fund.bayer.us
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:00:80:9e:86:1c:5c:c7:3b:80:c9:41:14:c0:38:63:75:da was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fund.bayer.us
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:00:80:9e:86:1c:5c:c7:3b:80:c9:41:14:c0:38:63:75:daSerial Number (int): 261507822081734846592228906574648048842202
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 96:5c:db:38:41:2c:79:87:23:17:34:6c:48:b9:3b:55:fb:0b:86:73
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 1e:be:e3:01:ca:42:c3:67:de:61:ae:4f:08:76:1b:e0:05:b2:73:fb
Fingerprint (sha256): 09:e5:18:f8:a1:90:f1:51:cd:9e:29:14:2d:4d:cd:4a:4f:29:ed:02:8b:13:a4:a1:6b:8d:34:72:ce:73:d1:69
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate fund.bayer.us
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fund.bayer.us
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fund.bayer.us
Other certificates including the domain name bayer.us
(limited to 100 certificates)
sanssl15.bayer.com
sanssl11.bayer.com
*.cropscience.bayer.us
pft.bayercropscience.us
legaplus.bayer.de
sanssl3.bayer.com
bulktanks.cropscience.bayer.us
cropscience.bayer.gr
www.cteph.com
sanssl15.bayer.com
www.antikoncepce.cz
www.antikoncepce.cz
es.bayer.be
www.cteph.com
www.bayer.us
sanssl24.bayer.com
www.kogenate.ca
analytics.bbo.bayer.us
idnet.bayer.com
one.bayer.com
sanssl13.bayer.com
sanssl13.bayer.com
one.bayer.com
www.cropscience.bayer.com
career.bayer.com
www.canwelivebetter.bayer.de
www.ridbedbugs.com
environmentalscience.bayer.us
www.antikoncepce.cz
fund.bayer.us
environmentalscience.bayer.com.au
stage.maverick.bayer.us
go.environmentalscience.bayer.us
www.cropscience.bayer.com
www.kogenate.ca
fakturace.bayer.cz
www.cteph.com
www.antikoncepce.cz
pft.bayercropscience.us
www.antikoncepce.cz
msms.bayer.us
www.antikoncepce.cz
one.bayer.com
www.antikoncepce.cz
analytics.bbo.bayer.us
bayer.us
hawaii.bayer.us
career.bayer.com
secure.bayer.com
pft.bayercropscience.us
pages.environmentalscience.bayer.us
www.media.bayer.com
one.bayer.com
pft.bayercropscience.us
www.cropscience.bayer.com
one.bayer.com
sanssl3.bayer.com
www.cropscience.bayer.com
pft.bayercropscience.us
fakturace.bayer.cz
www.cteph.com
career.bayer.com
msms.bayer.us
www.cteph.com
sanssl3.bayer.com
www.cropscience.bayer.com
sanssl10.bayer.com
www.canwelivebetter.bayer.de
www.lampit.com
sanssl10.bayer.com
legaplus.bayer.de
www.canwelivebetter.bayer.de
one.bayer.com
sanssl3.bayer.com
www.cteph.com
sanssl13.bayer.com
www.cropscience.bayer.com
www.antikoncepce.cz
beehealth.bayercropscience.us
pft.bayercropscience.us
www.career.bayer.pt
stage.maverick.bayer.us
career.bayer.us
www.cteph.com
pft.bayercropscience.us
www.kogenate.ca
www.media.bayer.com
www.antikoncepce.cz
www.antikoncepce.cz
stage.storelocator.services.bayer.us
myradiologysolutions.bayer.com
www.cropscience.bayer.com
www.kogenate.ca
www.media.bayer.com
one.bayer.com
www.environmentalscience.bayer.com
www.weather.services.bayer.us
www.cropscience.bayer.com
www.elevit.com.cn
www.media.bayer.com
sanssl11.bayer.com
*.cropscience.bayer.us
pft.bayercropscience.us
legaplus.bayer.de
sanssl3.bayer.com
bulktanks.cropscience.bayer.us
cropscience.bayer.gr
www.cteph.com
sanssl15.bayer.com
www.antikoncepce.cz
www.antikoncepce.cz
es.bayer.be
www.cteph.com
www.bayer.us
sanssl24.bayer.com
www.kogenate.ca
analytics.bbo.bayer.us
idnet.bayer.com
one.bayer.com
sanssl13.bayer.com
sanssl13.bayer.com
one.bayer.com
www.cropscience.bayer.com
career.bayer.com
www.canwelivebetter.bayer.de
www.ridbedbugs.com
environmentalscience.bayer.us
www.antikoncepce.cz
fund.bayer.us
environmentalscience.bayer.com.au
stage.maverick.bayer.us
go.environmentalscience.bayer.us
www.cropscience.bayer.com
www.kogenate.ca
fakturace.bayer.cz
www.cteph.com
www.antikoncepce.cz
pft.bayercropscience.us
www.antikoncepce.cz
msms.bayer.us
www.antikoncepce.cz
one.bayer.com
www.antikoncepce.cz
analytics.bbo.bayer.us
bayer.us
hawaii.bayer.us
career.bayer.com
secure.bayer.com
pft.bayercropscience.us
pages.environmentalscience.bayer.us
www.media.bayer.com
one.bayer.com
pft.bayercropscience.us
www.cropscience.bayer.com
one.bayer.com
sanssl3.bayer.com
www.cropscience.bayer.com
pft.bayercropscience.us
fakturace.bayer.cz
www.cteph.com
career.bayer.com
msms.bayer.us
www.cteph.com
sanssl3.bayer.com
www.cropscience.bayer.com
sanssl10.bayer.com
www.canwelivebetter.bayer.de
www.lampit.com
sanssl10.bayer.com
legaplus.bayer.de
www.canwelivebetter.bayer.de
one.bayer.com
sanssl3.bayer.com
www.cteph.com
sanssl13.bayer.com
www.cropscience.bayer.com
www.antikoncepce.cz
beehealth.bayercropscience.us
pft.bayercropscience.us
www.career.bayer.pt
stage.maverick.bayer.us
career.bayer.us
www.cteph.com
pft.bayercropscience.us
www.kogenate.ca
www.media.bayer.com
www.antikoncepce.cz
www.antikoncepce.cz
stage.storelocator.services.bayer.us
myradiologysolutions.bayer.com
www.cropscience.bayer.com
www.kogenate.ca
www.media.bayer.com
one.bayer.com
www.environmentalscience.bayer.com
www.weather.services.bayer.us
www.cropscience.bayer.com
www.elevit.com.cn
www.media.bayer.com
Certificate
The complete raw certificate details for fund.bayer.us in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAwCAnoYcXMc7gMlBFMA4Y3XaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTUxNDAzMDRaFw0y MDAzMTQxNDAzMDRaMBgxFjAUBgNVBAMTDWZ1bmQuYmF5ZXIudXMwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT2sk4dkpGOsIs1AP3Su+4k1a/JFSsGtGR 9P6q0r0rACky/Z/RaHNY01uCbN850J6iPFoM3aGqFGekcO/2tyxIuhrWu8dhF2Au i+ODPAb2+uTGGtQNG9lw0GoBaNpm5Qfynv3PrtZWpO8tVcwZmPwsKDU3/eYlVxLI etaiM1sxO6UbLv/7KDqrD15PA0RJUL4ZPWdlmSvr5YS6+yqFpdHGtk/+hpgdRzxC 2UbojSGGHbWyRJ5Q7XON7yZLH8UUF5EWUHeSktVOAw2tOtOpZnfKyDeBeURK74F/ M+T4JcOycQM7D7zf0TQe8tw3p9pKlnjz6QkbUNtOZRLF/jmBOx1RAgMBAAGjggJh MIICXTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJZc2zhBLHmHIxc0bEi5O1X7C4Zz MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wGAYDVR0RBBEwD4INZnVuZC5iYXllci51czBMBgNVHSAERTBDMAgGBmeBDAEC ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl bmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AG9Tdqwx8DEZ2JkA pFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbwoVlUoAAAQDAEYwRAIgG4Qjt0tRML6f tXRZQy4gkPee1WzYpz6WKPnAsfHkUpcCIG4dpYw5uKKa5sTPoIuK/Lx3CQ2hbLiv 7hLI/VlWa3xmAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFv ChWVSgAABAMARzBFAiEA+wITS7Bas2njfst38GNsTZ1mEROtd0If3XQ7ZbJzCGwC IHuWYcRV9XHH4dlAKTinLfh3zHcv54NtYZNt/iE9SXT3MA0GCSqGSIb3DQEBCwUA A4IBAQBKkra8cRpl7rYGOua/g/MOEMEmzL/MIO8A8fmVvAMb7wd+6UFNjJKuEI7O /1bmfH85S+erSMNI7H2ia9EpxrPFBo1IxnGjqk3LNVcSMWj/R3aUvNAM1Np14VP/ p8529l3hqegDA7CJJDB4jerF5l1x2xnjNmOu+aQw986IQ+n0MZgeJdYPF+Pw07nr 0eCzeFJ6otSBUYUKXziMDPZQ/oeoNGJZBfVuEt78ZaaDu+gRKeMoconDmux7elFy XpxDWbG+RQT9t/3Ug3Vk+6VqreqhAUoCvBuL1FLnOqXrcNqtCBZXWC9eflzwnGPP go0cN0sDcvBpDskfmWNlhJE4p03K -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09rJOHZKRjrCLNQD90rv uJNWvyRUrBrRkfT+qtK9KwApMv2f0WhzWNNbgmzfOdCeojxaDN2hqhRnpHDv9rcs SLoa1rvHYRdgLovjgzwG9vrkxhrUDRvZcNBqAWjaZuUH8p79z67WVqTvLVXMGZj8 LCg1N/3mJVcSyHrWojNbMTulGy7/+yg6qw9eTwNESVC+GT1nZZkr6+WEuvsqhaXR xrZP/oaYHUc8QtlG6I0hhh21skSeUO1zje8mSx/FFBeRFlB3kpLVTgMNrTrTqWZ3 ysg3gXlESu+BfzPk+CXDsnEDOw+839E0HvLcN6faSpZ48+kJG1DbTmUSxf45gTsd UQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 261507822081734846592228906574648048842202 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 14:03:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 14:03:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fund.bayer.us' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26744169754230715649075668717972560382400962169663306534094815109051878085073079544868652150535902758726383487418281544061810255108336488201480098276541746092043312707280887971556400940435278953303452543973808192570605703558458701839081345605676651779534311907470512625355914849778561096321818369960676184376625988925662182751601749793571398531173642689661380100171472885048432112266910453871021059080006058026775799441235914282184616966261817921562011887752567647359245230468498115192753085766829992543194429674763265596464698463309458516509452644118148939758558705202863255691429072610366453251992037336328976407889 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 965cdb38412c79872317346c48b93b55fb0b8673 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fund.bayer.us' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f0a15954a000004030046304402201b8423b74b5130be9fb57459432e2090f79ed56cd8a73e9628f9c0b1f1e4529702206e1da58c39b8a29ae6c4cfa08b8afcbc77090da16cb8afee12c8fd59566b7c6600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f0a15954a0000040300473045022100fb02134bb05ab369e37ecb77f0636c4d9d661113ad77421fdd743b65b273086c02207b9661c455f571c7e1d9402938a72df877cc772fe7836d61936dfe213d4974f7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004a92b6bc711a65eeb6063ae6bf83f30e10c126ccbfcc20ef00f1f995bc031bef077ee9414d8c92ae108eceff56e67c7f394be7ab48c348ec7da26bd129c6b3c5068d48c671a3aa4dcb3557123168ff477694bcd00cd4da75e153ffa7ce76f65de1a9e80303b0892430788deac5e65d71db19e33663aef9a430f7ce8843e9f431981e25d60f17e3f0d3b9ebd1e0b378527aa2d48151850a5f388c0cf650fe87a834625905f56e12defc65a683bbe81129e3287289c39aec7b7a51725e9c4359b1be4504fdb7fdd4837564fba56aadeaa1014a02bc1b8bd452e73aa5eb70daad081657582f5e7e5cf09c63cf828d1c374b0372f0690ec91f996365849138a74dca