mail.stura.uni-leipzig.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:10:52:43:08:32:ee:fe:b6:c8:50:7f:45:01:da:f5:a9:81 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.stura.uni-leipzig.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:10:52:43:08:32:ee:fe:b6:c8:50:7f:45:01:da:f5:a9:81
Serial Number (int): 266890720411854290607903007589862091368833
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:ea:b7:69:b5:67:81:6b:8a:8d:7b:b0:1f:03:fb:80:7a:6d:8e:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 59:2a:54:e5:db:24:83:b8:03:99:50:1a:c0:2c:69:05:ca:20:ed:78
Fingerprint (sha256): 02:ed:d7:da:76:3c:60:c8:93:df:9c:e1:2f:42:9b:d3:e2:44:fb:77:bf:5c:b8:9f:d2:d7:0a:79:ab:54:fe:cf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mail.stura.uni-leipzig.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.stura.uni-leipzig.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.stura.uni-leipzig.de

Other certificates including the domain name uni-leipzig.de

(limited to 100 certificates)
misun102.mathematik.uni-leipzig.de
vobtest.uni-leipzig.de
vmcollection.rz.uni-leipzig.de
umfrage.uni-leipzig.de
folio-demo.ub.uni-leipzig.de
www.uni-leipzig.de
lldevelopment.wifa.uni-leipzig.de
exchange.ads.uni-leipzig.de
project.medizin.uni-leipzig.de
sport.uni-leipzig.de
urzdomscom01.dom.uni-leipzig.de
v1.rz.uni-leipzig.de
budgeford.imise.uni-leipzig.de
ldap.ad.uni-leipzig.de
foblive.uni-leipzig.de
ldap2.informatik.uni-leipzig.de
smee.life.uni-leipzig.de
urzubvdicon01.dom.uni-leipzig.de
katalog.ub.uni-leipzig.de
hobbitdata.informatik.uni-leipzig.de
urzaddc1.ad.uni-leipzig.de
bbb.sc.uni-leipzig.de
ub.uni-leipzig.de
pcai017.informatik.uni-leipzig.de
www.uni-leipzig.de
mail.stura.uni-leipzig.de
vmtoxiportal.rz.uni-leipzig.de
urzsfboos.uni-leipzig.de
www.uniklinikum-leipzig.de
nagios.rz.uni-leipzig.de
rzbupvss.dom.uni-leipzig.de
clarinws.informatik.uni-leipzig.de
olat.informatik.uni-leipzig.de
lyncpool.dom.uni-leipzig.de
urzdomrdgw01.dom.uni-leipzig.de
rstudio02.sc.uni-leipzig.de
vmcollection.rz.uni-leipzig.de
srvterminal06.swl.uni-leipzig.de
vdi.wifa.uni-leipzig.de
home.uni-leipzig.de
zugangsproxy.ub.uni-leipzig.de
bsvgit.informatik.uni-leipzig.de
lldevelopment.wifa.uni-leipzig.de
rvs.informatik.uni-leipzig.de
www.uniklinikum-leipzig.de
videocampustest.rz.uni-leipzig.de
lldevelopment.wifa.uni-leipzig.de
ucanmdm.vetmed.uni-leipzig.de
www.uni-leipzig.de
v2.rz.uni-leipzig.de
katalog.ub.uni-leipzig.de
www.uni-leipzig.de
vdi02.wifa.uni-leipzig.de
nikolaus.imise.uni-leipzig.de
pfadi.wifa.uni-leipzig.de
vmtima2.rz.uni-leipzig.de
zvappdam.dom.uni-leipzig.de
kait.health
lex.sozphil.uni-leipzig.de
vpn.medizin.uni-leipzig.de
home.uni-leipzig.de
lb.life.uni-leipzig.de
milab7.mathematik.uni-leipzig.de
kommunikation.uni-leipzig.de
auth.life.uni-leipzig.de
bierfass.bioinf.uni-leipzig.de
exchange.bach-leipzig.de
osa.wifa.uni-leipzig.de
home.uni-leipzig.de
urzdomdc23.dom.uni-leipzig.de
ilias.wifa.uni-leipzig.de
zugangsproxy.ub.uni-leipzig.de
www.hds.uni-leipzig.de
mail.stura.uni-leipzig.de
iis10.imise.uni-leipzig.de
vcs51.wifa.uni-leipzig.de
pvz.uni-leipzig.de
www.uni-leipzig.de
leia.informatik.uni-leipzig.de
domdc1.idmdom.rz.intern.uni-leipzig.de
bachweb3.rz.uni-leipzig.de
alpha.ub.uni-leipzig.de
izbifs3.izbi.uni-leipzig.de
mail.stura.uni-leipzig.de
moodletest.rz.uni-leipzig.de
portal2.medizin.uni-leipzig.de
zvts01.dom.uni-leipzig.de
register.sc.uni-leipzig.de
lldevelopment.wifa.uni-leipzig.de
www.uni-leipzig.de
home.uni-leipzig.de
awts.intern.uni-leipzig.de
lha-dev.imise.uni-leipzig.de
studserv.uni-leipzig.de
qnapnas4.wifa.intern.uni-leipzig.de
clarinoai.informatik.uni-leipzig.de
mail.stura.uni-leipzig.de
intern.finc.info
cloud.kleintierklinik.uni-leipzig.de
fob.uni-leipzig.de

Certificate

The complete raw certificate details for mail.stura.uni-leipzig.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHHTCCBgWgAwIBAgISAxBSQwgy7v62yFB/RQHa9amBMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MTYyMzMxMDVaFw0x
ODEyMTUyMzMxMDVaMCQxIjAgBgNVBAMTGW1haWwuc3R1cmEudW5pLWxlaXB6aWcu
ZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCXu+KV4C5Fb18vNA52
xxiTr1eDn52iAbgtLwr9YgcR2mxKkc67GRCHv87D9n7ehzSloGFtF39nTuFK0ENI
ci5Cj2xg6jjSuXTIWnoSPwUFj4b8qvV33t5QgXnETe5lmORySmgiCPVqNLdISduF
4NBRLvzVKFYQzqBqXkPgenSc50F6zt4HQV8i4tqTFqkH8mzKRnYtzMTQNu8ludPM
WxwexfkTuu6mHnlXXHhMD7gh0aPYHilTMptL3zJsj/ZK3xFT78VLF78/EhfP3s8m
JIcgj7pdQAQQUKb/KJ+x6f4rIwX4ebWze+G17gzetUWir3TQBm4J5iaDusGW1MM0
WVMiICZ86fTdIdn1wD2bFdBjSNIgQoRMzpxD1GfVXKlQpHiz+glDixMMxiQn2nkf
UvqL6qBibK3cwvhAWkpC7WpoIMAy1+GevhW8fQdR6/GK8WgU0cAisgzBmJbaCztB
QMjqSDvj4NwgCSvY3+nJ5L7rzy7GT5gyEIwTar9lyjyfswb659XgArWaQkMGsMGV
Exg8tjfJ7iWBaRCgo++0W79FFuTLIZvL5QWN7CKif5jqUkIhXTcwoS49hIFRtzVR
cR53vj9KHwL7Hxi2fUoYIvErFLaZvsf+qTD32KOwCERU7WgTMSBMAH3Mam/pUXzP
S2t2CMHndcf4SaPNPVrIjl157QIDAQABo4IDITCCAx0wDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBQk6rdptWeBa4qNe7AfA/uAem2O9zAfBgNVHSMEGDAWgBSoSmpjBH3d
uubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6
Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6
Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCQGA1UdEQQdMBuCGW1haWwu
c3R1cmEudW5pLWxlaXB6aWcuZGUwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYG
CysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy
eXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBv
bmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBp
biBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBh
dCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQQGCisGAQQB
1nkCBAIEgfUEgfIA8AB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4
AAABZeTwG2oAAAQDAEcwRQIhAJM/nhcxaZrOz75N+HhJ/ihThTqC8KVJQhYBNMB9
ZpnpAiBAS/wzozTSvFocHv1S/UHfmiU4enF4GdXMs+QUKVw+RQB2AMEWSuCnctLU
OS3ICsEHcNTwxJvemRpIQMH6B1Fk9jNgAAABZeTwHUwAAAQDAEcwRQIhAPJppQlY
oMVIHoJ6oo3F7EIlGM87wN9X9y8LThePwpgoAiA+JYiNT22vHS7OKZli/c7iktIU
IivUrjOMeRNtKJsf+jANBgkqhkiG9w0BAQsFAAOCAQEAViZFC5uaT82bOw8MEZsi
KxY4LaTKMui8Iqt4suyuZgVSZdrIWGCIbOC2HhB7WTfgWLm9B443rA4XtHrypcbg
zArOx1LHB265WX7Z3NMrBryWlLgPcQINjYfwyu68nC7elAEp9ju2qrmXEdKGCYCF
Am4kVJDjDd/71Eh6Sv1E9MpJr3Qyh7krvJAcq4wQRTXiAXXqDhUFnSIT3Z63dDPD
3L9H6zwOT90MUh2kvW8zBt+9+uxq8WdkI1eqnera9A3+ZOojcTpmaZJojnpF7Nf7
NUBra50mt7wxRZiUJZ03WBrgOerlgufVuKn/MAzTHouKmt0mHN0bYWXoFG5Sxr27
zg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266890720411854290607903007589862091368833
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-16 23:31:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-15 23:31:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.stura.uni-leipzig.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 619020411815279225836376936147853666544642499539280486228880391118375852236625703031266383991863058207561535566504118683475935206334464804672097574636575592327272210979547228317742922366034088733541090006773177888019883187170323409439077650528569602942748603359517012146515383974673771886039476453666650587106418945057720456217547564100636343952262229240099148694436128253944865840769262062999769326624693048655503887910716673795781702107881559518699325657897345369432348654435145792473400442941488437050793383999046800368609059677410242692029313549670384223653507693397725609173690750574417883295565048599775844563871773689459553285882538285807245010888703489097977394161714640905786932083215031273035781111863427173049164795908887126079050631132751040211296854645920143813499908108158232460098977789172672116429824288696285151361696550564115336633481903872014530748410670219052897997668877449270840146018843792013246921966712390590001110989890216387697070604567103975691443208198494798461501939281609229842208873770487898323623892451031914933347294385439097165431275330403132440373420768481712554858606857317565743857769652928636275906885187423070670704567479100539928377764628982096842550623997503976121156418892088530022124321261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24eab769b567816b8a8d7bb01f03fb807a6d8ef7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.stura.uni-leipzig.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165e4f01b6a0000040300473045022100933f9e1731699acecfbe4df87849fe2853853a82f0a54942160134c07d6699e90220404bfc33a334d2bc5a1c1efd52fd41df9a25387a717819d5ccb3e414295c3e45007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165e4f01d4c0000040300473045022100f269a50958a0c5481e827aa28dc5ec422518cf3bc0df57f72f0b4e178fc2982802203e25888d4f6daf1d2ece299962fdcee292d214222bd4ae338c79136d289b1ffa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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