content.bmw.at
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d2:ff:e2:96:5a:e3:ef:a2:ff:9d:dc:82:20:e1:8c:a9:79 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=content.bmw.at
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d2:ff:e2:96:5a:e3:ef:a2:ff:9d:dc:82:20:e1:8c:a9:79Serial Number (int): 333136284496255517660088237036806156888441
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 74:20:67:63:1f:ef:ee:57:19:46:05:4b:5b:98:49:b6:04:39:58:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6d:94:33:bf:4d:3b:05:d6:3a:26:ab:61:c4:74:d2:56:56:81:e0:81
Fingerprint (sha256): 00:58:12:e4:9e:db:bd:90:a3:5c:d2:f7:9d:95:cb:69:ab:c3:15:ae:e5:f2:d7:74:d2:9d:ea:6f:2c:ac:59:f7
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate content.bmw.at
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for content.bmw.at
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
content.bmw.apa.net
content.bmw.at
content.bmw.at
Other certificates including the domain name bmw.at
(limited to 100 certificates)
meinfs.bmw.de
cd1-eu.chargebee.com
content.bmw.at
eu12-1.cdn.salesforce-communities.com
con.api.mini
mail.harmtodt.bmw.at
configure.bmw.com
fb.bmw.at
www.bmw.de
configure.bmw.com
cd1-eu.chargebee.com
content.bmw.at
forms.bmw.at
cd1.chargebee.com
ecom2.bmw.at
con.api.mini
www.bmw.de
content.bmw.at
configure.bmw.com
www.bmw-int4.com
newsletter.bmw.at
www.auer.bmw.at
bmw-kneidinger-haslach.at
www.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.at
formsolution.bmw.at
con.api.mini
mini-denzel.at
www.bmw.de
mail.harmtodt.bmw.at
www.bmw.de
eu12-1.cdn.salesforce-communities.com
content.www.bmw.at
meinfs.bmw.de
bmw-gady-graz-lieboch.at
content.www.bmw.at
cd1-eu.chargebee.com
con.api.mini
www.bmw.de
store.bmw.at
eu12-1.cdn.salesforce-communities.com
partner-prime.bmw.at
www.bmw.de
bmw-ho-sites.bmw.at
bierbaum-motorrad.bmw.at
www.bmw.de
con.api.mini
cd1-eu.chargebee.com
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
cd1-eu.chargebee.com
www-origin.bmw-prod3.com
www.bmw.de
con.api.mini
newsletter.mini.at
www.bmw.at
mail.bierbaumbd.bmw.at
formhub.bmw.at
configure.bmw.com
mini-denzel.at
tracking.bmw.at
www.bmw.at
formhub.bmw.at
www.bmw.de
www-origin-proda2.bmw.com
efinance-t.bmw.at
mail.knoebl.bmw.at
bierbaum-motorrad.bmw.at
newsletter.mini.at
bmw-partner.bmw.at
tracking-dev.bmw.at
bmw-ho-sites.bmw.at
www-origin-proda2.bmw.com
www.bmwgroup.com
configure.bmw.com
tracking.bmw.at
www-origin.bmw-prod3.com
www.bmw.de
newsletter.bmw.at
bmw-partner.bmw.at
www.bmw.at
bmw-kneidinger-haslach.at
tracking.bmw.at
webmail.reichhart.bmw.at
www.bmw.at
configure.bmw.com
eu12-1.cdn.salesforce-communities.com
meinfs.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.de
mail.knoebl.bmw.at
eu12-1.cdn.salesforce-communities.com
nextcloud.knoebl.bmw.at
www-origin-proda2.bmw.com
www.bmw.de
fb.bmw.at
www.bmw.de
bmw-partner.bmw.at
cd1-eu.chargebee.com
content.bmw.at
eu12-1.cdn.salesforce-communities.com
con.api.mini
mail.harmtodt.bmw.at
configure.bmw.com
fb.bmw.at
www.bmw.de
configure.bmw.com
cd1-eu.chargebee.com
content.bmw.at
forms.bmw.at
cd1.chargebee.com
ecom2.bmw.at
con.api.mini
www.bmw.de
content.bmw.at
configure.bmw.com
www.bmw-int4.com
newsletter.bmw.at
www.auer.bmw.at
bmw-kneidinger-haslach.at
www.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.at
formsolution.bmw.at
con.api.mini
mini-denzel.at
www.bmw.de
mail.harmtodt.bmw.at
www.bmw.de
eu12-1.cdn.salesforce-communities.com
content.www.bmw.at
meinfs.bmw.de
bmw-gady-graz-lieboch.at
content.www.bmw.at
cd1-eu.chargebee.com
con.api.mini
www.bmw.de
store.bmw.at
eu12-1.cdn.salesforce-communities.com
partner-prime.bmw.at
www.bmw.de
bmw-ho-sites.bmw.at
bierbaum-motorrad.bmw.at
www.bmw.de
con.api.mini
cd1-eu.chargebee.com
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
cd1-eu.chargebee.com
www-origin.bmw-prod3.com
www.bmw.de
con.api.mini
newsletter.mini.at
www.bmw.at
mail.bierbaumbd.bmw.at
formhub.bmw.at
configure.bmw.com
mini-denzel.at
tracking.bmw.at
www.bmw.at
formhub.bmw.at
www.bmw.de
www-origin-proda2.bmw.com
efinance-t.bmw.at
mail.knoebl.bmw.at
bierbaum-motorrad.bmw.at
newsletter.mini.at
bmw-partner.bmw.at
tracking-dev.bmw.at
bmw-ho-sites.bmw.at
www-origin-proda2.bmw.com
www.bmwgroup.com
configure.bmw.com
tracking.bmw.at
www-origin.bmw-prod3.com
www.bmw.de
newsletter.bmw.at
bmw-partner.bmw.at
www.bmw.at
bmw-kneidinger-haslach.at
tracking.bmw.at
webmail.reichhart.bmw.at
www.bmw.at
configure.bmw.com
eu12-1.cdn.salesforce-communities.com
meinfs.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.de
mail.knoebl.bmw.at
eu12-1.cdn.salesforce-communities.com
nextcloud.knoebl.bmw.at
www-origin-proda2.bmw.com
www.bmw.de
fb.bmw.at
www.bmw.de
bmw-partner.bmw.at
Certificate
The complete raw certificate details for content.bmw.at in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISA9L/4pZa4++i/53cgiDhjKl5MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMjAxMzA1MDlaFw0x OTAzMjAxMzA1MDlaMBkxFzAVBgNVBAMTDmNvbnRlbnQuYm13LmF0MIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29LWOe5t18dXTGJteHQQ3xdLt/3dGbIF nuI8JfvL5LsO2SNmsJtQ0vTB8ovI7ejdj1DkmPnSb0airrAoUcvoYyUmyzDbcDJ5 EKHF6C7l1Gx7fwGfewuq4wrmadny/0ExlRfLC2UFt87nKpWckkyxDZ4SMd97KN4z Qo/4J+eR3ewz9E9TcrX24g5ee7LTLPLVTyPn2TGyzHcTYfckyIMAPFLMXmQHjhaf Kn9YaTUK6CYTqxfzKljOxFU3f/qUsGJpoT+RmxVVZYR63Fphl0c+3DdphwCxt9k6 22QDyRbWgH69kPGAMF1UVNeRH6wQchpDVeGZFfKwzWCyuorR6n6EBwIDAQABo4IC dzCCAnMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR0IGdjH+/uVxlGBUtbmEm2BDlY DjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMC4GA1UdEQQnMCWCE2NvbnRlbnQuYm13LmFwYS5uZXSCDmNvbnRlbnQuYm13 LmF0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIE AgSB9ASB8QDvAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFn y+8xcAAABAMARzBFAiEA39+ITMn5GnWJRele0oIqPMEelrfRAC7/IiglGOHa/MgC IF4+8dOaXW7GTScw2SvWeEEd9OVGYZ1M3xJuHp61VjQ0AHUAKTxRllTIOWW6qlD8 WAfUt2+/WHopctykwwz05UVH9HgAAAFny+8v0QAABAMARjBEAiB8vh9DNhTqzvWn hjucacZba9aWFkjJKMl9DtG9b1koGAIgJa3NCMu1jwM5MUWRbrGQZudIORvILsj1 C58dJqK5l54wDQYJKoZIhvcNAQELBQADggEBAH/8r2WJgKGRQEZdyZpmD/n2nnJV TMjDh7Q5gn4XxYTLHBEdaHcFGibQjQffWK4tEX2924BBEdody+iHY8uHKKWucX5W AQAKpx79qfWn/hXk0n5Q5Gr8lx6X+9RuUI+a8niHzQlQbaQ2c7nyrLDfupV3R7mU UMSnwkMNfUcuIugcsdgK3OwntfDTh6dUqaOnuXaKKlGx2/la71nTW0gA3uTfu1UO iPzpZxBbaFCYDpPgsq8SPqc7Htw8U9FihuyVaGLMxNPNkdpkDH8OkvNYLVHAe0Uz eXUqSXcvt+guwogeL8/dIT0yZrPboWvb9Gf4nOQM2FVE436QEtb+AKK/yYk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29LWOe5t18dXTGJteHQQ 3xdLt/3dGbIFnuI8JfvL5LsO2SNmsJtQ0vTB8ovI7ejdj1DkmPnSb0airrAoUcvo YyUmyzDbcDJ5EKHF6C7l1Gx7fwGfewuq4wrmadny/0ExlRfLC2UFt87nKpWckkyx DZ4SMd97KN4zQo/4J+eR3ewz9E9TcrX24g5ee7LTLPLVTyPn2TGyzHcTYfckyIMA PFLMXmQHjhafKn9YaTUK6CYTqxfzKljOxFU3f/qUsGJpoT+RmxVVZYR63Fphl0c+ 3DdphwCxt9k622QDyRbWgH69kPGAMF1UVNeRH6wQchpDVeGZFfKwzWCyuorR6n6E BwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 333136284496255517660088237036806156888441 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-20 13:05:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-20 13:05:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'content.bmw.at' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27750156299152197950521902806211589387077660708309837305830397437558058242799017897685065353081646065386507338968650870852074361180043967191651751466086408923726807852742973282548640760740758309746539229329429850929672758240242383654880434811568710961401263161293310678764264013206618289489166013219144349773802837227308022438764394110014789294749825241937278622520510563921158116451245709269737993215085066505727962142693934363326480676081921051004862347112636061797917041408998801380255142971897672146496917923218697231664802708563096852282307861257059048481584769378274397614361628337168858991385529167245079380999 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 742067631fefee571946054b5b9849b60439580e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bmw.apa.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bmw.at' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167cbef31700000040300473045022100dfdf884cc9f91a758945e95ed2822a3cc11e96b7d1002eff22282518e1dafcc802205e3ef1d39a5d6ec64d2730d92bd678411df4e546619d4cdf126e1e9eb5563434007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167cbef2fd1000004030046304402207cbe1f433614eacef5a7863b9c69c65b6bd6961648c928c97d0ed1bd6f592818022025adcd08cbb58f03393145916eb19066e748391bc82ec8f50b9f1d26a2b9979e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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