sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:89:1f:9e:50:0d:98:89:7d:0d:13:4a:39:3c:4e:e7:36:9a was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:89:1f:9e:50:0d:98:89:7d:0d:13:4a:39:3c:4e:e7:36:9a
Serial Number (int): 395109856069652479315489455042740934358682
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 54:3e:ca:ca:ec:90:69:88:d2:e4:1f:b6:0d:03:0e:51:c0:85:b9:c3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 80:88:61:96:25:86:91:f1:57:0a:5e:01:e4:ad:86:67:2c:c1:d5:36
Fingerprint (sha256): b5:ba:4e:14:c6:ce:40:86:a4:f5:a5:ee:1c:c4:94:a3:4c:25:a2:18:35:da:df:14:a0:0f:10:28:4c:58:10:bc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aucklandsoftball.org.nz
basketballhawkesbay.co.nz
cashmere.school.nz
cfc.co.nz
christchurchfootballclub.co.nz
countiesmanukaurugbyleague.co.nz
cra.kiwi
cricketwellington.co.nz
cyclingsc.co.nz
ellerslieeagles.co.nz
fenciblefoundation.co.nz
golfnorthland.co.nz
harbourgolf.co.nz
hastingsboys.school.nz
havelocknorth.rugby
hawkesbaynetball.co.nz
hbnetball.co.nz
hbrugby.co.nz
healthyfamilieswaitakere.org.nz
hokowhitubridge.org.nz
horouta.co.nz
huianetball.co.nz
kirweerugby.co.nz
manawatusoftball.org.nz
maniapoto.school.nz
manukauaucklandvolleyball.co.nz
maoribasketball.com
marlboroughnetball.org.nz
marlboroughtrampingclub.co.nz
membermanager.co.nz
metrofootball.org.nz
mff.nz
mitre10park.co.nz
mountsports.co.nz
nzteachersgames.co.nz
parklandsrugby.co.nz
patoka.school.nz
pioneerfishingclub.co.nz
polo.org.nz
ponsonbyrugby.co.nz
referees.co.nz
sked.co.nz
soulutionzsports.nz
sporty.org.nz
stmw.school.nz
taradaleint.school.nz
volleysouth.org.nz
waihibeachtennisclub.co.nz
waimakunited.org.nz
wdta.org.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)
sporty.org.nz
www.sportycrm.com
sporty.org.nz
sporty.org.nz
www.giafc.co.nz
sportycrm.com
sporty.org.nz
fdmc.school.nz
arrowtownrugby.co.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
sporty.org.nz
sporty.org.nz

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmuaPAjG614STGSf+eLN
/2hxtnuUl94apzfXwWfURW2mBDSvj+S/LDPNOP28QsBKnFrf36B8HiSGYYAkx+0O
WXxCzNJj/pwSHw71L25ViQYQPDqwUPBe36NN8/XOJTAMmdUhoXYKa3Cv9ADQrclh
iDVOV+pqOzcCzWfOyPc8XLFCX56k4zIE+uljD+xdA5t68mh4p+mCVmFnkweMmI0j
GKJTxO6volm4LNTWzaB0e+t7el+z0nhePBgekI3MnI4LdrNszjEkkM/hVnPjwgZk
Hwm/QMhn/23anFUL1utJ9bLN+ZSjcIxwR5bHt6pChbr6QrSVAUU6JmZjUkEtZtgo
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395109856069652479315489455042740934358682
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-05 19:41:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-03 19:41:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24038338703325986766259808465421520015769052752462919135857603642364180704574883199808405714468748897982464898194573369105153179485582100950508881247273911974787720619914362904150884409681237675714032410722351584846196510627307245760637286834892598682758803859157578496578926511465845725340044939914124787127539773762795802617885467095574216727473281328495078978788269958180672036438388830813503289064259094831114401344527411385951302504139580211602698629758531870596220447511024746047038161898146961987459755633625874861036949289007925471391940505568455557020158818959769742445800797495198616659662849439544370538537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							543ecacaec906988d2e41fb60d030e51c085b9c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1060 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchfootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cra.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellerslieeagles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fenciblefoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsboys.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamilieswaitakere.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horouta.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huianetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirweerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manawatusoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maniapoto.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukauaucklandvolleyball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtrampingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrofootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mff.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitre10park.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patoka.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soulutionzsports.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmw.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleysouth.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdta.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186b381e4630000040300473045022054b08e4006ca82b5054c495e415e7be74e5a553ddbdeb67de30d989841219319022100e7377f48e9e9e7714e2684bb60151bd2bc9ad5ed7b8bc2201a0e76d3e6e02acc007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186b381e46b00000403004830460221008053198662bb53d270beabd332e64c1b95b96210aacdddbdfb0c2320909e585d022100c1b4efac58709ad2c01a89f8d44dab35c982b2784d0036b6dab27f4969e730a3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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