diprosegma.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:38:6e:22:93:63:2c:d7:9f:f4:68:ea:0e:81:1e:8e:fa:b8 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=diprosegma.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:38:6e:22:93:63:2c:d7:9f:f4:68:ea:0e:81:1e:8e:fa:b8
Serial Number (int): 280539064949854502664535379608717220575928
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ec:6c:bc:6c:6c:a3:3b:12:7b:84:3f:ee:48:fd:af:2c:0b:ec:94:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ce:9f:68:97:e8:ac:5f:64:9c:c6:00:2c:14:d6:f5:3b:50:32:b7:16
Fingerprint (sha256): d3:bb:f1:9b:e1:6d:a9:91:41:71:34:c6:82:a4:2e:26:f4:ec:92:58:a0:cb:dd:0d:ba:7c:72:40:6c:16:9a:ee

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate diprosegma.com.br

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for diprosegma.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

diprosegma.com.br
distribuidorintex.com.br
escolaacolher.com.br
faculdadewaldirfilho.com.br
gruporiccoalimentos.com.br
languageacademy.com.br
mundointex.com.br
planosdesaude.slz.br
produtosintex.com.br
rachelsaif.com.br
tradedigital.slz.br
vendedorxpert.com.br
www.diprosegma.com.br
www.distribuidorintex.com.br
www.escolaacolher.com.br
www.faculdadewaldirfilho.com.br
www.gruporiccoalimentos.com.br
www.languageacademy.com.br
www.mundointex.com.br
www.planosdesaude.slz.br
www.produtosintex.com.br
www.rachelsaif.com.br
www.tradedigital.slz.br
www.vendedorxpert.com.br

Other certificates including the domain name diprosegma.com.br

(limited to 100 certificates)
www.diprosegma.com.br
www.diprosegma.com.br
www.diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
www.diprosegma.com.br
www.diprosegma.com.br
www.diprosegma.com.br
diprosegma.com.br
www.diprosegma.com.br
chavecertaimoveis.com.br
diprosegma.com.br
www.diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
diprosegma.com.br
www.diprosegma.com.br
diprosegma.com.br
diprosegma.com.br

Certificate

The complete raw certificate details for diprosegma.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHnzCCBoegAwIBAgISAzhuIpNjLNef9GjqDoEejvq4MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMDgxODM0MDJaFw0y
MDA0MDcxODM0MDJaMBwxGjAYBgNVBAMTEWRpcHJvc2VnbWEuY29tLmJyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFiFQnxe3kdoUOqClwDNQEFIXobe
u+T3cTC3Nlrsh5Qmlc8eyekeLN5woNAhcvMdc7+BdVIGYS8YroKJiJsQ5YAx5ig8
QCIdrdCFGXRSAf4zf/tZM/DQcQeMuAEMO1uJE5fWsPRRdsBYTQ124KRW5DK+D9u6
3+8uDl+OMmsdbaHKsTgkWRdhhRELpyUGBm19O2kpP0+WIErsbtPTYylVcRO98qm6
YrXs8mBxgz92IXbvKLQERZQujq6xs1/1mHzNfJICSBFyyBU1/m4yC97hAhhR6BMF
uHAs2rpjYydIy0eNDoGxodbguZD060sXVjuNPDB6h10F7sezdSbDQXtr8wIDAQAB
o4IEqzCCBKcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTsbLxsbKM7EnuEP+5I/a8s
C+yULzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB
AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw
dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw
dC5vcmcvMIICXwYDVR0RBIICVjCCAlKCEWRpcHJvc2VnbWEuY29tLmJyghhkaXN0
cmlidWlkb3JpbnRleC5jb20uYnKCFGVzY29sYWFjb2xoZXIuY29tLmJyghtmYWN1
bGRhZGV3YWxkaXJmaWxoby5jb20uYnKCGmdydXBvcmljY29hbGltZW50b3MuY29t
LmJyghZsYW5ndWFnZWFjYWRlbXkuY29tLmJyghFtdW5kb2ludGV4LmNvbS5icoIU
cGxhbm9zZGVzYXVkZS5zbHouYnKCFHByb2R1dG9zaW50ZXguY29tLmJyghFyYWNo
ZWxzYWlmLmNvbS5icoITdHJhZGVkaWdpdGFsLnNsei5icoIUdmVuZGVkb3J4cGVy
dC5jb20uYnKCFXd3dy5kaXByb3NlZ21hLmNvbS5icoIcd3d3LmRpc3RyaWJ1aWRv
cmludGV4LmNvbS5icoIYd3d3LmVzY29sYWFjb2xoZXIuY29tLmJygh93d3cuZmFj
dWxkYWRld2FsZGlyZmlsaG8uY29tLmJygh53d3cuZ3J1cG9yaWNjb2FsaW1lbnRv
cy5jb20uYnKCGnd3dy5sYW5ndWFnZWFjYWRlbXkuY29tLmJyghV3d3cubXVuZG9p
bnRleC5jb20uYnKCGHd3dy5wbGFub3NkZXNhdWRlLnNsei5icoIYd3d3LnByb2R1
dG9zaW50ZXguY29tLmJyghV3d3cucmFjaGVsc2FpZi5jb20uYnKCF3d3dy50cmFk
ZWRpZ2l0YWwuc2x6LmJyghh3d3cudmVuZGVkb3J4cGVydC5jb20uYnIwTAYDVR0g
BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0
cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA
dwBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW+Gpkk8AAAEAwBI
MEYCIQCMy1VZ3Asbsj6CYRSetOhPKPYqdzgDs8MlPW7+AkJY0AIhAK7I2BXwtpgv
wx7dw7crCpMbySx4ZD+sgDVMlpfm/fm+AHUAsh4FzIuizYogTodm+Su5iiUgZ2va
+nDnsklTLe+LkF4AAAFvhqZJLQAABAMARjBEAiBRtJ7aYbgioe3rlG5O3TYxSKHP
cNYJRXgPTG4bag/PmwIgENYoAaZDHdlNntr4Th/gM39oN4QGjoebYMf4INeqw8ow
DQYJKoZIhvcNAQELBQADggEBABJMzRmihhXw9Ah+1CwbD48+ttmtseciZN+jULHH
BDqGskV5+RPOTLg8XcojjEORgVEL365oM93iIuqWVYhfyHV8ku495b0fuuyKc15U
LIJgJXt4pWVN0XBLidXkUsF7VzNK+fTiRUY7roWisz/UNmt1bUn1x1Wk5p3eZt3Y
s0aiCrlByqBkCAme0RSOTa321ouM1oYAQyfmCSQafokBlREkCiT1lVtcaNZDIWcW
BabSfKtOt56+3qVy5rcH6Ovv4P5Zmlf1LeGZthbNUPuV4sFba/9rn+kX0uMilVGz
vngry3WPcv+TjUx24WPl+r/kbAflUodB1Di0wWw2kPpHS98=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFiFQnxe3kdoUOqClwDN
QEFIXobeu+T3cTC3Nlrsh5Qmlc8eyekeLN5woNAhcvMdc7+BdVIGYS8YroKJiJsQ
5YAx5ig8QCIdrdCFGXRSAf4zf/tZM/DQcQeMuAEMO1uJE5fWsPRRdsBYTQ124KRW
5DK+D9u63+8uDl+OMmsdbaHKsTgkWRdhhRELpyUGBm19O2kpP0+WIErsbtPTYylV
cRO98qm6YrXs8mBxgz92IXbvKLQERZQujq6xs1/1mHzNfJICSBFyyBU1/m4yC97h
AhhR6BMFuHAs2rpjYydIy0eNDoGxodbguZD060sXVjuNPDB6h10F7sezdSbDQXtr
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280539064949854502664535379608717220575928
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 18:34:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 18:34:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diprosegma.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22766546001895570533569899187434027040217320701083854898521801219919844623879876263294467844023746693156763084567057838734765232135029285384461561742682237800283492619904760158564125650409962435354244529092101273405284700007806948109314837420821688533179586987126178823542537287449565635311478965327914991329259664222423293923797886703349421372795256847850308809571193380048995061720687601071491370998133089076236415235480079271831804266997816116024094998629486045176037823130927528766071543950696912707874940037057782364577751447229721390002793817326086586552155798585757182375048019790709638441348659457017855568883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec6cbc6c6ca33b127b843fee48fdaf2c0bec942f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (598 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diprosegma.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distribuidorintex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escolaacolher.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculdadewaldirfilho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruporiccoalimentos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'languageacademy.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mundointex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planosdesaude.slz.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produtosintex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rachelsaif.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradedigital.slz.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendedorxpert.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diprosegma.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distribuidorintex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escolaacolher.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faculdadewaldirfilho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gruporiccoalimentos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.languageacademy.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mundointex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planosdesaude.slz.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.produtosintex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rachelsaif.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradedigital.slz.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vendedorxpert.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f86a6493c00000403004830460221008ccb5559dc0b1bb23e8261149eb4e84f28f62a773803b3c3253d6efe024258d0022100aec8d815f0b6982fc31eddc3b72b0a931bc92c78643fac80354c9697e6fdf9be007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f86a6492d0000040300463044022051b49eda61b822a1edeb946e4edd363148a1cf70d60945780f4c6e1b6a0fcf9b022010d62801a6431dd94d9edaf84e1fe0337f683784068e879b60c7f820d7aac3ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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