stwh.customer.ingenit.com

Issued by R3

About this certificate

This digital certificate with serial number 04:23:d3:5b:99:fc:51:09:5b:ab:da:32:15:a9:3d:1d:f4:98 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stwh.customer.ingenit.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:23:d3:5b:99:fc:51:09:5b:ab:da:32:15:a9:3d:1d:f4:98
Serial Number (int): 360639969298597822637544168085667220157592
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 26:0d:25:7a:6e:60:31:2e:5f:ee:7a:dd:f9:26:ba:94:9b:7e:88:07
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fa:6f:89:24:f6:c9:a5:50:11:e4:ef:03:81:29:89:de:33:37:ca:97
Fingerprint (sha256): 0e:56:50:0a:bf:52:56:be:89:22:f3:7f:25:44:18:8b:ef:32:f1:15:6b:2f:f5:51:d4:02:27:58:b9:ef:d9:00

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stwh.customer.ingenit.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stwh.customer.ingenit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.stwh.customer.ingenit.com
archive.stwh.customer.ingenit.com
matomo.stwh.customer.ingenit.com
studentenwerk-hannover.de
studierendenwerk-hannover.de
stw-h.de
stwh.customer.ingenit.com
stwhmgmt.customer.ingenit.com
www.studentenwerk-hannover.de
www.studierendenwerk-hannover.de
www.stw-h.de

Other certificates including the domain name ingenit.com

(limited to 100 certificates)
*.projects.ingenit.com
portal.skpcloud2.ingenit.com
skpcloud2.ingenit.com
*.ingenit.com
sni90887.cloudflaressl.com
stwh.customer.ingenit.com
*.ingenit.com
sni90887.cloudflaressl.com
peerpricing.skpcloud2.ingenit.com
app.stwh.customer.ingenit.com
skpcloud2.ingenit.com
*.projects.ingenit.com
sni.cloudflaressl.com
sni90887.cloudflaressl.com
sni90887.cloudflaressl.com
*.ingenit.com
sni90887.cloudflaressl.com
*.ingenit.com
support-vm.ingenit.com
app.stwh.customer.ingenit.com
pwg.skpcloud2.ingenit.com
sni90887.cloudflaressl.com
catsaviation.com
*.local.ingenit.com
sni90887.cloudflaressl.com
api-dop.catsaviation.com
sni90887.cloudflaressl.com
cats.customer.ingenit.com
tableau.skpcloud2.ingenit.com
sni90887.cloudflaressl.com
support-vm.ingenit.com
catsaviation.com
*.ingenit.com
sni90887.cloudflaressl.com
app.stwh.customer.ingenit.com
sni90887.cloudflaressl.com
sni90887.cloudflaressl.com
sni.cloudflaressl.com
sni90887.cloudflaressl.com
app.stwh.customer.ingenit.com
*.ingenit.com
skpcloud2.ingenit.com
ingenit.com
sni90887.cloudflaressl.com
*.ingenit.com
sni90887.cloudflaressl.com
*.ingenit.com
api-dop.catsaviation.com
api-dop.catsaviation.com
catsaviation.com
*.projects.ingenit.com
*.local.ingenit.com
sni90887.cloudflaressl.com
*.ingenit.com
sni90887.cloudflaressl.com
ingenit.com
skpcloud2.ingenit.com
catsaviation.com
*.local.ingenit.com
*.local.ingenit.com
sni90887.cloudflaressl.com
*.projects.ingenit.com
app.stwh.customer.ingenit.com
sni90887.cloudflaressl.com
sni90887.cloudflaressl.com
taktkin.customer.ingenit.com
sni90887.cloudflaressl.com
*.projects.ingenit.com
tableau.skpcloud2.ingenit.com
sni90887.cloudflaressl.com
skpcloud2.ingenit.com
sni.cloudflaressl.com
sni90887.cloudflaressl.com
app.stwh.customer.ingenit.com
*.projects.ingenit.com
support-vm.ingenit.com
ingenit.com
catsaviation.com

Certificate

The complete raw certificate details for stwh.customer.ingenit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgISBCPTW5n8UQlbq9oyFak9HfSYMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAyMTExMDI3MThaFw0yMzA1MTIxMDI3MTdaMCQxIjAgBgNVBAMT
GXN0d2guY3VzdG9tZXIuaW5nZW5pdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqvrVR+mtX3tqnZl1yCwc3Opy7IttH1i+hPwdi2jbD/alZZ2aD
qxKhjFmeyjovq3q85u5JDdj8tSeqgokIabcRsTpkCNE0EYlsrNF2WkI7ywGUTIrn
Gf+M2P1vttMTl6U4akmXTEgqdJqNg//R+vhaNB2YWNt5KEOpMk5v8i1cThKM0FwF
0wpO2W+d50+ASpIFPoJnUQoJTAcecQAIxv60jVQBh7Q1qxHgIjZx0dbtcJHKRe/L
VQ5qqK3GzTiF+qTJUGDU3Rsgsj/EqalvViVcSYgV24vZn9XFa8vR8FaJ/kChuwpq
F8BPHJYouUa4348rdCys+ydL5jmAYs3zfe4hAgMBAAGjggNwMIIDbDAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFCYNJXpuYDEuX+563fkmupSbfogHMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIBPQYDVR0RBIIBNDCCATCCHWFwcC5zdHdoLmN1c3RvbWVy
LmluZ2VuaXQuY29tgiFhcmNoaXZlLnN0d2guY3VzdG9tZXIuaW5nZW5pdC5jb22C
IG1hdG9tby5zdHdoLmN1c3RvbWVyLmluZ2VuaXQuY29tghlzdHVkZW50ZW53ZXJr
LWhhbm5vdmVyLmRlghxzdHVkaWVyZW5kZW53ZXJrLWhhbm5vdmVyLmRlgghzdHct
aC5kZYIZc3R3aC5jdXN0b21lci5pbmdlbml0LmNvbYIdc3R3aG1nbXQuY3VzdG9t
ZXIuaW5nZW5pdC5jb22CHXd3dy5zdHVkZW50ZW53ZXJrLWhhbm5vdmVyLmRlgiB3
d3cuc3R1ZGllcmVuZGVud2Vyay1oYW5ub3Zlci5kZYIMd3d3LnN0dy1oLmRlMEwG
A1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEW
Gmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB
8wDxAHcAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGGQDrE8gAA
BAMASDBGAiEA/HqjpwANM1KeUtMviWT+WYr9yrf03wO0LMM95a0DznoCIQDp/DL/
IzlCGMRIbPQ4bbmA+DVCFOyijnV2FLCH3eB89AB2AK33vvp8/xDIi509nB4+GGq0
Zyldz7EMJMqFhjTr3IKKAAABhkA6xSAAAAQDAEcwRQIgdg2oBMGikvHCXwl19AYi
XRogfcjQ1Qnl653iuUiHpwICIQCH7hyusNcGWNRyzwVPY9inC0a37PxyyQsKHBwj
K6QwCTANBgkqhkiG9w0BAQsFAAOCAQEAWgPCj1eeYyXZB+MOriES9rIX89uwDcUT
V2NknMAfZ2XDjbgvjcHgiLqGGhKanx+JwqtC7LsEK4KNbQ0sFMAq5LvAt+XNAuk7
dNKCdp0Wu0JRZD95J95Iw6QDwOexDdDKMHWbsVEXg4noXlq/90gm++hCRxaCo8vN
VxAKIpd97qatU6Nqg9r3RUiXFPgbm2RyFakVxCRitabzJuW3sld/bQ4L2+MMT5Hf
+ovkIHo5gYCQnzOJ7Sv5WuXXxpSk6hJWDTrWWezBZUvo0mJqTmz4eFZz1k78lFEz
2ynLIR7QAldu1UCiEwSxZPTDnpDj9UIEfOYmwm1/EW+lkUwJkItZlA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr61UfprV97ap2ZdcgsH
NzqcuyLbR9YvoT8HYto2w/2pWWdmg6sSoYxZnso6L6t6vObuSQ3Y/LUnqoKJCGm3
EbE6ZAjRNBGJbKzRdlpCO8sBlEyK5xn/jNj9b7bTE5elOGpJl0xIKnSajYP/0fr4
WjQdmFjbeShDqTJOb/ItXE4SjNBcBdMKTtlvnedPgEqSBT6CZ1EKCUwHHnEACMb+
tI1UAYe0NasR4CI2cdHW7XCRykXvy1UOaqitxs04hfqkyVBg1N0bILI/xKmpb1Yl
XEmIFduL2Z/VxWvL0fBWif5AobsKahfATxyWKLlGuN+PK3QsrPsnS+Y5gGLN833u
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360639969298597822637544168085667220157592
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-11 10:27:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-12 10:27:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stwh.customer.ingenit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21554553603136600883850082170506141474172667203729091401146663851374307307631322267113329323348579519339869119222534901080437411658034517004799108521115596979065473953837997642468873802278482244813973728797513262244852226112961653027625203618193325883840417994584309665942170293591986968991070732519842145716123476691743389135076479240738194943612097944942996932966069745238905630489109413841914049650455615721736187238262727238729443457522414015693608083311688697707037572752192335037098268351831561981889926898119594443100767338295867905699527091267637618142138139465960966246064219278717840666272957331482940927521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							260d257a6e60312e5fee7addf926ba949b7e8807
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (308 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.stwh.customer.ingenit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.stwh.customer.ingenit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matomo.stwh.customer.ingenit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentenwerk-hannover.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studierendenwerk-hannover.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stw-h.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stwh.customer.ingenit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stwhmgmt.customer.ingenit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studentenwerk-hannover.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studierendenwerk-hannover.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stw-h.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186403ac4f20000040300483046022100fc7aa3a7000d33529e52d32f8964fe598afdcab7f4df03b42cc33de5ad03ce7a022100e9fc32ff23394218c4486cf4386db980f8354214eca28e757614b087dde07cf4007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186403ac52000000403004730450220760da804c1a292f1c25f0975f406225d1a207dc8d0d509e5eb9de2b94887a70202210087ee1caeb0d70658d472cf054f63d8a70b46b7ecfc72c90b0a1c1c232ba43009
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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