data-45ccb8748c.bestcheck.de
Issued by R3
About this certificate
This digital certificate with serial number 04:2c:94:66:b0:39:37:7a:22:e1:f2:bb:6a:df:9c:ee:30:be was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=data-45ccb8748c.bestcheck.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:2c:94:66:b0:39:37:7a:22:e1:f2:bb:6a:df:9c:ee:30:beSerial Number (int): 363618826803455281915717651639001982841022
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 63:83:29:56:34:a1:91:cb:d9:bf:87:d2:3b:27:e1:3c:18:73:e6:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 73:36:bc:1e:96:d3:87:11:b9:ff:d1:2f:c4:9a:31:f4:78:42:40:96
Fingerprint (sha256): 08:e4:0c:0d:6c:98:e3:af:37:4d:3c:8b:20:ae:d7:e3:54:af:78:76:a7:ba:a4:24:be:91:08:26:0b:68:e4:b9
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate data-45ccb8748c.bestcheck.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for data-45ccb8748c.bestcheck.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
data-45ccb8748c.bestcheck.de
Other certificates including the domain name bestcheck.de
(limited to 100 certificates)
*.bestcheck.de
bfops.io
prospekte.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
tags.fitforfun.de
bf-tools.net
mms.bestcheck.de
mms.bestcheck.de
*.sp.bestcheck.de
mms.bestcheck.de
somniture.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
s.burda-forward.com
goalfacts.com
cmp.bestcheck.de
tags.fitforfun.de
data-2f2ec12966.bestcheck.de
mms.bestcheck.de
bfops.io
cmp.bestcheck.de
mms.bestcheck.de
bfops.io
*.bestcheck.de
bfops.io
bfops.io
bf-tools.net
bfops.io
bfops.io
cmp.bestcheck.de
cmp.bestcheck.de
bfops.io
bfops.io
bf-tools.net
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
somniture.bestcheck.de
cmp.bestcheck.de
tags.fitforfun.de
*.sp.bestcheck.de
tags.fitforfun.de
mms.bestcheck.de
tags.fitforfun.de
cmp.bestcheck.de
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
bf-tools.net
bfops.io
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
bfops.io
bfops.io
mms.bestcheck.de
newsletter.bestcheck.de
cmp.bestcheck.de
bf-tools.net
sportwetten.bestcheck.de
*.sandbox-sp.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
data-2f2ec12966.bestcheck.de
data-1818d50639.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
bf-tools.net
cmp.bestcheck.de
cmp.bestcheck.de
bf-tools.net
bfops.io
bfops.io
mms.bestcheck.de
cmp.bestcheck.de
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
data-2f2ec12966.bestcheck.de
somniture.bestcheck.de
bf-tools.net
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
*.sandbox-sp.bestcheck.de
somniture.bestcheck.de
bfops.io
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
mms.bestcheck.de
bfops.io
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
bfops.io
bfops.io
bfops.io
newsletter.bestcheck.de
bfops.io
prospekte.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
tags.fitforfun.de
bf-tools.net
mms.bestcheck.de
mms.bestcheck.de
*.sp.bestcheck.de
mms.bestcheck.de
somniture.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
s.burda-forward.com
goalfacts.com
cmp.bestcheck.de
tags.fitforfun.de
data-2f2ec12966.bestcheck.de
mms.bestcheck.de
bfops.io
cmp.bestcheck.de
mms.bestcheck.de
bfops.io
*.bestcheck.de
bfops.io
bfops.io
bf-tools.net
bfops.io
bfops.io
cmp.bestcheck.de
cmp.bestcheck.de
bfops.io
bfops.io
bf-tools.net
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
somniture.bestcheck.de
cmp.bestcheck.de
tags.fitforfun.de
*.sp.bestcheck.de
tags.fitforfun.de
mms.bestcheck.de
tags.fitforfun.de
cmp.bestcheck.de
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
bf-tools.net
bfops.io
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
bfops.io
bfops.io
mms.bestcheck.de
newsletter.bestcheck.de
cmp.bestcheck.de
bf-tools.net
sportwetten.bestcheck.de
*.sandbox-sp.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
data-2f2ec12966.bestcheck.de
data-1818d50639.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
bf-tools.net
cmp.bestcheck.de
cmp.bestcheck.de
bf-tools.net
bfops.io
bfops.io
mms.bestcheck.de
cmp.bestcheck.de
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
data-2f2ec12966.bestcheck.de
somniture.bestcheck.de
bf-tools.net
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
*.sandbox-sp.bestcheck.de
somniture.bestcheck.de
bfops.io
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
mms.bestcheck.de
bfops.io
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
bfops.io
bfops.io
bfops.io
newsletter.bestcheck.de
Certificate
The complete raw certificate details for data-45ccb8748c.bestcheck.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISBCyUZrA5N3oi4fK7at+c7jC+MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTEwMDUwMjM1MzFaFw0yMjAxMDMwMjM1MzBaMCcxJTAjBgNVBAMT HGRhdGEtNDVjY2I4NzQ4Yy5iZXN0Y2hlY2suZGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjY96ElHi8p81xO8dYozUW+Js37OrGi0tJt4cL9BsknS/i qr5IZSK0oQKer2GoCGBL3DPp9E+rfTQgWGhwsQQaFVd6GN7TYe6te0lmKMK9QPd6 eiPR5RgBpv6AUvt620L91Owd+7hetmsYzflSKwzYbRzFaFe4Pn8fSvB8FXYCQKwB ErnS39AxtAADl1PorQVVR7SXhCCEHUzGHqtg+fhtcbkiTMAVtS2fZKZqRoNs/moA w8MkfMWEFWihgSh7oDQ1ECH0i+yECdXppKXcTCZWrZERGc5+hpc7L0tjWHwacKcu kvda2ulGHiZQxoiC9If24dUPtFf8UPBv1c5obXDpAgMBAAGjggJXMIICUzAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFGODKVY0oZHL2b+H0jsn4TwYc+a7MB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMCcGA1UdEQQgMB6CHGRhdGEtNDVjY2I4NzQ4Yy5iZXN0 Y2hlY2suZGUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE AdZ5AgQCBIH1BIHyAPAAdgDfpV6raIJPH2yt7rhfTj5a6s2iEqRqXo47EsAgRFwq cwAAAXxOhU3oAAAEAwBHMEUCIQCd/olIuZBfim320miUyb2iXobN0lsrlogl+Ge4 3AH0NAIgNsy9exRIb0uV9OwQtgume00YGgplD+2Fo/cSkslCQ8cAdgBGpVXrdfqR IDC1oolp9PN9ESxBdL79SbiFq/L8cP5tRwAAAXxOhU5IAAAEAwBHMEUCIFb6TDDl k0lFLILZpmYARf1i6ymCS1Ic/p+/O8H6cyDTAiEAvya/6N/YRUe50ldeVmbxo2al XY08Xxgvv0oz6JCzQmQwDQYJKoZIhvcNAQELBQADggEBAH6ebG4u974iHpi68GGQ YiINl7I/IqO193/jvOfRczjnDqoZqzF17aIKw0Amwbz+XljSBMcu2Een5vnXJcWO H7F/oMAEBS128VShJppQuwumWDoW+wufO7AwKIyWNFq/ze5XA8xWcI5k1mAq0nfU Hbo8nq5kZgXz1m/WfIpleuCbX6vH/msSUndFHCw/ClDU+NUr9g/zpCEVjzp46Lc+ DcHZg6ZyzAdSX1I7YYYZ6DlkWzIrFEWV8a8Qc2mN1Zjz5jH+Qy8k/cgx9+sPSuDo W53JvWjtghnfACywHI5ijN3A2inZAWItLoOSLU1BJU2KZN2Lxw/VSnqhc00qYlUC WMQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42PehJR4vKfNcTvHWKM1 FvibN+zqxotLSbeHC/QbJJ0v4qq+SGUitKECnq9hqAhgS9wz6fRPq300IFhocLEE GhVXehje02HurXtJZijCvUD3enoj0eUYAab+gFL7ettC/dTsHfu4XrZrGM35UisM 2G0cxWhXuD5/H0rwfBV2AkCsARK50t/QMbQAA5dT6K0FVUe0l4QghB1Mxh6rYPn4 bXG5IkzAFbUtn2SmakaDbP5qAMPDJHzFhBVooYEoe6A0NRAh9IvshAnV6aSl3Ewm Vq2RERnOfoaXOy9LY1h8GnCnLpL3WtrpRh4mUMaIgvSH9uHVD7RX/FDwb9XOaG1w 6QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 363618826803455281915717651639001982841022 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-05 02:35:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-03 02:35:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'data-45ccb8748c.bestcheck.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28705342570471283623608972195117269975314697574075563628908824045958460592122526667946385622211937178235097040886398776403021316578110229320524223372922545148122523995690373756752637204949676240866327226750382604131719176518161792973565210091858268901122555360816556809013592992329178224061944906487334006724622097599391542431886745354910803139002508903893274245600501941028685459485595765935315188547714093570151403098190045747035181475570511541288518173532728938074295424220985022122290749505316501473719033002122777699051971615768815245838929690855116305471217659193075768824855310156786225268878955241801264230633 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6383295634a191cbd9bf87d23b27e13c1873e6bb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-45ccb8748c.bestcheck.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017c4e854de800000403004730450221009dfe8948b9905f8a6df6d26894c9bda25e86cdd25b2b968825f867b8dc01f434022036ccbd7b14486f4b95f4ec10b60ba67b4d181a0a650fed85a3f71292c94243c700760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017c4e854e480000040300473045022056fa4c30e59349452c82d9a6660045fd62eb29824b521cfe9fbf3bc1fa7320d3022100bf26bfe8dfd84547b9d2575e5666f1a366a55d8d3c5f182fbf4a33e890b34264 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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