mediatasoft.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d0:2d:b2:a4:17:ac:f4:1e:6b:df:fb:73:9a:1e:3c:1e:e1 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mediatasoft.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d0:2d:b2:a4:17:ac:f4:1e:6b:df:fb:73:9a:1e:3c:1e:e1
Serial Number (int): 419288618863438276680428288438109325762273
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 60:2c:1b:0c:00:71:e0:8b:92:e1:20:3f:30:7f:8b:89:e1:77:84:61
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 48:fc:0f:fe:f7:05:47:19:c0:d5:e5:85:5f:dc:59:63:fa:75:8d:b3
Fingerprint (sha256): cb:08:60:fd:9d:ae:91:2e:d9:05:0c:d3:49:05:18:47:4f:e7:53:91:88:09:02:34:a9:8a:13:82:22:8b:aa:46

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mediatasoft.net

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mediatasoft.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.hc1.mediatasoft.net
api.copiloto.mediatasoft.net
api.pms.hc1.mediatasoft.net
apimoduled.mediatasoft.net
autodiscover.mediatasoft.net
bniguanajuato.mediatasoft.net
clientes.sincronia.mediatasoft.net
copiloto.mediatasoft.net
cpanel.mediatasoft.net
mail.mediatasoft.net
mediatasoft.net
sitio.construlita.mediatasoft.net
webdisk.mediatasoft.net
webmail.mediatasoft.net
www.admin.hc1.mediatasoft.net
www.api.copiloto.mediatasoft.net
www.api.pms.hc1.mediatasoft.net
www.apimoduled.mediatasoft.net
www.bniguanajuato.mediatasoft.net
www.clientes.sincronia.mediatasoft.net
www.copiloto.mediatasoft.net
www.mediatasoft.net
www.sitio.construlita.mediatasoft.net

Other certificates including the domain name mediatasoft.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for mediatasoft.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH8jCCBtqgAwIBAgISBNAtsqQXrPQea9/7c5oePB7hMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjIyMDI4MzNaFw0y
MDAzMjEyMDI4MzNaMBoxGDAWBgNVBAMTD21lZGlhdGFzb2Z0Lm5ldDCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAOIlqpQx9xfnNEqBZD9H55ezeIBndc3G
fPqNFLCcnQfjcbeCPTbjeg6jTJG7v8PxVnGrsngQ3FB8UYI+mcOVFQZZTQUHSLmX
z0bHZLEJbWwjpjApn5oaIBEHxVeqKBw/zBbXz3k9/NeZtqss5uQ8+8hPZ8RmJq5n
Qb2bJaC2K82RE0YmlPG7q6hs0mLMHn+cczwlkmYeUDPVdNGbUF8ivrtOW10vrllk
QPoPiaj+DnArp/SWhKEYZVtWatohmaExXWV6gebUlnYYtWX3N0h32g+xqayjyuVy
HYmWLP0O4k/LtM3ivqlAzrv1Eiuv8sDnbtgSjtsceSqulKJ/ZMsRBYECAwEAAaOC
BQAwggT8MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUYCwbDABx4IuS4SA/MH+LieF3
hGEwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCCArUGA1UdEQSCAqwwggKoghlhZG1pbi5oYzEubWVkaWF0YXNvZnQubmV0
ghxhcGkuY29waWxvdG8ubWVkaWF0YXNvZnQubmV0ghthcGkucG1zLmhjMS5tZWRp
YXRhc29mdC5uZXSCGmFwaW1vZHVsZWQubWVkaWF0YXNvZnQubmV0ghxhdXRvZGlz
Y292ZXIubWVkaWF0YXNvZnQubmV0gh1ibmlndWFuYWp1YXRvLm1lZGlhdGFzb2Z0
Lm5ldIIiY2xpZW50ZXMuc2luY3JvbmlhLm1lZGlhdGFzb2Z0Lm5ldIIYY29waWxv
dG8ubWVkaWF0YXNvZnQubmV0ghZjcGFuZWwubWVkaWF0YXNvZnQubmV0ghRtYWls
Lm1lZGlhdGFzb2Z0Lm5ldIIPbWVkaWF0YXNvZnQubmV0giFzaXRpby5jb25zdHJ1
bGl0YS5tZWRpYXRhc29mdC5uZXSCF3dlYmRpc2subWVkaWF0YXNvZnQubmV0ghd3
ZWJtYWlsLm1lZGlhdGFzb2Z0Lm5ldIIdd3d3LmFkbWluLmhjMS5tZWRpYXRhc29m
dC5uZXSCIHd3dy5hcGkuY29waWxvdG8ubWVkaWF0YXNvZnQubmV0gh93d3cuYXBp
LnBtcy5oYzEubWVkaWF0YXNvZnQubmV0gh53d3cuYXBpbW9kdWxlZC5tZWRpYXRh
c29mdC5uZXSCIXd3dy5ibmlndWFuYWp1YXRvLm1lZGlhdGFzb2Z0Lm5ldIImd3d3
LmNsaWVudGVzLnNpbmNyb25pYS5tZWRpYXRhc29mdC5uZXSCHHd3dy5jb3BpbG90
by5tZWRpYXRhc29mdC5uZXSCE3d3dy5tZWRpYXRhc29mdC5uZXSCJXd3dy5zaXRp
by5jb25zdHJ1bGl0YS5tZWRpYXRhc29mdC5uZXQwTAYDVR0gBEUwQzAIBgZngQwB
AgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRz
ZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBep3P531bA57U2
SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW8vgwTGAAAEAwBHMEUCIBBzz29xgYOG
hdRw+5rk9F8LpHc1T5Vb07ZSUR7/isp5AiEA7idnWSxE8BEpveEMQ5eT/PZHf2+9
q+5A5hsFhbhy/LIAdQAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAA
AW8vgwTqAAAEAwBGMEQCIF2XXgMZIwwKY4XCYbZar+y+5ekGgI0AKBVCfDVoi95N
AiBByL5OFysbDk0rN3Dc4Qo+eBKGdTdF4JgZ/xq0S1Mp5DANBgkqhkiG9w0BAQsF
AAOCAQEAU/s15/Rhcj+YbsiZGqCg1K69jJbQKlpCmHPje2tiDL/wIk41ZzZv29eR
2BYf6pnu8xPT0BiVpywakxdVT5Zv0DM0Ihv2DgL6R5Db6e81nHG0GYSpzOxPz7nq
R60O0sS3ww3WhB3XrHRxTjk/C0qcitFKDeZAx+HbetYNiSfFTDEa33c3+6eM2Y5e
Qy2Ab2qP0Ep/sdHqPUFtNQZK9CaYB7w5SnctqVRycCHKG8clV4KOfQZa9zEWYOEA
h9AOBrG/IjSBhL6XtHCl/58iWv+pzV/FoIk/p+Dm1O3pswpGIFfoHU131/pQZuP8
4j9YdiURwll0HJ46Rf4KskulH2gfBg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iWqlDH3F+c0SoFkP0fn
l7N4gGd1zcZ8+o0UsJydB+Nxt4I9NuN6DqNMkbu/w/FWcauyeBDcUHxRgj6Zw5UV
BllNBQdIuZfPRsdksQltbCOmMCmfmhogEQfFV6ooHD/MFtfPeT3815m2qyzm5Dz7
yE9nxGYmrmdBvZsloLYrzZETRiaU8burqGzSYswef5xzPCWSZh5QM9V00ZtQXyK+
u05bXS+uWWRA+g+JqP4OcCun9JaEoRhlW1Zq2iGZoTFdZXqB5tSWdhi1Zfc3SHfa
D7GprKPK5XIdiZYs/Q7iT8u0zeK+qUDOu/USK6/ywOdu2BKO2xx5Kq6Uon9kyxEF
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419288618863438276680428288438109325762273
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-22 20:28:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-21 20:28:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mediatasoft.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28548430878845483406732912423290252566282610471070992199249541541074145113855059847262457286025270177120496565393233848106386067866068173996944203931623128203325565725090362254838994928881542519472129552860500808164847972943676037704285764429572841777352869267856460475812701437712668472860036824910262496391938979302584281599621521839497727942911755171593437958378265432286303320031432361859575513105943259890033552890773765931760888028470423880570066936090064468427403241837756351346330901777889079614001979357987102367307204845787591109737721489253654437197627391204053176159899523042752773660937484159731935282561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							602c1b0c0071e08b92e1203f307f8b89e1778461
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (684 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hc1.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.copiloto.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.pms.hc1.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apimoduled.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bniguanajuato.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.sincronia.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copiloto.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitio.construlita.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.hc1.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.copiloto.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.pms.hc1.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apimoduled.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bniguanajuato.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clientes.sincronia.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copiloto.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediatasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitio.construlita.mediatasoft.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f2f8304c6000004030047304502201073cf6f7181838685d470fb9ae4f45f0ba477354f955bd3b652511eff8aca79022100ee2767592c44f01129bde10c439793fcf6477f6fbdabee40e61b0585b872fcb200750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f2f8304ea000004030046304402205d975e0319230c0a6385c261b65aafecbee5e906808d002815427c35688bde4d022041c8be4e172b1b0e4d2b3770dce10a3e781286753745e09819ff1ab44b5329e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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