qa.konviva.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a8:94:5f:5e:ac:d8:e1:8f:b4:8f:3d:46:a1:5a:61:9e:d0 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qa.konviva.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a8:94:5f:5e:ac:d8:e1:8f:b4:8f:3d:46:a1:5a:61:9e:d0
Serial Number (int): 405813802301577244950927458111487324823248
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 77:63:cb:74:c4:2c:c8:2d:00:1a:87:40:16:fd:6c:c6:ab:f2:bf:d6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 13:0c:11:0e:7f:38:49:7c:80:59:b4:fe:b2:fc:cb:8c:d1:4f:5c:9d
Fingerprint (sha256): 8e:10:22:00:9f:0d:e2:7a:41:ae:e8:cb:dd:89:bb:bf:22:41:b8:08:1f:72:27:25:24:8f:6f:c6:2d:bd:22:b2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate qa.konviva.com.br

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa.konviva.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

authsocial.desenv.ilog.com.br
chatbot.ilog.com.br
docker.ilog.com.br
git.ilog.com.br
jenkins.ilog.com.br
jira.ilog.com.br
qa.konviva.com.br
suporte.konviva.com.br
vwbidev.ilog.com.br

Other certificates including the domain name konviva.com.br

(limited to 100 certificates)
*.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
*.ava.portalescudo.konviva.com.br
customurl.konviva.com.br
vetorsolucoes.edutivo.com.br
customurl.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
master.us1.konviva.com.br
vetorsolucoes.edutivo.com.br
adfs.qa.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
master.us1.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
analytics.konviva.com.br
analytics.konviva.com.br
master.us1.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
qa.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
1ssl.konviva.com.br
*.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
*.konviva.com.br
cdn.konviva.com.br
customurl.konviva.com.br
cdn.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
www.ilog.com.br
analytics.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
vetorsolucoes.edutivo.com.br
customurls.konviva.com.br
customurl.konviva.com.br
vetorsolucoes.edutivo.com.br
2ssl.konviva.com.br
www.edcacademy.com.br
2ssl.konviva.com.br
*.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
backendhomol.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
*.homol.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
cdn.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
master.us1.konviva.com.br
customurls.konviva.com.br
customurls.konviva.com.br
*.qa.konviva.com.br
portalescudo.konviva.com.br
customurl.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
qa.konviva.com.br
customurls.konviva.com.br
customurl.konviva.com.br
customurls.konviva.com.br
qa.konviva.com.br
customurls.konviva.com.br
analytics.konviva.com.br
*.konviva.com.br

Certificate

The complete raw certificate details for qa.konviva.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGCzCCBPOgAwIBAgISBKiUX16s2OGPtI89RqFaYZ7QMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MzAxMjIyMDJaFw0x
OTExMjgxMjIyMDJaMBwxGjAYBgNVBAMTEXFhLmtvbnZpdmEuY29tLmJyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UzTlztLIapR2GrSWAXZ0hEbBbP+
6zlZmjGtTswwDsP7MNOm8IfQkLiNWKP5mmVRBXOCSXUgRJBJuvqtkvkugSInELfq
EhhLWqTPnmc33cWfPIHGbcVhY134QWNhL/hDLCmbNG/nkKmtUxrg/Zbm8kx0TbzK
qjgbTlnpOYzGcsYAm83y1iiD0wwkrOv7W8ZKC1ShMfVsg8fzzGSmMe5jSTGLPQN5
9yb6BVa7GM2c/jhIfTafu5Uf1Kdv6hDjxM7bJeZIceuka/aDZ1mq3VEeJR+lFl98
kYbtXtwBrZBh2EzqFZGmuyTUthLi2hRbB0ZV4VVOpvgoTaEMhXBahK+r2QIDAQAB
o4IDFzCCAxMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR3Y8t0xCzILQAah0AW/WzG
q/K/1jAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB
AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw
dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw
dC5vcmcvMIHLBgNVHREEgcMwgcCCHWF1dGhzb2NpYWwuZGVzZW52Lmlsb2cuY29t
LmJyghNjaGF0Ym90Lmlsb2cuY29tLmJyghJkb2NrZXIuaWxvZy5jb20uYnKCD2dp
dC5pbG9nLmNvbS5icoITamVua2lucy5pbG9nLmNvbS5icoIQamlyYS5pbG9nLmNv
bS5icoIRcWEua29udml2YS5jb20uYnKCFnN1cG9ydGUua29udml2YS5jb20uYnKC
E3Z3YmlkZXYuaWxvZy5jb20uYnIwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB
BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwB0ftqDMa0zEJEhnM4lT0Jwwr/9
XkIgCMY3NXnmEHvMVgAAAWzisKITAAAEAwBIMEYCIQDVs+cyM6lFUiCrpjCHc8tp
e3NNmsHxeLbiM6njDgFqIAIhAO4nDW/dzbzYiusZB+YusQq96KrneVoaEPM9mZIH
HDRLAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFs4rCkCQAA
BAMARzBFAiEAxq2pTJtSafQAXtxK2yDKk0fJ5SbvldsjAi89NFIMUrwCIDnOj52X
3zrF0LFiMbeFjNMVGPAWD4Ntg1iGTNz04G6IMA0GCSqGSIb3DQEBCwUAA4IBAQCU
hNOQyii9KrMfHx6t89PZr69z0SBQDKkl3sj3nv1VioLA1Dgdhq24JvGnFh/cmBfF
HGik3FuMRAuT89VpTbfHkrz8qEf1AQL/yrECZdCIyig+Xh7xx6/8TLvNak7pNSIK
Z0GpXda2KvZHLfxts/QJJE0PMjWBdV1u26zw+VxYY4Lf3/CcZ+1+eif3425wlx/F
eXo/LxgBhZKNKmtiLuGY1xFLam4g14LYLjB4OHQhOBBtzGatJrWjghUouRwtrlgv
9e6KIuxdfmWyeZHTZdDoWMQ1jVcoEZhuEZ7UXteJ4eQCufXw5til01v2fLoePvQY
5Xx9k5XfCn7fKmEp+LLr
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UzTlztLIapR2GrSWAXZ
0hEbBbP+6zlZmjGtTswwDsP7MNOm8IfQkLiNWKP5mmVRBXOCSXUgRJBJuvqtkvku
gSInELfqEhhLWqTPnmc33cWfPIHGbcVhY134QWNhL/hDLCmbNG/nkKmtUxrg/Zbm
8kx0TbzKqjgbTlnpOYzGcsYAm83y1iiD0wwkrOv7W8ZKC1ShMfVsg8fzzGSmMe5j
STGLPQN59yb6BVa7GM2c/jhIfTafu5Uf1Kdv6hDjxM7bJeZIceuka/aDZ1mq3VEe
JR+lFl98kYbtXtwBrZBh2EzqFZGmuyTUthLi2hRbB0ZV4VVOpvgoTaEMhXBahK+r
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405813802301577244950927458111487324823248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-30 12:22:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-28 12:22:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa.konviva.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29451409629217763187773269113909411721616420563559601381995715327188533975501423495117965108553843066032745510337679996941219853076684645638474778195353574365833143127376877747949560285791498302830778678188509954735947194240479140373692456432793046495569913554140028467533361414428881933943019905093128201523015059991822233409585837233323861264567509665864794979776579112643183041320365296007937040557419288513869402934402364280543285354956460679608278641072914425191790847906249301632701771214854290103084042261023283794501891325803013902397845298382900876001413140535204257787072119338974289166799957518947154111449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7763cb74c42cc82d001a874016fd6cc6abf2bfd6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (195 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authsocial.desenv.ilog.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatbot.ilog.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docker.ilog.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.ilog.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkins.ilog.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.ilog.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.konviva.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.konviva.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwbidev.ilog.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ce2b0a2130000040300483046022100d5b3e73233a9455220aba6308773cb697b734d9ac1f178b6e233a9e30e016a20022100ee270d6fddcdbcd88aeb1907e62eb10abde8aae7795a1a10f33d9992071c344b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ce2b0a4090000040300473045022100c6ada94c9b5269f4005edc4adb20ca9347c9e526ef95db23022f3d34520c52bc022039ce8f9d97df3ac5d0b16231b7858cd31518f0160f836d8358864cdcf4e06e88
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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