content.www.bmw.at
Issued by R3
About this certificate
This digital certificate with serial number 03:0f:28:90:c3:96:23:0a:7c:6d:73:fe:27:e3:89:09:95:21 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=content.www.bmw.at
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:0f:28:90:c3:96:23:0a:7c:6d:73:fe:27:e3:89:09:95:21Serial Number (int): 266495014076638784283326801967086842778913
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9b:66:76:3e:25:cb:8e:86:f3:5d:11:48:0c:7d:4e:05:40:f5:6c:cf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 3b:7c:48:15:1b:d0:a5:30:ef:fc:53:c9:c2:b6:9e:51:ed:ee:67:65
Fingerprint (sha256): 07:1d:78:c3:29:3c:ce:39:2b:be:d6:89:53:b2:a6:8c:8a:f3:03:7f:10:3e:d8:06:70:ec:40:0f:e5:08:d0:4f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate content.www.bmw.at
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for content.www.bmw.at
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
content.www.bmw.at
Other certificates including the domain name bmw.at
(limited to 100 certificates)
meinfs.bmw.de
cd1-eu.chargebee.com
content.bmw.at
eu12-1.cdn.salesforce-communities.com
con.api.mini
mail.harmtodt.bmw.at
configure.bmw.com
fb.bmw.at
www.bmw.de
configure.bmw.com
cd1-eu.chargebee.com
content.bmw.at
forms.bmw.at
cd1.chargebee.com
ecom2.bmw.at
con.api.mini
www.bmw.de
content.bmw.at
configure.bmw.com
www.bmw-int4.com
newsletter.bmw.at
www.auer.bmw.at
bmw-kneidinger-haslach.at
www.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.at
formsolution.bmw.at
con.api.mini
mini-denzel.at
www.bmw.de
mail.harmtodt.bmw.at
www.bmw.de
eu12-1.cdn.salesforce-communities.com
content.www.bmw.at
meinfs.bmw.de
bmw-gady-graz-lieboch.at
content.www.bmw.at
cd1-eu.chargebee.com
con.api.mini
www.bmw.de
store.bmw.at
eu12-1.cdn.salesforce-communities.com
partner-prime.bmw.at
www.bmw.de
bmw-ho-sites.bmw.at
bierbaum-motorrad.bmw.at
www.bmw.de
con.api.mini
cd1-eu.chargebee.com
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
cd1-eu.chargebee.com
www-origin.bmw-prod3.com
www.bmw.de
con.api.mini
newsletter.mini.at
www.bmw.at
mail.bierbaumbd.bmw.at
formhub.bmw.at
configure.bmw.com
mini-denzel.at
tracking.bmw.at
www.bmw.at
formhub.bmw.at
www.bmw.de
www-origin-proda2.bmw.com
efinance-t.bmw.at
mail.knoebl.bmw.at
bierbaum-motorrad.bmw.at
newsletter.mini.at
bmw-partner.bmw.at
tracking-dev.bmw.at
bmw-ho-sites.bmw.at
www-origin-proda2.bmw.com
www.bmwgroup.com
configure.bmw.com
tracking.bmw.at
www-origin.bmw-prod3.com
www.bmw.de
newsletter.bmw.at
bmw-partner.bmw.at
www.bmw.at
bmw-kneidinger-haslach.at
tracking.bmw.at
webmail.reichhart.bmw.at
www.bmw.at
configure.bmw.com
eu12-1.cdn.salesforce-communities.com
meinfs.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.de
mail.knoebl.bmw.at
eu12-1.cdn.salesforce-communities.com
nextcloud.knoebl.bmw.at
www-origin-proda2.bmw.com
www.bmw.de
fb.bmw.at
www.bmw.de
bmw-partner.bmw.at
cd1-eu.chargebee.com
content.bmw.at
eu12-1.cdn.salesforce-communities.com
con.api.mini
mail.harmtodt.bmw.at
configure.bmw.com
fb.bmw.at
www.bmw.de
configure.bmw.com
cd1-eu.chargebee.com
content.bmw.at
forms.bmw.at
cd1.chargebee.com
ecom2.bmw.at
con.api.mini
www.bmw.de
content.bmw.at
configure.bmw.com
www.bmw-int4.com
newsletter.bmw.at
www.auer.bmw.at
bmw-kneidinger-haslach.at
www.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.at
formsolution.bmw.at
con.api.mini
mini-denzel.at
www.bmw.de
mail.harmtodt.bmw.at
www.bmw.de
eu12-1.cdn.salesforce-communities.com
content.www.bmw.at
meinfs.bmw.de
bmw-gady-graz-lieboch.at
content.www.bmw.at
cd1-eu.chargebee.com
con.api.mini
www.bmw.de
store.bmw.at
eu12-1.cdn.salesforce-communities.com
partner-prime.bmw.at
www.bmw.de
bmw-ho-sites.bmw.at
bierbaum-motorrad.bmw.at
www.bmw.de
con.api.mini
cd1-eu.chargebee.com
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
cd1-eu.chargebee.com
www-origin.bmw-prod3.com
www.bmw.de
con.api.mini
newsletter.mini.at
www.bmw.at
mail.bierbaumbd.bmw.at
formhub.bmw.at
configure.bmw.com
mini-denzel.at
tracking.bmw.at
www.bmw.at
formhub.bmw.at
www.bmw.de
www-origin-proda2.bmw.com
efinance-t.bmw.at
mail.knoebl.bmw.at
bierbaum-motorrad.bmw.at
newsletter.mini.at
bmw-partner.bmw.at
tracking-dev.bmw.at
bmw-ho-sites.bmw.at
www-origin-proda2.bmw.com
www.bmwgroup.com
configure.bmw.com
tracking.bmw.at
www-origin.bmw-prod3.com
www.bmw.de
newsletter.bmw.at
bmw-partner.bmw.at
www.bmw.at
bmw-kneidinger-haslach.at
tracking.bmw.at
webmail.reichhart.bmw.at
www.bmw.at
configure.bmw.com
eu12-1.cdn.salesforce-communities.com
meinfs.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.de
mail.knoebl.bmw.at
eu12-1.cdn.salesforce-communities.com
nextcloud.knoebl.bmw.at
www-origin-proda2.bmw.com
www.bmw.de
fb.bmw.at
www.bmw.de
bmw-partner.bmw.at
Certificate
The complete raw certificate details for content.www.bmw.at in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAw8okMOWIwp8bXP+J+OJCZUhMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTEwMjcxMjEwMzlaFw0yMjAxMjUxMjEwMzhaMB0xGzAZBgNVBAMT EmNvbnRlbnQud3d3LmJtdy5hdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmKf3/cMDCf+Q4Y35+0E49gq96/Yt5BIYXWDD32qkLbujYdVJiYHQve41CD hvmx4rUBUyZKEG++zi11xdBrA1BsO6DIMDciLgTjgLTeYvkzIsVm1NOKCpaZ6+h2 avfsEC8KFoduWV0HnLYQNNuaLZPbxTjGyOIXXDqPiI6GnbG9ozENw0aq8bagblUI b/ToPy/Xtqu60+bqkTuBaOq3pB+jsLwUvmAhHoRX+eK1q79ZsFA/M605s7dr78Xa OzukKix/fIMvf+CzVb1XAp1xUhl8NM3zJt46dYkyQu7LJA3EBQx+d2lUQ0tuwddS nX8JyfjBrkTRSC7OWjTaLzubKikCAwEAAaOCAk0wggJJMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUm2Z2PiXLjobzXRFIDH1OBUD1bM8wHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wHQYDVR0RBBYwFIISY29udGVudC53d3cuYm13LmF0MEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcAQcjK sd8iRkoQxqE6CUKHXk4xixsD6+tLx2jwkGKWBvYAAAF8wd/DEwAABAMASDBGAiEA ljFIB6uJTDAHUj4FyB46FsJUwrcnKqigIS/GXWSrbZMCIQCAy9xr+tgstsnv2gsF Yf8UEHciJf3juDVzUCvEeeGhRAB1ACl5vvCeOTkh8FZzn2Old+W+V32cYAr4+U1d JlwlXceEAAABfMHfwykAAAQDAEYwRAIgYLTRBt4jcMlMqX/BtCgzZx0kUW3NAgim 6g0L2Ag+J94CIEMFaEMHlaj3aZnYci+l+dVGTzgiiL/ZGCmT4v4qlOVMMA0GCSqG SIb3DQEBCwUAA4IBAQC3T4ctMtdoDvnaLR4SoMsF46m+JpHuEkzUlU6Fkos4oe/8 c5adKOp7WDKebiA+NvSDBaVRDZoenJoMWLk99iHhVEuZHmztHzCDcYCVPRJ2yvpF 4SYoSy20kWKmnVw905rqgerS60QygQTu/HXQlv8QYyUF9brW5qF2FFc1QhyOCULg kUXfp85/wuDn0YvGSBujXLfKUcRqMzusAtz6SROSfGP2mhhZDbCoVbg9fIs6UVSF tbIxQgthhZ+7SjEPXY8IVRh+uMVyNkkK/5JR1c5KZxFq2RavZe2+V0QNSHLFkEwz GodWVmQ707/bSjKjZZcGDJpsqABKfN3lnRjJ+SdM -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYp/f9wwMJ/5Dhjfn7QT j2Cr3r9i3kEhhdYMPfaqQtu6Nh1UmJgdC97jUIOG+bHitQFTJkoQb77OLXXF0GsD UGw7oMgwNyIuBOOAtN5i+TMixWbU04oKlpnr6HZq9+wQLwoWh25ZXQecthA025ot k9vFOMbI4hdcOo+Ijoadsb2jMQ3DRqrxtqBuVQhv9Og/L9e2q7rT5uqRO4Fo6rek H6OwvBS+YCEehFf54rWrv1mwUD8zrTmzt2vvxdo7O6QqLH98gy9/4LNVvVcCnXFS GXw0zfMm3jp1iTJC7sskDcQFDH53aVRDS27B11KdfwnJ+MGuRNFILs5aNNovO5sq KQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 266495014076638784283326801967086842778913 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-27 12:10:39 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-25 12:10:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'content.www.bmw.at' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21402569470549642016639290987132907062422198529642810196397339624509164836810017915203292715362027443517077175170305202914838724232434682386002561678519767999181315151629486438129708867433158368270899541942103980739253149119128191068574135345321787269971124036157032231957266270375234442949809411175696725614899666969163565462325044012722272732605509417544165735303889440573793480225977832417942891748179428323918556480755936695965292924694989890960682661122206769287097923590598239681138431058884977039509898890826018062326854016309891834663331112368844250157599861270051590356208774500547476776749603963968692103721 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9b66763e25cb8e86f35d11480c7d4e0540f56ccf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.www.bmw.at' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017cc1dfc313000004030048304602210096314807ab894c3007523e05c81e3a16c254c2b7272aa8a0212fc65d64ab6d9302210080cbdc6bfad82cb6c9efda0b0561ff1410772225fde3b83573502bc479e1a1440075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017cc1dfc3290000040300463044022060b4d106de2370c94ca97fc1b42833671d24516dcd0208a6ea0d0bd8083e27de0220430568430795a8f76999d8722fa5f9d5464f382288bfd9182993e2fe2a94e54c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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