tektonik.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8a:bf:16:64:10:9f:5e:42:ed:72:16:e8:80:c0:3b:fc:a0 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tektonik.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:bf:16:64:10:9f:5e:42:ed:72:16:e8:80:c0:3b:fc:a0
Serial Number (int): 308549823237653987632790045818581520481440
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 92:83:ab:a5:87:bf:3a:68:45:63:bb:bd:61:fe:6d:34:a7:79:ef:31
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:b3:dd:61:02:ff:21:bd:c5:32:99:09:4b:66:45:49:5c:1f:fb:75
Fingerprint (sha256): de:4f:9f:82:b7:4d:e5:ef:7c:a3:36:fb:6b:21:a4:1c:08:54:62:7e:0f:ad:e8:9d:4b:13:6d:37:7b:b5:ac:7e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tektonik.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tektonik.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ftp.tektonik.ca
it.tektonik.ca
it.tektonik.com
mail.tektonik.ca
mail.tektonik.com
pop.tektonik.com
smtp.tektonik.com
tektonik.ca
tektonik.com
ti.tektonik.ca
ti.tektonik.com
www.tektonik.ca
www.tektonik.com

Other certificates including the domain name tektonik.com

(limited to 100 certificates)
tek7.tektonik.com
tektonik.com
subscriptions.linxio.com
bk1.tektonik.com
tek7.tektonik.com
promo.tektonik.com
it.tektonik.ca
tektonik.com
tek7.tektonik.com
tek7.tektonik.com
tek7.tektonik.com
tektonik.com
konto.eriksberg.ax
tektonik.com
it.tektonik.ca
promo.tektonik.com
tek7.tektonik.com
it.tektonik.ca
subscriptions.hdtelly.tv
tek7.tektonik.com
konto.eriksberg.ax
it.tektonik.ca
tek7.tektonik.com
tektonik.com
tek7.tektonik.com
tektonik.com
it.tektonik.ca
tek7.tektonik.com
tek7.tektonik.com
tek7.tektonik.com
tektonik.com
myaccount.mylittlemascaraclub.com
konto.eriksberg.ax
konto.eriksberg.ax
accounts.ntsrd.org
konto.eriksberg.ax
subscriptions.bluume.com
subscriptions.infodriveindia.com
sub.kiwiz.io
subscriptions.regtify.com
tektonik.com
konto.eriksberg.ax
odoo.tektonik.com
konto.eriksberg.ax
konto.eriksberg.ax
it.tektonik.ca
login.minus.io
tek7.tektonik.com
tek7.tektonik.com
tek7.tektonik.com
myaccount.justsoopit.com
promo.tektonik.com
tektonik.com
konto.eriksberg.ax
tek7.tektonik.com
tektonik.ca
tek7.tektonik.com
tek7.tektonik.com
konto.eriksberg.ax
subscriptions.mleap.in
tektonik.com
tek7.tektonik.com
tektonik.ca
konto.eriksberg.ax
tek7.tektonik.com
konto.eriksberg.ax
tektonik.com
tek7.tektonik.com
tektonik.ca
tek7.tektonik.com
subscriptions.hosteddialer.com
promo.tektonik.com
promo.tektonik.com
tektonik.com
odoo.tektonik.com
tek7.tektonik.com
subscriptions.urbanstream.co.uk
tektonik.com
billing.zerotek.com
konto.eriksberg.ax
konto.eriksberg.ax
it.tektonik.ca
it.tektonik.ca
plans.tektonik.com
tek7.tektonik.com
tek7.tektonik.com
konto.eriksberg.ax
konto.eriksberg.ax

Certificate

The complete raw certificate details for tektonik.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHIDCCBgigAwIBAgISA4q/FmQQn15C7XIW6IDAO/ygMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMTAwNDE0MThaFw0x
OTAyMDgwNDE0MThaMBcxFTATBgNVBAMTDHRla3RvbmlrLmNvbTCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAOC5thjUl7UvBFKjNRN8oGveLbpNz3/bhypD
CwhP2Iz42xWZ9UlCtLKveOVbPHxQmvIyLansMmUVhhmIVa6/yrJZXN8q6qfM1A7v
2Ie9kzqoXh8OHDMi8izXS9EtX8ElumCP3TYiu2yLGFsaEai5LgQCa37IjhBU0h29
llecvpuOiEuvvERfNEEHWOSrTJDbIlvJ7vNzqbx+R5eTmy7iGhftFfEuLoTJyoph
SBedlaj6uzmbTS1vDbPUsMzKXC7N1tt+SRCKpVlJtBoq+/FJPj4QjDO2oqczMPJY
3k8HLX1/+iDYBAh8WNT4wN3MVwvvvgphEXxcfra1HMaMbrAKVrxj7880BYZt83c2
h3A6s/i1i3r7XYap9fr9wlzubazPjdANYzCvWwmhG12P7zU6D57B3tyL0nZUamjE
cCaC8vefdXz1j+iDaWEUwPTGe7eCOTWFd0EJgPjd73+54C9YRqX/cYYVNt/5OVVv
JxGk/6/F7EO9Ygd0gASQr29zml5Z6NCxQI9heBFEOJj10izQA6a/apwJH9Dx16qD
Y5DZ4lDOfjgr9UPi1mPujGWx9gAeas8F6kg/fIAL6crcz3zZpGHbYn4d/AKtO6Y+
vwUAV0RNt4XjH+zHMfM8sRY6QC4VJs4Q5qcaPLtYeccEXSJTtNe/EB67nbyQ8GWV
CbopEkYDAgMBAAGjggMxMIIDLTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJKDq6WH
vzpoRWO7vWH+bTSnee8xMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wgeYGA1UdEQSB3jCB24IPZnRwLnRla3RvbmlrLmNh
gg5pdC50ZWt0b25pay5jYYIPaXQudGVrdG9uaWsuY29tghBtYWlsLnRla3Rvbmlr
LmNhghFtYWlsLnRla3RvbmlrLmNvbYIQcG9wLnRla3RvbmlrLmNvbYIRc210cC50
ZWt0b25pay5jb22CC3Rla3RvbmlrLmNhggx0ZWt0b25pay5jb22CDnRpLnRla3Rv
bmlrLmNhgg90aS50ZWt0b25pay5jb22CD3d3dy50ZWt0b25pay5jYYIQd3d3LnRl
a3RvbmlrLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisG
AQQB1nkCBAIEgfUEgfIA8AB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgia
N9kTAAABZvwKzVoAAAQDAEgwRgIhAIlFqXyYRcz50hqgbvply5eJ5sE7AglxfZGb
HIsKjPMaAiEA+aSpusGSQzkCTOiD12dugwV/sWrqTamyC6L7Xh/MVAoAdQBj8tvN
6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWb8CszdAAAEAwBGMEQCIBA7
30JV0W38clS4hGqRNg7HE9n/ruK9Orf49VF5TvbzAiB4Q74FYogmSj6zbVSllS4Z
d7Nqebmi4pkFBtwYT2f2ojANBgkqhkiG9w0BAQsFAAOCAQEABEJIT1XA2BfPSWMr
Ydm/Ng2HGhyGMtZBgUuWwxZ7rvhcvfTyPvUB92XL8CAoz2f3qYmgRBIYA33c6Xar
B/D8zE9XweJydyujOySY5Gzs3tt6Feka9vGtFhn2YzLE2jP4c9yRIXt/dnhoL94t
gM2HddVb+h0t5O4+XxI2i1DvKt28Tair4m6RSveAXKT9sxSWD1D3Q1n7FTeBmzzx
dmYZVkLHc6JzwLYZfoqADg4kfOa1kaSU0K97vwPMIizzIMM5tEkB1D95BbXTovTV
zIfYz/qvDcQaHuLGZW8J1yEs17txcqUZMVPuM9GZPXCScOeajQ8Iff62wyz8qmC2
S2mucA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308549823237653987632790045818581520481440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-10 04:14:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-08 04:14:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tektonik.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 916799787135898475951520658574379004905401037812099177432888402250320257505647504149997876232284769795997775311554558025974775437428077841771866509120866914417297564795380803688555042345942131873158490684713129238089581316377133262021087444069847974158794059372498870141050611106211153688238316625929869169393506406654399752761907595296456918202159596309417063898882786486903967152779046341880480906933704278291108530531188113214971332410500191388798972988287626602927653334338210457421648109889773656654751108740853252486404767109515151371245789050106858321887106055649539706644504166367707018878068943530153264728402596153988102024021145082203924461037590079836734401122632588190176616913448729395051588344495195487178089918963694030188259426253194204422424199627422990033845728884384374514289356163265543348840974495374769820970972504848920141667736553541403671248458259666925463725102652734961341980046566625422424776903898732804797018044492878700538228387300513290560388972776337445336257225228218713569364010062835541019348083294149319129048817685803053266118825780477459799712269037306336724625608884999685855960795392831826286820267754746014677476198497436476758801121908621496639534265490455567025087441586302469268049118723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9283aba587bf3a684563bbbd61fe6d34a779ef31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (222 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ti.tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ti.tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tektonik.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000166fc0acd5a00000403004830460221008945a97c9845ccf9d21aa06efa65cb9789e6c13b0209717d919b1c8b0a8cf31a022100f9a4a9bac1924339024ce883d7676e83057fb16aea4da9b20ba2fb5e1fcc540a00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000166fc0accdd00000403004630440220103bdf4255d16dfc7254b8846a91360ec713d9ffaee2bd3ab7f8f551794ef6f302207843be056288264a3eb36d54a5952e1977b36a79b9a2e2990506dc184f67f6a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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