bscw.ips.biba.uni-bremen.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:10:e7:f6:0e:f8:ff:64:a7:1d:05:72:6c:14:5b:69:a9:d1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bscw.ips.biba.uni-bremen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:10:e7:f6:0e:f8:ff:64:a7:1d:05:72:6c:14:5b:69:a9:d1
Serial Number (int): 267089704941750629603440986985751284132305
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e4:67:fe:f3:ef:b9:34:d1:80:54:46:a6:e7:d9:49:6d:49:8e:e6:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 33:73:49:a2:07:1e:2e:63:cc:54:e9:3b:a1:af:c4:0c:5b:e4:cd:a9
Fingerprint (sha256): 05:23:9c:e4:c1:6e:54:5c:11:1f:b8:dc:5a:7b:30:8f:14:2d:01:5b:16:64:60:ee:7d:1a:72:02:12:99:4a:b9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bscw.ips.biba.uni-bremen.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bscw.ips.biba.uni-bremen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bscw.ips.biba.uni-bremen.de

Other certificates including the domain name uni-bremen.de

(limited to 100 certificates)
cama.uni-bremen.de
www.zrf.uni-bremen.de
www.zkpr.uni-bremen.de
psychstat.uni-bremen.de
elearning.uni-bremen.de
www.igmr.uni-bremen.de
www.tdv.uni-bremen.de
www.agcom.uni-bremen.de
www.iaas.uni-bremen.de
www.rackstation.ant.uni-bremen.de
nagios.ref54.uni-bremen.de
jitsi.vm.uni-bremen.de
www2.iniis-neu.uni-bremen.de
agim.uni-bremen.de
www.mm2014.uni-bremen.de
mail.biba.uni-bremen.de
www.sfb597b1.uni-bremen.de
www.psychologie.uni-bremen.de
www.biba.uni-bremen.de
www.informatik.uni-bremen.de
claudialubert.de
chisame.informatik.uni-bremen.de
www.isdmm15.uni-bremen.de
www.fb8.arcgisserver.uni-bremen.de
www.vfwf.uni-bremen.de
www.soziologie.uni-bremen.de
ai-comm.informatik.uni-bremen.de
www.iuv.uni-bremen.de
ctf.onoc.eu
tc-http3.testcenter.zmml.uni-bremen.de
toychest.ai.uni-bremen.de
nagios.informatik.uni-bremen.de
va-web.zmml.uni-bremen.de
ident.uni-bremen.de
www.am-course.uni-bremen.de
www.bccms.uni-bremen.de
www.wl.uni-bremen.de
soft.zfn.uni-bremen.de
crm.akademie.uni-bremen.de
www.zait.uni-bremen.de
www.infotag.uni-bremen.de
ease.informatik.uni-bremen.de
www.pflegechancen.uni-bremen.de
jupyter.zmml.uni-bremen.de
obrezkov.informatik.uni-bremen.de
www2.ew-lehramt.uni-bremen.de
gitlab.suub.uni-bremen.de
www.lpka.uni-bremen.de
litmus.informatik.uni-bremen.de
www.regionalentwicklung.uni-bremen.de
www.politikdidaktik.uni-bremen.de
www.celina.uni-bremen.de
bscw.ips.biba.uni-bremen.de
www.ingenieurinnen-sommeruni.uni-bremen.de
www.verdi.uni-bremen.de
www.deutschlandstudien.uni-bremen.de
www.wiwiselbsttest.uni-bremen.de
klima.uni-bremen.de
kipos.informatik.uni-bremen.de
scheinwerfer.uni-bremen.de
cast.zmml.uni-bremen.de
egroupware.zarm.uni-bremen.de
guest.wlan.uni-bremen.de
scheinwerfer.uni-bremen.de
mailman.zarm.uni-bremen.de
www.vivatop.de
www.ecophysiology.uni-bremen.de
gitlab.zarm.uni-bremen.de
tc-ueb2.testcenter.zmml.uni-bremen.de
oae.zmml.uni-bremen.de
umfrage.ips.biba.uni-bremen.de
www.soziologie.uni-bremen.de
www.spruehkompaktieren.uni-bremen.de
ikap-web.biba.uni-bremen.de
moin-test.uni-bremen.de
www.erasmus-initiative.uni-bremen.de
contradictionstudies.uni-bremen.de
www.soziologieselbsttest.uni-bremen.de
ines.zfn.uni-bremen.de
www.nwt18.uni-bremen.de
www.wikifg22.uni-bremen.de
rocketchat.zarm.uni-bremen.de
www.fpb.uni-bremen.de
www2.fb6.uni-bremen.de
srv-jr-www.vw.uni-bremen.de
www.europeanstudies.uni-bremen.de
transair.informatik.uni-bremen.de
www.hospo.uni-bremen.de
gerhard.meyer.uni-bremen.de
bbb-1.elearning.uni-bremen.de
ldap-cart.informatik.uni-bremen.de
www.crie-umfrage.uni-bremen.de
www.kinder-uni.uni-bremen.de
www2.fb8.uni-bremen.de
gitlab.csl.uni-bremen.de
dmis.math.uni-bremen.de
toychest.ai.uni-bremen.de
cslog-nas01.informatik.uni-bremen.de
mailman.zfn.uni-bremen.de
www.diagnostik.uni-bremen.de

Certificate

The complete raw certificate details for bscw.ips.biba.uni-bremen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGbjCCBVagAwIBAgISAxDn9g74/2SnHQVybBRbaanRMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTkxMDIwMTVaFw0y
MDAxMTcxMDIwMTVaMCYxJDAiBgNVBAMTG2JzY3cuaXBzLmJpYmEudW5pLWJyZW1l
bi5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMLfqwc33xi26IG3
YfwRr0GvYiImzHNVLTVQkPkx+iIqAEAMtK/AoAbrOv+Fygu3qDCZw3CkvaiTGFPu
ccTmUPr0wohy3xcCEdZHQkenTHd2eyITsYpeSY0VpUriq72HsEi8GEHnts/XFa8I
kyQsV5XBekUzOWzEE1oUL/H9ftMgtgME1aOgAc7vDnBpR4uldg4pU2MqymycSpUr
95RydQdvoKS7JoeDc623utly0ywyYjcIPfQ+VESfykRVyXyo0cUJa2ZEWnzHrssF
MqpHSRpzzIEnuuC/KdupP9P+IIUU+HAzp/0Ddew3xmA3pF4nn+VdJAzVKKybvpmo
tdxdZNd7uhk18W+gOhUfS0KkSzBIp5u3BpmG7c10H6AShLhCFy4w3c3eCE2zHC6b
IZ87eOFYDLTEnbwPRbKKB+Gs+90hqd7EFe2kxrZ1Uu53kjXtzsasV2HSQ2EsHErJ
aGERAqF3Doy0dEyhBeMz5F/+WRo7p/OqkbH7Mp1PGisJ6NbfWvV+et4Q7TjnK/JF
f53OhNyBMF7axpFvkea87Xej/Ik07X38Isd7FoVqK2BWKrpJrbLZcW4wiwKk5DcO
EuMTxDswiGIBjZmAj/AvrjXk1rcS0ol0R1/czZBriul6ea1eCdqXdHI5bBmqXKix
0PfcODkorxxTKiSCOEn/npTohYXvAgMBAAGjggJwMIICbDAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFORn/vPvuTTRgFRGpufZSW1JjuaoMB8GA1UdIwQYMBaAFKhKamME
fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0
cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0
cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wJgYDVR0RBB8wHYIbYnNj
dy5pcHMuYmliYS51bmktYnJlbWVuLmRlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG
CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcA8JWkWfIA0YJAEC0vk4iO
rUv+HUfjmeHQNKawqKqOsnMAAAFt478bHgAABAMASDBGAiEAwu0zdbxpgrnmCMQ8
yVcse9BNM5fzEUIT4snlQNVbTiICIQDxQQxXToxdiDpk6PHc+QJHVurfxc1cDmJR
tN3YbithMQB1ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABbeO/
GxYAAAQDAEYwRAIgJfLlz5V7Xh3EwSvIjs/Hh+y89+qw0+9iPjwNNRfuA/ICIBM3
MGOokFOgAMgmFK+1NBOKjF1oGJsiDSnnTkRBl8FqMA0GCSqGSIb3DQEBCwUAA4IB
AQBHzShWQ3/nxj99MM3eWx7zdzeTmknoNTPfUebcQoL/GixuGPwqzEnY2t5Irl/i
BWrgabcKrK590HGYyOqUBQFdbK8+BzB30b6igHQNkuda+ImSpc2fvd2Du7JzpHRD
it5EZ+tHpLh63CJpGDROgQW5DX49tuux+Esu3o6wip/l3fEBiU9n7uCWdJWjhZmE
xlNraOiSRFZ53H8O66ZyP5Q3nXN28Whv5pByy8bJGzm6/FGbafntXV/6lIt0mdIW
wsR7KsHqjwy6tDNxFYLQj5v+Xf+H+xlgrcF217uR830n5uuUJo9XzsEmHUfgPr13
9TenvujP1VeQOO3WWMpI0qlN
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267089704941750629603440986985751284132305
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-19 10:20:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 10:20:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bscw.ips.biba.uni-bremen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 795015348224248672760868527088455445453606814688859116191009063699726264561668192540924260165224663645018330679685986972630814553124740453861451133571963191223787010584734101861166745295078266894258219020315081408233730602973766578116010451221174290781960201963420928120051490523781867673183060131295784573911232650721978774454934351149327715347828145292933184455878272805709907638040458832212532793330964121773070156535521127429354293219267538637825795169732139387443860891702350304114813964205920127439812299025534319669855712718929087092632300536518158647666690716518047513684218765515450819311708006340487575074213564017814278092144058399464445902449206456165594220086833081869562828474979986653891214519748882193525007152446091963805257138307532703141970148660607431428012748456886460939127035162431193574377987634045877071172146658132569245744114387857329172549849404881630128823729590917800164036876445649535082921570391079433478493296350403215876816225951990476517104604592828197301475068439749053360126819578743089683344484533343348227693269869121251005129290205016206130789639275019433985669314204260656241172654062794176668307479352835477166636249429038920227414208425385577032455304688050259412539717935471993893012473327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e467fef3efb934d1805446a6e7d9496d498ee6a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bscw.ips.biba.uni-bremen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016de3bf1b1e0000040300483046022100c2ed3375bc6982b9e608c43cc9572c7bd04d3397f3114213e2c9e540d55b4e22022100f1410c574e8c5d883a64e8f1dcf9024756eadfc5cd5c0e6251b4ddd86e2b6131007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016de3bf1b160000040300463044022025f2e5cf957b5e1dc4c12bc88ecfc787ecbcf7eab0d3ef623e3c0d3517ee03f2022013373063a89053a000c82614afb534138a8c5d68189b220d29e74e444197c16a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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