support.tsagroup.com.au

Issued by R3

About this certificate

This digital certificate with serial number 03:a9:2e:82:05:d3:f5:96:8e:77:e1:b4:70:6c:75:9b:e6:97 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=support.tsagroup.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a9:2e:82:05:d3:f5:96:8e:77:e1:b4:70:6c:75:9b:e6:97
Serial Number (int): 318906397409522252070762057201076846454423
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:9d:24:de:62:04:10:c9:f9:79:24:7b:a5:38:86:bc:84:ab:ad:69
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8a:0f:a6:93:c2:99:b5:6d:64:c5:e8:84:e2:78:d4:93:ea:c3:d8:fe
Fingerprint (sha256): a0:6b:4d:21:b0:99:f3:ff:1a:6f:fe:34:92:5d:e6:bd:49:d5:39:f5:78:33:c1:5f:40:01:01:8d:6b:ca:4d:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate support.tsagroup.com.au

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.tsagroup.com.au

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

helpdesk.benedict.com.au
helpdesk.collinsfoods.com
helpdesk.hobartairport.com.au
helpdesk.maranoa.qld.gov.au
helpdesk.weldco.com.au
helpdesk.yf-fam.co
service.macquariecollege.nsw.edu.au
servicedesk.adc.govt.nz
servicedesk.commonwealth.int
servicedesk.fremantle.wa.gov.au
servicedesk.gosnells.wa.gov.au
servicedesk.mountgambier.sa.gov.au
servicedesk.townsville-port.com.au
servicedesk.townsvilleport.com.au
servicedesk.wrive.io
servicedesk.wsc.nsw.gov.au
support.tsagroup.com.au
support.unitedworkers.org.au

Other certificates including the domain name tsagroup.com.au

(limited to 100 certificates)
tsagroup.com.au
helpdesk.benedict.com.au
extranet.tsagroup.com.au
helpdesk.brisbanemarkets.com.au
helpdesk.mccolls.com.au
helpdesk.benedict.com.au
helpdesk.maitland.nsw.gov.au
telstra.tsagroup.com.au
mail.tsagroup.com.au
harmonyc.tsagroup.com.au
servicedesk.mcson.com.au
helpdesk.essencegp.com.au
tsagroup.com.au
helpdesk.benedict.com.au
helpdesk.mstglobal.com
helpdesk.sureway.com.au
harmony.tsagroup.com.au
helpdesk.sureway.com.au
mail.tsagroup.com.au
extranet.tsagroup.com.au
servicedesk.aqwest.com.au
*.tsagroup.com.au
harmony.tsagroup.com.au
support.tsagroup.com.au
crm.tsagroup.com.au
tsagroup.com.au
tsagroup.com.au
tsagroup.com.au
servicedesk.stgiles.org.au
itservicedesk.windsor.co.nz
helpdesk.benedict.com.au
helpdesk.sureway.com.au
helpdesk.benedict.com.au
servicedesk.aqwest.com.au
helpdesk.maranoa.qld.gov.au
helpdesk.timberlinkaustralia.com.au
helpdesk.timberlinkaustralia.com.au
tsagroup.com.au
testtelstra.tsagroup.com.au
helpdesk.maranoa.qld.gov.au
helpdesk.mstglobal.com
tsagroup.com.au
helpdesk.mccolls.com.au
testtelstra.tsagroup.com.au
helpdesk.timberlinkaustralia.com.au
telstra.tsagroup.com.au
helpdesk.mstglobal.com
helpdesk.benedict.com.au
remoteapp.tsagroup.com.au
harmonyd.tsagroup.com.au
*.tsagroup.com.au
servicedesk.mcson.com.au
helpdesk.mccolls.com.au
tsagroup.com.au
helpdesk.benedict.com.au
servicedesk.stgiles.org.au
servicedesk.4dmedical.com
telstra.tsagroup.com.au
*.tsagroup.com.au
crm.tsagroup.com.au
itservicedesk.windsor.co.nz
servicedesk.4dmedical.com
helpdesk.maranoa.qld.gov.au
servicedesk.maib.tas.gov.au
helpdesk.essencegp.com.au
servicedesk.4dmedical.com
support.tsagroup.com.au
helpdesk.benedict.com.au
helpdesk.benedict.com.au
servicedesk.defencebank.com.au
helpdesk.essencegp.com.au
servicedesk.maib.tas.gov.au
tsagroup.com.au
helpdesk.benedict.com.au
support.tsagroup.com.au
harmony.tsagroup.com.au
tsavpn2.tsagroup.com.au
extranet.tsagroup.com.au
servicedesk.mcson.com.au
*.tsagroup.com.au
itservicedesk.windsor.co.nz
mail.tsagroup.com.au
*.tsagroup.com.au
tsagroup.com.au
helpdesk.mstglobal.com
mail.tsagroup.com.au
helpdesk.maitland.nsw.gov.au
helpdesk.benedict.com.au
noblecontactsvc.tsagroup.com.au
crm.tsagroup.com.au
helpdesk.mccolls.com.au
harmony.tsagroup.com.au
helpdesk.benedict.com.au
support.tsagroup.com.au
mail.tsagroup.com.au
helpdesk.sureway.com.au
*.tsagroup.com.au
helpdesk.benedict.com.au
helpdesk.timberlinkaustralia.com.au
servicedesk.stgiles.org.au

Certificate

The complete raw certificate details for support.tsagroup.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgISA6kuggXT9ZaOd+G0cGx1m+aXMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTExMjQwODMxNDFaFw0yMjAyMjIwODMxNDBaMCIxIDAeBgNVBAMT
F3N1cHBvcnQudHNhZ3JvdXAuY29tLmF1MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcD
QgAEssD/zVNFoLNjb7rwSuOde0HFi2NKhjqVX+M5Fl7SgySWuIleFXjU8qsLTXTW
MJlqzzc2PCdWNmBKJ3P9VNPpQ6OCA1owggNWMA4GA1UdDwEB/wQEAwIHgDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQU4Z0k3mIEEMn5eSR7pTiGvISrrWkwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA
5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu
by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w
ggIbBgNVHREEggISMIICDoIYaGVscGRlc2suYmVuZWRpY3QuY29tLmF1ghloZWxw
ZGVzay5jb2xsaW5zZm9vZHMuY29tgh1oZWxwZGVzay5ob2JhcnRhaXJwb3J0LmNv
bS5hdYIbaGVscGRlc2subWFyYW5vYS5xbGQuZ292LmF1ghZoZWxwZGVzay53ZWxk
Y28uY29tLmF1ghJoZWxwZGVzay55Zi1mYW0uY2+CI3NlcnZpY2UubWFjcXVhcmll
Y29sbGVnZS5uc3cuZWR1LmF1ghdzZXJ2aWNlZGVzay5hZGMuZ292dC5ueoIcc2Vy
dmljZWRlc2suY29tbW9ud2VhbHRoLmludIIfc2VydmljZWRlc2suZnJlbWFudGxl
LndhLmdvdi5hdYIec2VydmljZWRlc2suZ29zbmVsbHMud2EuZ292LmF1giJzZXJ2
aWNlZGVzay5tb3VudGdhbWJpZXIuc2EuZ292LmF1giJzZXJ2aWNlZGVzay50b3du
c3ZpbGxlLXBvcnQuY29tLmF1giFzZXJ2aWNlZGVzay50b3duc3ZpbGxlcG9ydC5j
b20uYXWCFHNlcnZpY2VkZXNrLndyaXZlLmlvghpzZXJ2aWNlZGVzay53c2MubnN3
Lmdvdi5hdYIXc3VwcG9ydC50c2Fncm91cC5jb20uYXWCHHN1cHBvcnQudW5pdGVk
d29ya2Vycy5vcmcuYXUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYK
KwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAGUEtTvQxJF2B+PJ
3XVdXT+AA1LO9Jy6Pwl/k0s0SjZaJIV5fgs3cdivYZRj++cBnoUSI35jISJk2JEv
IbfYGucMd631sJCVPR+Z0EuVGpcen0DYAzisEKNq8EhBu/yvuXzdc0WwAVxNUSLr
dMGHRU9hB9BuP5mAkFDczsFoNLs1UfNflxwJxnQp1J64mSvGneX6jL11qw0d9r3I
ZSyXdk0lqZVS0TCRz3qPX3wLdsxcbCePPzzhzqcFan3plBJ9cD0G8iGhvJyjamqw
dg0MKO9XWtvCv/Q5j3jsHM/+Pwn95eoDuKGXOUY58r/TSP9asNyX4JSDacfXx/yn
kVJbVBE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEssD/zVNFoLNjb7rwSuOde0HFi2NK
hjqVX+M5Fl7SgySWuIleFXjU8qsLTXTWMJlqzzc2PCdWNmBKJ3P9VNPpQw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318906397409522252070762057201076846454423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-24 08:31:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-22 08:31:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.tsagroup.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004b2c0ffcd5345a0b3636fbaf04ae39d7b41c58b634a863a955fe339165ed2832496b8895e1578d4f2ab0b4d74d630996acf37363c275636604a2773fd54d3e943
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e19d24de620410c9f979247ba53886bc84abad69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (530 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.benedict.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.collinsfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.hobartairport.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.maranoa.qld.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.weldco.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.yf-fam.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.macquariecollege.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.adc.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.commonwealth.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.fremantle.wa.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.gosnells.wa.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.mountgambier.sa.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.townsville-port.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.townsvilleport.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.wrive.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.wsc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tsagroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.unitedworkers.org.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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