vpro0164.proserver.punkt.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ea:c3:72:dc:f2:09:a4:af:e3:cb:30:03:c6:10:51:ad:83 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vpro0164.proserver.punkt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:c3:72:dc:f2:09:a4:af:e3:cb:30:03:c6:10:51:ad:83
Serial Number (int): 341222727517106584547225709984261814201731
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7a:1c:d6:fe:29:ab:38:31:94:72:a6:93:aa:aa:3a:66:e7:e1:89:05
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8a:0f:24:31:65:d2:a6:18:7d:79:5d:73:cc:3a:76:fc:71:3e:04:35
Fingerprint (sha256): 01:dc:2e:45:7e:01:04:5f:23:2c:a0:a0:6c:89:4c:35:79:f9:9f:a2:f4:8c:54:53:a7:57:90:93:4e:b8:ce:49

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate vpro0164.proserver.punkt.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpro0164.proserver.punkt.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpro0164.proserver.punkt.de

Other certificates including the domain name punkt.de

(limited to 100 certificates)
vpro1127.proserver.punkt.de
vpro0128.proserver.punkt.de
vpro1563.proserver.punkt.de
vpro0037.proserver.punkt.de
vpro0063.proserver.punkt.de
vpro0171.proserver.punkt.de
vpro1125.proserver.punkt.de
vpro1506.proserver.punkt.de
hs15.hosting.punkt.de
cid3465j1450.hs15.hosting.punkt.de
vpro0404.proserver.punkt.de
vpro1824.proserver.punkt.de
vpro1510.proserver.punkt.de
cid1531e1485.hd71.hosting.punkt.de
cid3252p1515.hd80.hosting.punkt.de
vpro0257.proserver.punkt.de
vpro1029.proserver.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro1011.proserver.punkt.de
vpro0027.proserver.punkt.de
cid3330u974.hd43.hosting.punkt.de
vpro0121.proserver.punkt.de
vpro1103.proserver.punkt.de
vpro0164.proserver.punkt.de
chat-madein.punkt.de
vpro1035.proserver.punkt.de
cid453r974.hd43.hosting.punkt.de
pl001.proserver.punkt.de
vpro0025.proserver.punkt.de
vpro0131.proserver.punkt.de
cid3212q1338.hd106.hosting.punkt.de
vpro0155.proserver.punkt.de
vpro1093.proserver.punkt.de
cid3341z974.hd43.hosting.punkt.de
hs13.hosting.punkt.de
vpro1146.proserver.punkt.de
cid532i974.hd43.hosting.punkt.de
vpro0031.proserver.punkt.de
vpro1020.proserver.punkt.de
vpro0043.proserver.punkt.de
cid1531e1485.hd71.hosting.punkt.de
vpro0202.proserver.punkt.de
vpro0022.proserver.punkt.de
cid2983x974.hd43.hosting.punkt.de
cid305x974.hd43.hosting.punkt.de
cid305x974.hd43.hosting.punkt.de
vpro0085.proserver.punkt.de
vpro1033.proserver.punkt.de
hs14.hosting.punkt.de
cid649v974.hd43.hosting.punkt.de
vpro0112.proserver.punkt.de
vpro0616.proserver.punkt.de
cid735b974.hd43.hosting.punkt.de
vpro1035.proserver.punkt.de
vpro0155.proserver.punkt.de
vpro0321.proserver.punkt.de
vpro0031.proserver.punkt.de
cid2612i974.hd43.hosting.punkt.de
vpro0335.proserver.punkt.de
vpro1523.proserver.punkt.de
vpro0326.proserver.punkt.de
nphi.hs14.hosting.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro0163.proserver.punkt.de
cid3206a1450.hs15.hosting.punkt.de
vpro0036.proserver.punkt.de
hs15.hosting.punkt.de
vpro1559.proserver.punkt.de
vpro0023.proserver.punkt.de
cid3412v1219.hd116.hosting.punkt.de
vpro0326.proserver.punkt.de
piwik.vpro0050.proserver.punkt.de
cid3243x974.hd43.hosting.punkt.de
piwik.vpro0050.proserver.punkt.de
vpro0243.proserver.punkt.de
fusionpen.punkt.de
vpro0077.proserver.punkt.de
vpro1075.proserver.punkt.de
vpro1079.proserver.punkt.de
vpro0042.proserver.punkt.de
vpro0057.proserver.punkt.de
vpro1800.proserver.punkt.de
vpro0036.proserver.punkt.de
fusionpen.punkt.de
vpro1154.proserver.punkt.de
cid2749i1219.hd116.hosting.punkt.de
vpro1066.proserver.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro1098.proserver.punkt.de
vpro0258.proserver.punkt.de
cid453r974.hd43.hosting.punkt.de
vpro1095.proserver.punkt.de
cid3354u1450.hs15.hosting.punkt.de
vpro0047.proserver.punkt.de
vpro1150.proserver.punkt.de
vpro1013.proserver.punkt.de
vpro1063.proserver.punkt.de
vpro1117.proserver.punkt.de
vpro0033.proserver.punkt.de
cid3236q1450.hs15.hosting.punkt.de

Certificate

The complete raw certificate details for vpro0164.proserver.punkt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgISA+rDctzyCaSv48swA8YQUa2DMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjMyMjMwNTBaFw0y
MDA0MjIyMjMwNTBaMCYxJDAiBgNVBAMTG3Zwcm8wMTY0LnByb3NlcnZlci5wdW5r
dC5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANzVh1hKjMmgUonY
NobiX1Mvo1OuMQ9OwJSF+Ug9R1rKf3cHpuFjDUDdwrvrfbwAqdu2/MpSi8Hnhd41
rLHM3JmAk96OA8wGr5Z41PUeEq7T5ty8N/flDXdDEa1ViiA7KHBqxV63GxuU9BbE
xKjZIW0nwyJgeuIep9hCLvb+BmlI83cF+YyixrUqeyucetgM2tLAmuvWkqYk0q76
j23oOkNQVd7h1YqSt644dNQX34iQxFvbEoVEIM0eDV8UoiBoJCR7yBcr0aI/5j/y
LfCEx8ZTGvDH5qBzVdiaEhKmuJiDvep+She+Zv6BL9CYm4+p/hTIDocD4RZWqNsN
IjJ3aCtzDUAq85E8YnOXzHaM/Dz/L9GTePs+l991kMnb/v1nf6r3Iv7OwQuGpHJR
Gc3SYDYBe5RhWGL+w9QOGTEGFEokcJ3kXgSOV7c8jUcE7r2Y9UTXRTJhunHSerT7
5Hqe440qb2R/hTEyJha510J10OEOfOeTdNuAVbATrBQMzlRBZbmRuYK17AylN/Oh
Daaexyw67NPBCpqMOa8GfmUcZ6HBqRWpOZhGjkYVdMcfyCw+5BlVZl0FecpovWSo
Gsvct9xqykXgQpZYgBg+fJRLVlRwnPkLl8bCK71hdf/Cgkn9fZ1PArwSWuRz/CsC
UsuwjCSb4RNSkbHJyBQGZ0RNGvMfAgMBAAGjggJvMIICazAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFHoc1v4pqzgxlHKmk6qqOmbn4YkFMB8GA1UdIwQYMBaAFKhKamME
fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0
cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0
cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wJgYDVR0RBB8wHYIbdnBy
bzAxNjQucHJvc2VydmVyLnB1bmt0LmRlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG
CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA8JWkWfIA0YJAEC0vk4iO
rUv+HUfjmeHQNKawqKqOsnMAAAFv1L56+QAABAMARjBEAiBWpiNQRxwK7rpcrL5s
u7rh7TS1lJ+WICdg/9MAlfC6oAIgcV8+aVHQKbg0YeOBXF9QbzI4OO/fnd6rM8Fw
NZLpI3kAdgAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW/Uvnsj
AAAEAwBHMEUCIQCvFODvZLr+wQ+mems8NjIIhlTNUitJMpUFlNr9YUnQ1AIgAbUs
H4L0u8oWJLhUjNx/ZZT2IGmogj3r3F1IBjBKoXYwDQYJKoZIhvcNAQELBQADggEB
AC8CNztNIdjgJFClP2drFbZzbBL81XAME1W7EMaUXf3J4LWaA9Myq1GRX1kPUkLE
UNo6kbw1BF6tHoISU0Q61Bl2Abp33S359C3IooKpHonNvCZn4oW46E1ZD+P10wGv
QJ07hpmLU8NokMarBndjIkdwD650KUyQZ651xa6kdxL3zSExE+48SxRjwAZyVM3G
jFVivA2P8Z4AtUQ+7SYIhs2DxyxaUdzj/+YENU0HclHBB9+qt9J18ZXfot9En5hm
+VbVBqt13OsGtnyKp5Zmu6rZRH41J/orwVzS54YZbg/nUYBIe/cB7GG5lY8RbaZk
Zi64V6qKKxXlAv7ypE9tofY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341222727517106584547225709984261814201731
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 22:30:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-22 22:30:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpro0164.proserver.punkt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 900924511595113344937271915410485291208874005640298051005004216926297324942447168225426890078338729769003135613685230823720527755577257075799291310091079128472446237376871914386341454606818735090575422264266566905269814013309492083140671698456970235549150840050364561241915215215985918079992030603172599254001217897159418310324045331512381427917894024499599625853022079106940828827565581572555213280126264446295606637511113317139462343609130971374380074794384576534567600618881227789523478550660722133422789793898121639676913272255705910770737392250810456676332872848984322406294805174719411605651550536930131315381349768081075568575321590102134875710891841569489703757195978098123794377842800305491065804192188613761583256258496981867316496937268061692129708938098367001721206958034530605487099929311378768343385541617327880595074663149587949676807549425094141244852525579588354577857821375522287085593104935031419119146435761344937760554132877736991654250732598926519049191083468060129574764474250608433314529326098418726203510730570107842634534541730547928703146525225026278235115092837149542212438473249601940975202198907380376952906094946637100312449828547704566165895520306576663702882813970377422373764074519637372526424421151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a1cd6fe29ab38319472a693aaaa3a66e7e18905
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpro0164.proserver.punkt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fd4be7af90000040300463044022056a62350471c0aeeba5cacbe6cbbbae1ed34b5949f96202760ffd30095f0baa00220715f3e6951d029b83461e3815c5f506f323838efdf9ddeab33c1703592e9237900760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fd4be7b230000040300473045022100af14e0ef64bafec10fa67a6b3c3632088654cd522b4932950594dafd6149d0d4022001b52c1f82f4bbca1624b8548cdc7f6594f62069a8823debdc5d4806304aa176
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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