www.afawaseries-tz.com

Issued by R3

About this certificate

This digital certificate with serial number 03:72:1e:73:92:e8:53:7e:c5:aa:71:7c:15:1e:e8:ca:0b:89 was issued on by Let's Encrypt.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.afawaseries-tz.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:1e:73:92:e8:53:7e:c5:aa:71:7c:15:1e:e8:ca:0b:89
Serial Number (int): 300169524557918580106432771327783514803081
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:c1:7d:ad:82:7b:10:85:cc:7e:78:7a:36:4d:68:b5:57:79:03:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:2a:c6:c1:b2:5c:3b:5f:07:35:a9:c1:eb:9d:59:9d:21:1c:8b:5e
Fingerprint (sha256): ce:98:ab:33:a6:29:f4:06:1a:c5:3a:a3:4f:81:44:e9:6b:d4:82:65:b6:1e:ff:04:f0:01:16:5b:50:f1:27:38

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.afawaseries-tz.com

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.afawaseries-tz.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

backstage.charliejohnsonfitness.com
backstage.grnetsolution.com
backstage.hamedazimi.me
backstage.jdwtech.com
event.opnmynd.com
event.secureelance.com
event.ytj-show.jp
evento.reciclagem.de
eventos.facilitandoamamentacao.com.br
eventos.the-smart-store.com
events.abacusworldwide.org
events.centralillinoispride.com
events.creativezone.ae
events.cybiant.com
events.destifind.sa
events.hamedazimi.me
events.hideawayweddings.com.au
events.hindueconomy.org
events.informasoft.ca
events.maappen.com
events.pathwaystoresilience.org
events.speir.tv
events.thinxtra.com
events.vueav.com
events.workplacelearning.ial.edu.sg
live.theeventzteam.com
walk.lymphewarriors.co.za
www.afawaseries-tz.com
www.myshows.ca

Other certificates including the domain name afawaseries-tz.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.afawaseries-tz.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgISA3Iec5LoU37FqnF8FR7oyguJMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjA3MTkwNzQxMjNaFw0yMjEwMTcwNzQxMjJaMCExHzAdBgNVBAMT
Fnd3dy5hZmF3YXNlcmllcy10ei5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDTylfrUoL9gFeTl54ELrpuvZaQOM///sOcOxrUh1sdid0S17rE1r44
mbZZvRbIOSx8XVLogEAnuKjuB1zyjQAoYzypxO71xPBC1YD0IzpMXIbk5QlIERxm
xGOnfIw5tjMsHpHy2Rz03YGtTUDY87nc4aN5DS+cTkQAaFetBfVkXsZioAqd1CUv
hqb9/88g0th2hsCosOO0GHMa5ymMbcRqi+BW3FtT3Pz6fy1mY/hPAlExAs1a8QwM
mUomWdQ6MZXGhLubkhrb4AG58utPHM93lL+jLf0vL81/leEAVnhWzOfj0mrd/RT3
5k92QhXezUt+JKrdrv/h1A9lOrBuk//lAgMBAAGjggQnMIIEIzAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFKrBfa2CexCFzH54ejZNaLVXeQMUMB8GA1UdIwQYMBaAFBQu
sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV
aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s
ZW5jci5vcmcvMIIC6AYDVR0RBIIC3zCCAtuCI2JhY2tzdGFnZS5jaGFybGllam9o
bnNvbmZpdG5lc3MuY29tghtiYWNrc3RhZ2UuZ3JuZXRzb2x1dGlvbi5jb22CF2Jh
Y2tzdGFnZS5oYW1lZGF6aW1pLm1lghViYWNrc3RhZ2UuamR3dGVjaC5jb22CEWV2
ZW50Lm9wbm15bmQuY29tghZldmVudC5zZWN1cmVlbGFuY2UuY29tghFldmVudC55
dGotc2hvdy5qcIIUZXZlbnRvLnJlY2ljbGFnZW0uZGWCJWV2ZW50b3MuZmFjaWxp
dGFuZG9hbWFtZW50YWNhby5jb20uYnKCG2V2ZW50b3MudGhlLXNtYXJ0LXN0b3Jl
LmNvbYIaZXZlbnRzLmFiYWN1c3dvcmxkd2lkZS5vcmeCH2V2ZW50cy5jZW50cmFs
aWxsaW5vaXNwcmlkZS5jb22CFmV2ZW50cy5jcmVhdGl2ZXpvbmUuYWWCEmV2ZW50
cy5jeWJpYW50LmNvbYITZXZlbnRzLmRlc3RpZmluZC5zYYIUZXZlbnRzLmhhbWVk
YXppbWkubWWCHmV2ZW50cy5oaWRlYXdheXdlZGRpbmdzLmNvbS5hdYIXZXZlbnRz
LmhpbmR1ZWNvbm9teS5vcmeCFWV2ZW50cy5pbmZvcm1hc29mdC5jYYISZXZlbnRz
Lm1hYXBwZW4uY29tgh9ldmVudHMucGF0aHdheXN0b3Jlc2lsaWVuY2Uub3Jngg9l
dmVudHMuc3BlaXIudHaCE2V2ZW50cy50aGlueHRyYS5jb22CEGV2ZW50cy52dWVh
di5jb22CI2V2ZW50cy53b3JrcGxhY2VsZWFybmluZy5pYWwuZWR1LnNnghZsaXZl
LnRoZWV2ZW50enRlYW0uY29tghl3YWxrLmx5bXBoZXdhcnJpb3JzLmNvLnphghZ3
d3cuYWZhd2FzZXJpZXMtdHouY29tgg53d3cubXlzaG93cy5jYTBMBgNVHSAERTBD
MAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8v
Y3BzLmxldHNlbmNyeXB0Lm9yZzATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAR93j5i2syjC6g671tvvTztWQBGQhzh9O7j0eRRmcc4zvYrrS
qAP0eazE7fkLNu2O5NP6uZuJmmTpdOV8wvVVnCdcsCojK6vGcr3YdFyhqe35N8IU
OcMX6hI9ctimkblHTnXAbrlimhMROptA9O4gCV7/MKYuRoq6/D1JJ3B4SgW1aVgc
qdY8+YEkUt0kUX6eq6JyAjJI92ZY+O9M4IIWVych4aOKMSZHye6C940zT0/JpkV3
sKQG9LljKquEY//Jpnz0jrwaichUvZjK3483aq5cdinNKpGSxiWn5DM0PJJEkPSW
715IzKgr+dIQPGzIhiKVkz6s5t65iu4LjnOYEA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08pX61KC/YBXk5eeBC66
br2WkDjP//7DnDsa1IdbHYndEte6xNa+OJm2Wb0WyDksfF1S6IBAJ7io7gdc8o0A
KGM8qcTu9cTwQtWA9CM6TFyG5OUJSBEcZsRjp3yMObYzLB6R8tkc9N2BrU1A2PO5
3OGjeQ0vnE5EAGhXrQX1ZF7GYqAKndQlL4am/f/PINLYdobAqLDjtBhzGucpjG3E
aovgVtxbU9z8+n8tZmP4TwJRMQLNWvEMDJlKJlnUOjGVxoS7m5Ia2+ABufLrTxzP
d5S/oy39Ly/Nf5XhAFZ4Vszn49Jq3f0U9+ZPdkIV3s1LfiSq3a7/4dQPZTqwbpP/
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300169524557918580106432771327783514803081
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-19 07:41:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-17 07:41:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.afawaseries-tz.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26736061614206372909596115658479296063130494874447057380647684211525848259888806856163574942954677871454810429831436610876804697016205070826820069675918555192896873811205398970598134726722118541675073918631011410620615716117809661649851283022430633352055576684200956027196152986020678565443397963283300322358791826412143378165117798261646198031759456774090427073284997115489310297316945195440528556405860405892688295030952191569494500872836222315228637316533897343654207554193566733505072299785264793182630023423548608155972387207390009939621294542149024093158696239537134529372251696926853102439696585167913268543461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aac17dad827b1085cc7e787a364d68b557790314
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (735 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backstage.charliejohnsonfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backstage.grnetsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backstage.hamedazimi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backstage.jdwtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.opnmynd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.secureelance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.ytj-show.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evento.reciclagem.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventos.facilitandoamamentacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventos.the-smart-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.abacusworldwide.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.centralillinoispride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.creativezone.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.cybiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.destifind.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hamedazimi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hideawayweddings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hindueconomy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.informasoft.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.maappen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.pathwaystoresilience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.speir.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.thinxtra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.vueav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.workplacelearning.ial.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.theeventzteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walk.lymphewarriors.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afawaseries-tz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myshows.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0047dde3e62dacca30ba83aef5b6fbd3ced590046421ce1f4eee3d1e45199c738cef62bad2a803f479acc4edf90b36ed8ee4d3fab99b899a64e974e57cc2f5559c275cb02a232babc672bdd8745ca1a9edf937c21439c317ea123d72d8a691b9474e75c06eb9629a13113a9b40f4ee20095eff30a62e468abafc3d492770784a05b569581ca9d63cf9812452dd24517e9eaba272023248f76658f8ef4ce08216572721e1a38a312647c9ee82f78d334f4fc9a64577b0a406f4b9632aab8463ffc9a67cf48ebc1a89c854bd98cadf8f376aae5c7629cd2a9192c625a7e433343c924490f496ef5e48cca82bf9d2103c6cc8862295933eace6deb98aee0b8e739810