pregaweb.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:76:49:a8:18:1b:76:01:ef:54:e0:6c:89:be:52:c2:79:6a was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pregaweb.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:49:a8:18:1b:76:01:ef:54:e0:6c:89:be:52:c2:79:6a
Serial Number (int): 301588083530469523784134726205678140160362
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b8:cc:a9:1c:72:23:8d:d8:56:fa:12:f9:10:d6:ec:20:0e:81:fe:c1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:da:16:b0:7e:6f:5c:dd:f2:ed:7c:8e:cb:1c:b8:c6:fb:4e:96:35
Fingerprint (sha256): d6:dd:ef:5f:90:1e:cd:b1:f5:fb:b0:6a:a5:5f:6b:05:43:df:2e:ed:4b:33:b9:e3:3f:37:67:36:9d:a2:8a:79

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pregaweb.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pregaweb.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.porticotapalpa.com
autodiscover.pregaweb.com
cpanel.porticotapalpa.com
cpanel.pregaweb.com
mail.porticotapalpa.com
mail.pregaweb.com
porticotapalpa.com
porticotapalpa.pregaweb.com
pregaweb.com
webdisk.porticotapalpa.com
webdisk.pregaweb.com
webmail.porticotapalpa.com
webmail.pregaweb.com
www.porticotapalpa.com
www.porticotapalpa.pregaweb.com
www.pregaweb.com

Other certificates including the domain name pregaweb.com

(limited to 100 certificates)
webmail.obregonmayoreo.com
navaxtreme.com
fenergdl.com
bombasalmo.com
amandacobo.com
amandacobo.com
coisa.com.mx
bombasalmo.com
pregaweb.com
floresymasgdl.com
bombasalmo.com
wheatlovers.com
carmep.com
wheatlovers.com
logisticmedical.com.mx
fenergdl.com
lepsaconstruccion.com
giulianajoyas.com
fenergy.mx
carmep.com
custodiasaandp.com
engineerumsolutions.com.pregaweb.com
carmep.com
coisa.com.mx
promo9.com.mx
promo9.com.mx
logisticmedical.com.mx
cs21.com.mx
demyc.com.mx
coisa.com.mx
porticotapalpa.pregaweb.com
fenergy.mx
porticotapalpa.com
custodiasaandp.com
alcede.com.mx
amandacobo.com
logisticmedical.com.mx
porticotapalpa.pregaweb.com
fenergy.mx
lepac.com.mx
visao.com.mx
cs21.com.mx
cs21.com.mx
wheatlovers.com
porticotapalpa.pregaweb.com
lepac.com.mx
bombasalmo.com
londonails.com
zereneaty.com
wheatlovers.com
bombasalmo.com
amandacobo.com
cs21.com.mx
cpanel.lepac.com.mx
porticotapalpa.pregaweb.com
custodiasaandp.com
samab.com.mx
custodiasaandp.com
navaxtreme.com
zereneaty.com
floresymasgdl.com
londonails.pregaweb.com
porticotapalpa.com
alcede.com.mx
bombasalmo.com
amandacobo.com
logisticmedical.com.mx
coisa.com.mx
wheatlovers.com
fenergdl.com
coisa.com.mx
floresymasgdl.pregaweb.com
mail.pregaweb.com
custodiasaandp.com
custodiasaandp.com
carmep.com
carmep.com
pregaweb.com
amandacobo.com
floresymasgdl.com
bombasalmo.com
porticotapalpa.com
mikesbody-shop.com
logisticmedical.pregaweb.com
varaflex.com.mx
porticotapalpa.com
lepac.com.mx
floresymasgdl.com
giulianajoyas.com
pregaweb.com
navaxtreme.com
floresymasgdl.com
giulianajoyas.com
wheatlovers.com
amandacobo.com
londonails.com
samab.com.mx
fenergdl.com
visao.com.mx
alcede.com.mx

Certificate

The complete raw certificate details for pregaweb.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGzjCCBbagAwIBAgISA3ZJqBgbdgHvVOBsib5SwnlqMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTUwNDA3MTVaFw0y
MDA2MTMwNDA3MTVaMBcxFTATBgNVBAMTDHByZWdhd2ViLmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBANttPc1t3vhMkzwciSx23uzNWTp8n+JPqS2j
Q4hejBOxLfX48lJLD04fYBr7RHcMxGZTvzmCXFO+t4nXADWXu5hLLwEv9YMIbQCa
lNqjqUy46DkgnzErTuHA7XIC+DFnLZUB74qHtLob1O4zeNj+78CNqVQRBPvp4Uat
3/cl9N28PdyFxkJOk7VMt8KhXGmLDiUomDfyaEEviVob3DGDlv1JTikgf69xYW/L
25ltMTR3OL1HDkuciBYi0na+qAGWd5eYCNCyUTmPUGWdgarLsh/pxU+bUkaUyGdt
gyd91QKOKVEm/c1+lhjsHWV7xU8BksWrCigl4TBvM22JIi4zuq0CAwEAAaOCA98w
ggPbMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUuMypHHIjjdhW+hL5ENbsIA6B/sEw
HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh
MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
LzCCAZMGA1UdEQSCAYowggGGgh9hdXRvZGlzY292ZXIucG9ydGljb3RhcGFscGEu
Y29tghlhdXRvZGlzY292ZXIucHJlZ2F3ZWIuY29tghljcGFuZWwucG9ydGljb3Rh
cGFscGEuY29tghNjcGFuZWwucHJlZ2F3ZWIuY29tghdtYWlsLnBvcnRpY290YXBh
bHBhLmNvbYIRbWFpbC5wcmVnYXdlYi5jb22CEnBvcnRpY290YXBhbHBhLmNvbYIb
cG9ydGljb3RhcGFscGEucHJlZ2F3ZWIuY29tggxwcmVnYXdlYi5jb22CGndlYmRp
c2sucG9ydGljb3RhcGFscGEuY29tghR3ZWJkaXNrLnByZWdhd2ViLmNvbYIad2Vi
bWFpbC5wb3J0aWNvdGFwYWxwYS5jb22CFHdlYm1haWwucHJlZ2F3ZWIuY29tghZ3
d3cucG9ydGljb3RhcGFscGEuY29tgh93d3cucG9ydGljb3RhcGFscGEucHJlZ2F3
ZWIuY29tghB3d3cucHJlZ2F3ZWIuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG
CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA8JWkWfIA0YJAEC0vk4iO
rUv+HUfjmeHQNKawqKqOsnMAAAFw3JbMUwAABAMARzBFAiEApE8aqouHmWaowVoV
7DLK3ql9AQUXiSX8aeQGWGdM96cCIDjqgGOLVjGLUl778FXf3s5j6Jgf8cn3+OkC
EzSJs72SAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFw3JbM
ewAABAMARzBFAiEA6JI/OisnpqbLZJuU8LVOZmt3b2lPQgl7C2s7iOgCjNICIG27
LSv8EoFpLQIKChcr984DzdpYfzSzNHCjKS4CnhV0MA0GCSqGSIb3DQEBCwUAA4IB
AQBhSx0+5SUKJzJCVV+j8/3H70iFdx8Jiogt0N+z4NRRwPez4RMKa1YBHK+i/5pk
SKSxOv8670LKvXMpSModV8bmdCjSNP4eIlTnZE4Irtkz3cBfb1mYaQDDgyZ5XuSA
GFmqEUFKSVsFSyNs0926K+hG8qh7SKaMHH2k7XIkUuWkeCIZ8NnUqYHIPAEeklsL
IlAwbGxencs4iw3cK8wtl46mdGFwTsxN9N2trKn+pBzwYEO6psOKdgW1Yi1J0aec
R5112zvchhNbEh4TMmcU3+x3XSy37NrhhQ0EYvQnH4pZPh1yxDS+kjEO91kwX5xJ
pKmXceHULE1fpHSTol0RWFCT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2209zW3e+EyTPByJLHbe
7M1ZOnyf4k+pLaNDiF6ME7Et9fjyUksPTh9gGvtEdwzEZlO/OYJcU763idcANZe7
mEsvAS/1gwhtAJqU2qOpTLjoOSCfMStO4cDtcgL4MWctlQHvioe0uhvU7jN42P7v
wI2pVBEE++nhRq3f9yX03bw93IXGQk6TtUy3wqFcaYsOJSiYN/JoQS+JWhvcMYOW
/UlOKSB/r3Fhb8vbmW0xNHc4vUcOS5yIFiLSdr6oAZZ3l5gI0LJROY9QZZ2Bqsuy
H+nFT5tSRpTIZ22DJ33VAo4pUSb9zX6WGOwdZXvFTwGSxasKKCXhMG8zbYkiLjO6
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301588083530469523784134726205678140160362
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 04:07:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-13 04:07:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pregaweb.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27700057737446015372725005594898158021602031770185044699561949482093240225499670487872906209252822066125948912131676157545848227222602775529833438616828041938904422186626478859537307529362533215282205714035199792517259640480800568189606669637356323820811590141510289234070217769195972756804938603247469128172227962581591709572078867382603388479662439552348444274698591944491438277517787979656041832540066863614162567615993061930457120894366479990028239037327019638438970006237522767363857400668735133970726657560825838035041850011666498597429506961841375549982637690301936724359861332443931033198150036153100634667693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8cca91c72238dd856fa12f910d6ec200e81fec1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (394 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.porticotapalpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pregaweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.porticotapalpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.pregaweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.porticotapalpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pregaweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porticotapalpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porticotapalpa.pregaweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pregaweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.porticotapalpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.pregaweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.porticotapalpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.pregaweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porticotapalpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porticotapalpa.pregaweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pregaweb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170dc96cc530000040300473045022100a44f1aaa8b879966a8c15a15ec32cadea97d0105178925fc69e40658674cf7a7022038ea80638b56318b525efbf055dfdece63e8981ff1c9f7f8e902133489b3bd9200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170dc96cc7b0000040300473045022100e8923f3a2b27a6a6cb649b94f0b54e666b776f694f42097b0b6b3b88e8028cd202206dbb2d2bfc1281692d020a0a172bf7ce03cdda587f34b33470a3292e029e1574
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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