZRFqKod3sRJXBJHYt+Xx/GEtM2Gs14wp
7DiyNR5vAZhK+8srVgnKkiizQZZFtt8f9UETnAIkiOpEZPwHY1qZfTfqNAhNqyJR
w/veZK9T
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306601797317554287603364739136681132177498
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-10 03:21:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 03:21:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tektonik.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734630367138789971985191148872494149127628283799962536702527285798721498663909724828287421871007800644789555774783115342642019653853692905609315940799819664162610801779732314914521122236442730714323534520925614507435482711421632728665194676252493294536517308338930580826434126854740368229852094765243251822279604052552734272545103274402980419734566907929531648458524622851105557920654568853594169843654541262755348705681502481318056508039195580951615858485025491880517080585934694706150208493146609621502860873429670653765588629577931871350190462900835791362892578713983552012112766627289502177758306633696085136963680960128262259647930788890961799175555892136517131927562840792121472992413761521380059122902791008652384426120126852725922310845469997842943808574941329882176521478584369075361413808859448406843520639643590331190450121241331823062042234374675122042080050675541326576948376901780395322899243783444399990247264023333691965612567312165450118194427420755513545230546867768298775339295093216558405762162602785354182393227863415173768040771312125557064545513625268507852757660618693173073100272322315340763826175199377146681948140498222824685528319700831542984149033542164104121031192331966662214181893327142890510105238689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90247678c962791c12eb69bf42cc3a93511f7a19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (222 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ti.tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ti.tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tektonik.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bda1d42f60000040300483046022100b0fe27e6839da66cab84258ea843faa0a292cf00e57052288ad1c869f68474e0022100a90ebbd6a66944a0cc7e92d5ad330b0aca4062ee4cfb9360129e6e3ddec301a300770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bda1d42e30000040300483046022100b174a858c02de1935d3e34ea824d655d27cc781946a51905d6868705afe30017022100813a5c2a91a76a55c1f60eeb5e3fc14cb5a66b58b78a5c37cc88dd9b89d63039
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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