primoguns.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a4:a6:17:a6:c6:65:f3:51:e9:0d:29:f4:dc:89:67:c2:4a was issued on by Let's Encrypt.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=primoguns.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a4:a6:17:a6:c6:65:f3:51:e9:0d:29:f4:dc:89:67:c2:4a
Serial Number (int): 317363940623041412809581098765466315768394
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e6:a5:6b:67:33:37:39:24:2c:f7:f3:f6:79:9f:b7:d5:20:36:4c:a9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:11:ab:56:b3:b8:bc:ae:8c:d0:fa:80:50:7c:c2:53:5a:5c:7b:4f
Fingerprint (sha256): fc:2d:ad:24:bb:04:9f:88:99:82:94:11:cd:d1:ea:48:99:c0:42:bc:24:5d:17:9d:84:2a:c7:9d:0c:da:6a:68

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate primoguns.com

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for primoguns.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.allaafrica.com
*.bestkayaktrailer.com
*.billiardleagueofamerica.com
*.binaryoptionstradingitm.com
*.blackboxbm.com
*.boneshakerbikefest.com
*.brittanysphotos.com
*.bwmountainlakeinn.com
*.cashield.com
*.chops-restaurant.com
*.choptech.com
*.cowscorpion.com
*.howtastebudswork.com
*.kinetictouch.com
*.launch3hvac.com
*.livesportsplus.com
*.marketpaid.com
*.nokiaappwizard.com
*.patienttrak.com
*.primoguns.com
*.rifflers.com
*.searchonlineretailers.com
*.sizzlesource.com
*.sqlserver-training.com
*.teczoz.com
*.thegrandprix.com
*.wornertcouture.com
*.wwwjetblack.com
*.zonetorrent.com
allaafrica.com
bestkayaktrailer.com
billiardleagueofamerica.com
binaryoptionstradingitm.com
blackboxbm.com
boneshakerbikefest.com
brittanysphotos.com
bwmountainlakeinn.com
cashield.com
chops-restaurant.com
choptech.com
cowscorpion.com
howtastebudswork.com
kinetictouch.com
launch3hvac.com
livesportsplus.com
marketpaid.com
nokiaappwizard.com
patienttrak.com
primoguns.com
rifflers.com
searchonlineretailers.com
sizzlesource.com
sqlserver-training.com
teczoz.com
thegrandprix.com
wornertcouture.com
wwwjetblack.com
zonetorrent.com

Other certificates including the domain name primoguns.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for primoguns.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317363940623041412809581098765466315768394
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-14 08:19:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-14 08:19:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'primoguns.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756566046027447953595798035355052316274297860719093157145122788708842832534044225640915462531315502812915920536355541781106550612726920222728716218020591678740037524962393029434066601193177412253213148745704259057871326862279232956221893131173662945758627539011859611010667135273630131496376601832869281781079002583758932373338822154490612914585485956890575607240763236116725093784773053659788064303010649311095891162493585267364649868021074644906612809542819201515785455335554372921300133193269907458453342777407964023391718525229237384762913770484714395734129893696882726168775998877177925063967824322624557922510283725057331396628000786859100736657630546839139179087867706972507283738260859410662447095600701058591378705816980649766566060177942721266979199482189238719906374028605508752244642329492969636303943422797233585897620971469467162272375521495137331402135072263859101981774359128897863020492146241190641417115166300296524765862697007260276409238632486417684501588393123730008214742223140744440205887195061652388302326130159934350986304468626758718011126962859353847400536846387519729183999062455175900928070547812090793947132739733967109889004826779499588586800017096764956840745500269971876662194059950216433809096933049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6a56b67333739242cf7f3f6799fb7d520364ca9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1180 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allaafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestkayaktrailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billiardleagueofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.binaryoptionstradingitm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackboxbm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boneshakerbikefest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brittanysphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bwmountainlakeinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cashield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chops-restaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.choptech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cowscorpion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howtastebudswork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinetictouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.launch3hvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livesportsplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketpaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nokiaappwizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patienttrak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primoguns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rifflers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searchonlineretailers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sizzlesource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sqlserver-training.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teczoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegrandprix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wornertcouture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwjetblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zonetorrent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allaafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestkayaktrailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billiardleagueofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binaryoptionstradingitm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackboxbm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boneshakerbikefest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brittanysphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bwmountainlakeinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chops-restaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choptech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cowscorpion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtastebudswork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinetictouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'launch3hvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livesportsplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketpaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nokiaappwizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patienttrak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primoguns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rifflers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchonlineretailers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sizzlesource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqlserver-training.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teczoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegrandprix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wornertcouture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwjetblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonetorrent.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001684ba88c030000040300473045022100de09bca0cac450d3094508defd53852de984fb4120352e630be2567f5d4c9ee402205ee10265e39706eabc8c2b85c328818e3cd4ffe88df7aeb60204fb101add344300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001684ba88e1b0000040300473045022100d782b9b42ec4270e20c700d4dbfb5a3f5b20acd90d01401a5eb2c95d7955c11d0220435f7ed5da25d65d5388874d77230b55304974fc7d2ae786e617ce05bcd29b14
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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