www.layanan.stmikdumai.ac.id

Issued by R3

About this certificate

This digital certificate with serial number 03:09:ed:55:c6:f6:70:04:3c:6b:63:b4:42:24:ed:b3:6d:08 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.layanan.stmikdumai.ac.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:09:ed:55:c6:f6:70:04:3c:6b:63:b4:42:24:ed:b3:6d:08
Serial Number (int): 264714871513245083576934712463837338234120
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4c:92:d9:41:fc:b0:fd:8e:63:39:3f:e3:ed:95:ec:66:3f:38:20:5b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 33:06:9d:a0:d8:86:c1:52:65:4e:99:30:73:c9:20:6a:58:1b:81:80
Fingerprint (sha256): 8e:4c:54:ac:ac:c6:46:ac:e7:61:15:b6:56:9d:d3:d8:fe:e0:75:d0:44:db:5c:38:d0:30:21:03:2d:80:64:58

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.layanan.stmikdumai.ac.id

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.layanan.stmikdumai.ac.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.stmikdumai.ac.id
stmikdumai.ac.id
www.arsip.stmikdumai.ac.id
www.cdc.stmikdumai.ac.id
www.layanan.stmikdumai.ac.id
www.portal.stmikdumai.ac.id
www.prodi.stmikdumai.ac.id
www.snit.stmikdumai.ac.id

Other certificates including the domain name stmikdumai.ac.id

(limited to 100 certificates)
ejournal.stmikdumai.ac.id
arsip.stmikdumai.ac.id
e-survey.stmikdumai.ac.id
stmikdumai.ac.id
cdc.stmikdumai.ac.id
pkl.stmikdumai.ac.id
snit.stmikdumai.ac.id
e-survey.stmikdumai.ac.id
*.stmikdumai.ac.id
stmikdumai.ac.id
e-survey.stmikdumai.ac.id
simaset.stmikdumai.ac.id
stmikdumai.ac.id
stmikdumai.ac.id
e-survey.stmikdumai.ac.id
www.arsip.stmikdumai.ac.id
arsip.stmikdumai.ac.id
www.simpeg.stmikdumai.ac.id
stmikdumai.ac.id
mail.stmikdumai.ac.id
alumni.stmikdumai.ac.id
siakad.stmikdumai.ac.id
*.stmikdumai.ac.id
siakad.stmikdumai.ac.id
simaset.stmikdumai.ac.id
siakad.stmikdumai.ac.id
www.alumni.stmikdumai.ac.id
stmikdumai.ac.id
snit.stmikdumai.ac.id
sni138431.cloudflaressl.com
snit.stmikdumai.ac.id
www.ujian-spmb.stmikdumai.ac.id
wisuda.stmikdumai.ac.id
snit.stmikdumai.ac.id
wisuda.stmikdumai.ac.id
siakad.stmikdumai.ac.id
stmikdumai.ac.id
siakad.stmikdumai.ac.id
siakad.stmikdumai.ac.id
simaset.stmikdumai.ac.id
stmikdumai.ac.id
*.stmikdumai.ac.id
*.stmikdumai.ac.id
www.akademik.stmikdumai.ac.id
www.lms.stmikdumai.ac.id
stmikdumai.ac.id
stmikdumai.ac.id
alumni.stmikdumai.ac.id
wisuda.stmikdumai.ac.id
siakad.stmikdumai.ac.id
stmikdumai.ac.id
arsip.stmikdumai.ac.id
e-survey.stmikdumai.ac.id
arsip.stmikdumai.ac.id
www.layanan.stmikdumai.ac.id
pkl.stmikdumai.ac.id
wisuda.stmikdumai.ac.id
snit.stmikdumai.ac.id
stmikdumai.ac.id
stmikdumai.ac.id
snit.stmikdumai.ac.id
stmikdumai.ac.id
www.alumni.stmikdumai.ac.id
wisuda.stmikdumai.ac.id
siakad.stmikdumai.ac.id
snit.stmikdumai.ac.id
stmikdumai.ac.id
spmb.stmikdumai.ac.id
*.stmikdumai.ac.id
snit.stmikdumai.ac.id
www.layanan.stmikdumai.ac.id
cdc.stmikdumai.ac.id
stmikdumai.ac.id
snit.stmikdumai.ac.id
www.pkl.stmikdumai.ac.id
stmikdumai.ac.id
stmikdumai.ac.id
siakad.stmikdumai.ac.id
simaset.stmikdumai.ac.id
www.akademik.stmikdumai.ac.id
alumni.stmikdumai.ac.id
*.stmikdumai.ac.id
siakad.stmikdumai.ac.id
www.simpeg.stmikdumai.ac.id
snit.stmikdumai.ac.id
siakad.stmikdumai.ac.id
snit.stmikdumai.ac.id
e-survey.stmikdumai.ac.id
cdc.stmikdumai.ac.id
simaset.stmikdumai.ac.id
stmikdumai.ac.id
spmb.stmikdumai.ac.id
pkl.stmikdumai.ac.id
*.stmikdumai.ac.id
stmikdumai.ac.id
spmb.stmikdumai.ac.id
wisuda.stmikdumai.ac.id
stmikdumai.ac.id
stmikdumai.ac.id
simaset.stmikdumai.ac.id

Certificate

The complete raw certificate details for www.layanan.stmikdumai.ac.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgISAwntVcb2cAQ8a2O0QiTts20IMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA0MTcyMzMwMTBaFw0yMzA3MTYyMzMwMDlaMCcxJTAjBgNVBAMT
HHd3dy5sYXlhbmFuLnN0bWlrZHVtYWkuYWMuaWQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXWqeuQUA9sLdiqb0xfLOhAUj0A8liRlguCPyL9/uGQzOw
coStkE83M0J4SGrB6xHZo5FTW4IM1ev8TFdOsUxU5/RClTJErwaPNhc4ZwpgSrk4
N62Q7jzGW4C2fvP5/yM8VXMTMb9t8uS6dpgOtnxNyaRV8Vl1Ehiz4K0lBVCVDMBH
SGFT8Wpvj69kZOjYKWEYtxSZjleXaRih8KR+fRiZeYTC1oi6lw3z1TFvp3tXLK9X
RqTGBPXiRmINXXjKhBabkyn25f1ZCW8mLzq+qDmoGGfaTQ8ctaC6P9GJstqxm21v
IgjhDMrWBS4DUQkTC+trAe9uV9r5romsHkEteizVAgMBAAGjggMJMIIDBTAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFEyS2UH8sP2OYzk/4+2V7GY/OCBbMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMIHZBgNVHREEgdEwgc6CEiouc3RtaWtkdW1haS5hYy5p
ZIIQc3RtaWtkdW1haS5hYy5pZIIad3d3LmFyc2lwLnN0bWlrZHVtYWkuYWMuaWSC
GHd3dy5jZGMuc3RtaWtkdW1haS5hYy5pZIIcd3d3LmxheWFuYW4uc3RtaWtkdW1h
aS5hYy5pZIIbd3d3LnBvcnRhbC5zdG1pa2R1bWFpLmFjLmlkghp3d3cucHJvZGku
c3RtaWtkdW1haS5hYy5pZIIZd3d3LnNuaXQuc3RtaWtkdW1haS5hYy5pZDBMBgNV
HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo
dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA
7wB1ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABh5HE3TsAAAQD
AEYwRAIgSBTwdsA9yaiTDcLqwKnrqL9yeJaI7b+FtWmMH2iLztgCIBo3Gmci7B+x
lEt+NpuZnDgsgugf6jv/c4bqVwxSBAXaAHYArfe++nz/EMiLnT2cHj4YarRnKV3P
sQwkyoWGNOvcgooAAAGHkcTdYAAABAMARzBFAiBnz1pxdIMMIKUWfVlc9rDcHXoI
Po6ttxvoPp/dMnXZSQIhAJ1l/VWUxwQzuH2LlFdV6cP1G/2lM2b7C7dX04QNMDLP
MA0GCSqGSIb3DQEBCwUAA4IBAQCmFLY2unn4qojQdx5J7nF87MX021UbDD51w2K3
pU1SmFuEAXu+xFo7FepW9XfJ7aNSE9sp5L1KqMz83WCxllpGmjp9RZLpRYfy3GF5
65e680022GCROATsq36USdhFt9/xFYiEQTHnxV9RqSVqetssIHsdSuPgzNVWHvg0
w8gEkr0lzecikUAqVCzdyPwXzm/FYu5MphxGiZdcFSWxF4dCJED+s+lcc7fYzU6Z
Vf41wjj9Wm6R6/ajr/vfZBCjFnP58Gavko8OA8kn/ndsZ+xttYt2h3MmKIF9mBYe
rliZ3iM14bHONrr3mAz5cX7eciaDKmK5OdTs0qEWYe7o9HtY
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11qnrkFAPbC3Yqm9MXyz
oQFI9APJYkZYLgj8i/f7hkMzsHKErZBPNzNCeEhqwesR2aORU1uCDNXr/ExXTrFM
VOf0QpUyRK8GjzYXOGcKYEq5ODetkO48xluAtn7z+f8jPFVzEzG/bfLkunaYDrZ8
TcmkVfFZdRIYs+CtJQVQlQzAR0hhU/Fqb4+vZGTo2ClhGLcUmY5Xl2kYofCkfn0Y
mXmEwtaIupcN89Uxb6d7VyyvV0akxgT14kZiDV14yoQWm5Mp9uX9WQlvJi86vqg5
qBhn2k0PHLWguj/RibLasZttbyII4QzK1gUuA1EJEwvrawHvblfa+a6JrB5BLXos
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264714871513245083576934712463837338234120
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-17 23:30:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-16 23:30:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.layanan.stmikdumai.ac.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27185939215646244558468817874945174944815613971359722715495452658802044234434794361412049378837339154198654537913631445917943477486701249192087658878173363136246750153950088432369703782514071827695254786945375724778683288705131058194304623069667228831246263613504859616578571735329659613409668454455370597749068169754949421481326354281857355818078292803437994898717120242664888571633270932683832451717969357580710627672994287546118384186575405882730415435610442469242942305944101537679667632917675281041073704316091676514778622960973987181996692426634736653431108477108740710561604591446720591288005207992208463637717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c92d941fcb0fd8e63393fe3ed95ec663f38205b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (209 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stmikdumai.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmikdumai.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arsip.stmikdumai.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdc.stmikdumai.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.layanan.stmikdumai.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portal.stmikdumai.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prodi.stmikdumai.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snit.stmikdumai.ac.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018791c4dd3b000004030046304402204814f076c03dc9a8930dc2eac0a9eba8bf72789688edbf85b5698c1f688bced802201a371a6722ec1fb1944b7e369b999c382c82e81fea3bff7386ea570c520405da007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018791c4dd600000040300473045022067cf5a7174830c20a5167d595cf6b0dc1d7a083e8eadb71be83e9fdd3275d9490221009d65fd5594c70433b87d8b945755e9c3f51bfda53366fb0bb757d3840d3032cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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