apps.ncagr.gov

Issued by R3

About this certificate

This digital certificate with serial number 03:0e:eb:a9:71:2b:92:4b:a2:6c:8e:ca:4e:dd:34:75:27:b4 was issued on by Let's Encrypt.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apps.ncagr.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0e:eb:a9:71:2b:92:4b:a2:6c:8e:ca:4e:dd:34:75:27:b4
Serial Number (int): 266414059304716798493008978932325779056564
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:f6:57:c9:86:cd:e8:12:c3:92:ea:58:76:41:08:42:cb:80:b9:04
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 50:a0:f4:57:25:b2:c2:83:36:41:20:3a:8e:01:b1:55:a7:05:fb:5c
Fingerprint (sha256): 97:c7:77:e6:d5:09:91:8a:2f:0c:9a:c7:79:91:ea:2c:22:ce:86:70:42:fe:7e:13:08:0a:dd:53:a9:79:21:29

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate apps.ncagr.gov

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apps.ncagr.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apps.ncagr.gov
appsdev.ncagr.gov
appsuat.ncagr.gov
boss.ncagr.gov
bossdesk.ncagr.gov
dev.ncmhtd.com
dupontstaterecreationalforest.com
foodsafetytaskforce.nc.gov
gatehouse.ncagr.gov
gottobencfestival.com
intranet.ncagr.gov
intranetdev.ncagr.gov
iqs.nc.gov
lf.ncagr.gov
lfdev.ncagr.gov
mfsdev.ncagr.gov
mountainislandforest.com
mysites.ncagr.gov
mysitesdev.ncagr.gov
ncadfp.org
ncesf.org
ncfarmfresh.com
ncfooddist.com
ncfoodsafety.com
ncforestactionplan.com
ncforestassessment.com
ncforestservice.gov
ncfreshlink.com
ncfriendsofagriculture.org
nclongleaf.org
resistwildfirenc.org
teamsites.ncagr.gov
teamsitesdev.ncagr.gov
test.ncmhtd.com
www.dupontstaterecreationalforest.com
www.foodsafetytaskforce.nc.gov
www.gottobencfestival.com
www.iqs.nc.gov
www.mountainislandforest.com
www.ncadfp.org
www.ncesf.org
www.ncfarmfresh.com
www.ncfooddist.com
www.ncfoodsafety.com
www.ncforestactionplan.com
www.ncforestassessment.com
www.ncforestservice.gov
www.ncfreshlink.com
www.ncfriendsofagriculture.org
www.nclongleaf.org
www.ncmhtd.com
www.resistwildfirenc.org
wwwdev.ncagr.gov
wwwdev.ncfooddist.com

Other certificates including the domain name ncagr.gov

(limited to 100 certificates)

Certificate

The complete raw certificate details for apps.ncagr.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZjHDn+Rmv8UaeCl178r
1v3b30x9vZZev6rU3/7AZzj/LLCxF96jG10gHoN6Ib9kjp/0u8+krLFsxtzm2Tzv
J0/UZ8IhXgTo75E4Z7Ax64S+TWZnheoC2xeco0AKAFi0GRPDlyfYGH/CnRa2MR/7
Q3cvINMvFgSK0kcWfgl2Kq6zPSV6pW74y7/DH4XwpsV7IRJFgeKGsSvCHpkw3TS6
BKWHjjPJ+GgvyeVYKxk312GrBpScdscrnH0Tgn7FJ8uSsTQyyCP/qHIKUubeKCxo
LQOpwD2tewwNj6jeXgqeIZNFjQlOUQeaa8kRM3kfDxZqUejWr3dtGIPny/HH2GYt
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266414059304716798493008978932325779056564
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-06 00:29:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-06 00:29:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apps.ncagr.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17369985205504348869419745523792947348538708477805415798830877904329061838134054488143441365303692933861793775027895542603039959751767782762255001635458143172536263614582986200461331036295982592409800566495122263462475310426922618656279663245511902623759000657808421806941044835841916322048673039521030328359293802991437254461281138533020406678167418084836920580125621256617941925358556699381288421637140269841611754510443647914387816445976740277941514602433589625764169281379149832569820936567886627117988676840456199604622210303989035354107651180169220431209166155301707044622430778045777065921599087009758020251127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8cf657c986cde812c392ea5876410842cb80b904
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsuat.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boss.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bossdesk.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ncmhtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dupontstaterecreationalforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodsafetytaskforce.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatehouse.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gottobencfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranetdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqs.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lf.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfsdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainislandforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysites.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysitesdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncadfp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncesf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfarmfresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfooddist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfoodsafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncforestactionplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncforestassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncforestservice.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfreshlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfriendsofagriculture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclongleaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resistwildfirenc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamsites.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamsitesdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ncmhtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dupontstaterecreationalforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodsafetytaskforce.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gottobencfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iqs.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountainislandforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncadfp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncesf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfarmfresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfooddist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfoodsafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncforestactionplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncforestassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncforestservice.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfreshlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfriendsofagriculture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclongleaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncmhtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resistwildfirenc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdev.ncfooddist.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018584b291080000040300473045022100b593d063dd31a2b441a6b2bf90bcf421c0b6e1a7a41878f2dda8bc8402b9487e02203fc1f2b160e76cad9ef42c2a9de7b9c5340719e1c458043a48654e7733e38f86007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018584b292e300000403004630440220680cbce56e3b8b4dc812b87a017a8b524c9f859e6421adf0e4767c0c79ce655c02205490ad1defa74c6d90ae97ef971a04c216de80d8d262506ec77f659bcdd72d70
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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