dev2.aws.funkedigital.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7d:10:31:ab:2b:ac:1c:73:47:50:5b:4f:21:13:66:53:cc was issued on by Let's Encrypt.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev2.aws.funkedigital.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7d:10:31:ab:2b:ac:1c:73:47:50:5b:4f:21:13:66:53:cc
Serial Number (int): 303893679202628793761862667584785514648524
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:dc:cc:a5:91:a6:e5:40:a9:9c:7e:90:70:a4:ae:5e:a9:a4:1e:54
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 34:2f:d4:e8:07:9d:ab:96:b7:5f:2f:9a:5f:6f:0c:ca:02:7d:c8:20
Fingerprint (sha256): 10:1f:e7:f8:ac:75:a4:98:1b:12:9e:84:14:9d:cc:a0:49:68:02:a8:c5:9a:4c:b2:89:7e:90:68:50:1e:1d:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dev2.aws.funkedigital.de

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev2.aws.funkedigital.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev2.aws.abendblatt.de
dev2.aws.bergedorfer-zeitung.de
dev2.aws.bildderfrau.de
dev2.aws.braunschweiger-zeitung.de
dev2.aws.derwesten.de
dev2.aws.funkedigital.de
dev2.aws.futurezone.de
dev2.aws.gifhorner-rundschau.de
dev2.aws.goldenekamera.de
dev2.aws.harzkurier.de
dev2.aws.helmstedter-nachrichten.de
dev2.aws.ikz-online.de
dev2.aws.morgenpost.de
dev2.aws.multi.funkedigital.de
dev2.aws.news38.de
dev2.aws.nrz.de
dev2.aws.otz.de
dev2.aws.peiner-nachrichten.de
dev2.aws.reviersport-funke.de
dev2.aws.salzgitter-zeitung.de
dev2.aws.thueringen24.de
dev2.aws.thueringer-allgemeine.de
dev2.aws.tlz.de
dev2.aws.waz.de
dev2.aws.wolfenbuetteler-zeitung.de
dev2.aws.wolfsburger-nachrichten.de
dev2.aws.wp.de
dev2.aws.wr.de
dev2.aws.zentral-redaktion.de

Other certificates including the domain name funkedigital.de

(limited to 100 certificates)
rtd.aws.funkedigital.de
cdn.vtv.funkedigital.de
coverage.suse.funkedigital.de
origin-interaktiv.fnki.de
dbn.funkedigital.de
cms.sd.funkedigital.de
www.funkedigital.de
prod.ga.api.rtd.aws.funkedigital.de
*.funkemedien.de
dev3.aws.funkedigital.de
*.cloud.funkedigital.de
www.funkedigital.de
www.funkedigital.de
funkedigital.de
*.waz.de
nord.cloud.funkedigital.de
dev2.aws.funkedigital.de
*.rtd.aws.funkedigital.de
*.waz.de
superdesk.cloud.funkedigital.de
akcdn.vtv.funkedigital.de
serverless.suse.funkedigital.de
pub.sd.funkedigital.de
www.funkedigital.de
www.interaktiv.aws.funkedigital.de
www.funkedigital.de
funkedigital.de
rtd.aws.funkedigital.de
*.leo.aws.funkedigital.de
www.funkedigital.de
front.cloud.funkedigital.de
dbn.funkedigital.de
stage.api.suse.funkedigital.de
www.funkedigital.de
api.suse.funkedigital.de
dev1.aws.funkedigital.de
*.funkedigital.de
www.funkedigital.de
origin-interaktiv.fnki.de
*.funkemedien.de
suse.funkedigital.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
funkedigital.de
www.funkedigital.de
www.funkedigital.de
app.suse.funkedigital.de
pub.sd.funkedigital.de
*.fram-mini.aws.funkedigital.de
www.funkedigital.de
*.funkemedien.de
www.funkedigital.de
*.waz.de
*.waz.de
dev2.aws.funkedigital.de
s.rtd.aws.funkedigital.de
front.cloud.funkedigital.de
origin-interaktiv.fnki.de
ads.aws.funkedigital.de
*.funkemedien.de
ads.aws.funkedigital.de
funkedigital.de
rtd.aws.funkedigital.de
funkedigital.de
dev5.aws.funkedigital.de
dev2.aws.funkedigital.de
suse.funkedigital.de
*.waz.de
*.rtd.aws.funkedigital.de
dpa.funkedigital.de
www.funkedigital.de
funkedigital.de
*.fram-mini.aws.funkedigital.de
suse.funkedigital.de
swagger.suse.funkedigital.de
www.funkedigital.de
prod.ga.api.rtd.aws.funkedigital.de
www.funkedigital.de
*.waz.de
sp.data.funkedigital.de
talk-mgt.aws.funkedigital.de
www.funkedigital.de
www.funkedigital.de
leo.aws.funkedigital.de
funkedigital.de
*.waz.de
www.funkedigital.de
dev1.aws.funkedigital.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
sbap2.aws.funkedigital.de
www.funkedigital.de
pub.sd.funkedigital.de
front.vtv.funkedigital.de
www.funkedigital.de
*.leo.aws.funkedigital.de
dpa.funkedigital.de

Certificate

The complete raw certificate details for dev2.aws.funkedigital.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA13wkmu7B4I+MGsy6lbA3
WuJ+SEDNK4iBwdA3iTdJ0LKvh5cUy90apNPZXI5Ln+bOmi1l3l3933xl4RpDUWz3
+1xS8tmtrqCyv7hjIGNSq916EU8E+Wdp1xM9UGBBFwM/fte+slPs6J04KXc3cCFX
E/KbEB+Ma2hHWVwRfvqs4nqCY74Z8b9tp9htpUeOxWCh/V7gIdVf2NPm7KFJ9pQZ
vw4s0f3zJt97peIBVK3ZAZPL8HGVbwENBA5AevcP/SVUpsgho5d+/X+BmhFXGRhE
Bzg2iD7AqvRgwgE7zG7yyujIxxF9CSGYLhBht9D17j/9OA6ksq4Hh6wUBU2crjXt
S0mGx3fAcxilmdvT9Z9wQF54tQWGTV23tEYQRZEsOCcVJixCqZrK09XpHle5sUKd
zi5ZrSJcnUDU37dSGLrVlqMsRipDG5JkPBn7GnZklE9ja9bnrqIBMIFoh1IJ18D/
rrGV2DTYhaLE6aNQmJJ3vdZZDjC2G/SPiGfehx6RfvvzU9hTbJ/0D6H5CyEN0bYU
x4m8JcKYr7P/03xrXbLhHH8jWkfe9/5Q0OJ2/Rjdsw6sMoOikjixUsonC41vuLC1
il4q6byGgQi1vi0taAwtfL7oRSxFzwuPN/ETVcGvJLLzXXMTjNx9e2siGodAhBO0
pxPJcL8/kgKjsI5GTIaUR+UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303893679202628793761862667584785514648524
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-10 11:10:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-08 11:10:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev2.aws.funkedigital.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 879101830909503547565481005632706403864820978794266229451025041355165507358637360388597201856321882407328745922614339050845378460310642975342597506140027188438509490588648247277199500334369435748543431332246234814292924726989167586307875142851700190860754303054208199936973319819724907894284662393841495973264456291045391925386712196372141643276379634143154230855317012842496213793834013342948299872673612371189546738462866656096711876030195037711266077943804745306502608987035212639271173242840405528101398817344501735477759796922854883205492167767950711695821338407865605368689158561911909799031470745849656299691548719440060469543393395359945805522275945206606005352771308990078831883528013472984788969905301268738716692532735420667788030154030471652250541699148789283093943901436429915513661305523753548865794736270045166273631458067652400309764861247221439892945093828739537799037625058562865790334532994499828194491640360640973763802885218592692576114320227945955351014516342969610717981624797953676829075573842479160474576053814333154909934089722205402854756164074960463202461725352209076595512050308057666503177172424441118262601554725663782500625791420802323836363592669709012170265455418479383941497191342598784857171838949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65dccca591a6e540a99c7e9070a4ae5ea9a41e54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (777 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.abendblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.bergedorfer-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.bildderfrau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.braunschweiger-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.derwesten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.funkedigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.futurezone.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.gifhorner-rundschau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.goldenekamera.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.harzkurier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.helmstedter-nachrichten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.ikz-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.morgenpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.multi.funkedigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.news38.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.nrz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.otz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.peiner-nachrichten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.reviersport-funke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.salzgitter-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.thueringen24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.thueringer-allgemeine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.tlz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.waz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.wolfenbuetteler-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.wolfsburger-nachrichten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.wp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.wr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.aws.zentral-redaktion.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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