redir-2.gsa.ctacdev.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:59:a0:b3:43:1d:c0:a4:6d:ca:d2:89:24:cb:5c:16:20:bd was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=redir-2.gsa.ctacdev.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:59:a0:b3:43:1d:c0:a4:6d:ca:d2:89:24:cb:5c:16:20:bd
Serial Number (int): 378947881644746454170321113040060499239101
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d2:af:61:93:ca:01:52:71:f6:0e:42:3b:00:99:c5:9a:84:98:44:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 82:45:cd:82:5f:07:e7:7e:f4:43:d9:cb:0a:10:c7:ba:8f:f7:a9:75
Fingerprint (sha256): c2:e8:e2:fd:76:0e:a8:36:bf:61:fe:eb:5a:8b:26:b6:54:8a:9e:10:89:c9:c4:07:10:9a:19:75:1c:fa:cf:12

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate redir-2.gsa.ctacdev.com

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for redir-2.gsa.ctacdev.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

answers.usa.gov
apps.gobiernousa.gov
apps.usa.gov
blog.gobiernousa.gov
businessusa.gov
challenges.gov
components.standards.usa.gov
consumeraction.gov
febatl.platform.gsa.gov
firstgov.gov
forms.gov
gobiernousa.gov
info.gov
kids.gov
m.gobiernousa.gov
m.gsa.gov
m.usa.gov
my.usa.gov
notice.usa.gov
notifications.usa.gov
plc.platform.gsa.gov
promotions.usa.gov
publications.usa.gov
redir-2.gsa.ctacdev.com
registry.usa.gov
respuestas.gobiernousa.gov
standards.usa.gov
tell-us.usa.gov
tellus.usa.gov
us.gov
usa.gov
usagov.gov
vote.usa.gov
www.businessusa.gov
www.challenges.gov
www.consumeraction.gov
www.feedback.usa.gov
www.firstgov.gov
www.forms.gov
www.gobierno.usa.gov
www.gobiernousa.gov
www.info.gov
www.kids.gov
www.my.usa.gov
www.promotions.usa.gov
www.us.gov
www.usagov.gov
www.vote.gov
www.vote.usa.gov

Other certificates including the domain name ctacdev.com

(limited to 100 certificates)
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
*.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
*.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
*.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.gsa.ctacdev.com
*.ctacdev.com
*.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.ctacdev.com
redir-2.gsa.ctacdev.com
*.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
*.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.ctacdev.com
redir-2.gsa.ctacdev.com
testredir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
redir-2.gsa.ctacdev.com
*.gsa.ctacdev.com
testredir2.gsa.ctacdev.com

Certificate

The complete raw certificate details for redir-2.gsa.ctacdev.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA486zkXnlAcEQL1vBN+gS
WArQ/1geSZ8EEEgvgWVBAKWVTgytvbZDdr14sEpwqbOqRHuUpQseGBEGSAPh3bsh
HOHoptG2G6u6YO6+fhWVAMZP0hA4pglMn/EDKpw+pL1/2r3d4xXqxe5inssTNOzN
k43y9q6L3zJFfy0nr43Ix9eL5tUPvo8Dn+9hAZ8ewhremCWZdhnnK0HLxMeAFpV5
CrEegZWeq5KeVwJTrwkG2ukW3ZMgZ+6H1kEAi0OvbZh2nUX19JXKXj899DowvuA0
Eu70aHEaEG8BrU/HRXA8M2TwJZwITm0GCgSEN1AttzFJQHto4T6QFr3uXmVrcrpb
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378947881644746454170321113040060499239101
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 15:27:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 15:27:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redir-2.gsa.ctacdev.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28758023505558285383133046761506070627180410083470017430241151651377951100157927284611688919131495742026546419808232378052643264502234312639087988305633826494110051290333808773012803447690279517542731999391142739078249345073773393807442755323792419862231078572314872065010548736620416098241825337924394998139823639179163846671676243928149860012995719760139749940852111434926079527371958095718606891415068006392877990933199384187319237424378635482882919636590620531871684774563788108790074856176452312445480030069821854197177249865666887928541131052687857459291752005948112954614126383298422248481893900748333868800811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2af6193ca015271f60e423b0099c59a84984466
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (862 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.gobiernousa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.gobiernousa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessusa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challenges.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'components.standards.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumeraction.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'febatl.platform.gsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstgov.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobiernousa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kids.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.gobiernousa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.gsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notice.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notifications.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plc.platform.gsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promotions.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redir-2.gsa.ctacdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respuestas.gobiernousa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standards.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tell-us.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tellus.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usagov.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businessusa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.challenges.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consumeraction.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feedback.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstgov.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forms.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gobierno.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gobiernousa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.info.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kids.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promotions.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usagov.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vote.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vote.usa.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001700be0d78e000004030046304402200f4106d0ba1d9bdbdf788adffe6196e962b9a1f34cbe22ddfc82c669fb0cbf62022043315fb11bd7ef4623fb067cda1c0707c5b34b77ecaef9e918194458affeb43700770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001700be0d7bc0000040300483046022100f8344bcd10725b0cd7fa838e21c591aca18a8a8a197433d45a001a0acd23e7ca0221008e2fc0775895394a30039040fbd9c02b6cdd1256919e99beb8c31f1d7ba2ffa6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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