egsk.weita.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c0:82:b0:c9:82:93:e4:e9:0a:c8:41:37:9a:f2:3e:0a:ae was issued on by Let's Encrypt.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=egsk.weita.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:82:b0:c9:82:93:e4:e9:0a:c8:41:37:9a:f2:3e:0a:ae
Serial Number (int): 326844789814909828610860756205984599116462
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f8:8a:54:33:dd:35:69:c1:3b:c3:7d:7e:1b:75:83:d3:78:30:a9:88
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1c:7c:05:80:e7:f3:ef:4c:61:57:4e:e7:c5:44:54:09:23:bf:f9:30
Fingerprint (sha256): 11:35:ee:ae:8d:7e:53:0b:49:bc:9b:11:c7:13:74:22:c5:3e:18:80:6b:92:b2:7d:83:ae:fc:be:f9:52:d4:fd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate egsk.weita.ch

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for egsk.weita.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

andermatter.andermatt-swissalps.ch
autodiscover.epaper-poonen.neuer-bund-verlag.de
catalogues.alfacareinternational.com
ebook.aimara.ch
egsk.weita.ch
epaper.bielbienne.com
epaper.ehg-stahl.com
epaper.wta-suhl.de
fu-kiosk.futuriststeam.co.uk
gastro.papstar.de
katalog.isa-racing.com
katalog.promondo.de
kiosk.heinmedia.eu
kiosk.ownersclub.immo
kiosk.rattpack.eu
kiosk.velototal.de
kiosk.visionen.com
lies.buchaktuell.de
magazine.arbeit-und-arbeitsrecht.de
magazine.infoboard.de
media.auvesy.com
neubau-projekte.vr-immoservice-mainfranken.de
oldnick.thesatanicwarlock.com
online.gitaliamagazine.it
print.werwaswo.eu
programme.holiday-event.de
publikationen.ehs-verlag.de
read.citymatters.london
webkiosk.beck.de
webkiosk.epaper-kiosk.beam-verlag.de
webkiosk.paginasiete.bo
webkiosk.quittenprojekt-bergstrasse.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosks.sufijournal.org

Other certificates including the domain name weita.ch

(limited to 100 certificates)
moebel-gruber.mediaflip.de
jobst-wohnwelt.mediaflip.de
www.revistacipcisa.com
broschuere.bildkunstakademie.de
kataloge.vitaltours.de
magazine.landroverusa.com
digiprospekt.freyplus.de
kiosk.dolcevita-magazin.ch
jobst-wohnwelt.mediaflip.de
catalogs.k7-pro.com
webkiosks.zaubertopf-club.de
lemagazine.landrover.com
blaetterkatalog.kleentex.eu
jobst-wohnwelt.mediaflip.de
epaper.treffpunkt-bau.eu
immobilienmagazin.steinauer-immo.ch
magazine.montana-cans.com
app.procycling.de
moebel-mmz.mediaflip.de
magazine.montana-cans.com
digital.queencityconnections.com
magazine.montana-cans.com
publications.nursingald.com
magazin.zibibbo.de
jobst-wohnwelt.mediaflip.de
hoffmann-moebel.mediaflip.de
hoffmann-moebel.mediaflip.de
hummerich.mediaflip.de
flyer.medion-fabrikverkauf.de
magazine.landrover.com.cn
www.maryspubs.com
ruesen.mediaflip.de
ruesen.mediaflip.de
ebooks.teammelanie.nz
webkiosk.magazinmarley.de
moebel-zuck.mediaflip.de
digital.queencityconnections.com
egsk.weita.ch
hummerich.mediaflip.de
blaetterkatalog.kleentex.eu
trop.mediaflip.de
angebote.dersteirerhof.at
magazine.biss.team
jobst-wohnwelt.mediaflip.de
read.africanphotomag.co.ke
jobst-wohnwelt.mediaflip.de
weita.ch
hummerich.mediaflip.de
jobst-wohnwelt.mediaflip.de
trop.mediaflip.de
kiosk.leuchtfeuer-verlag.com
weita.ch
kataloge.triplex-fischer.de
mail.weita.ch
moebel-mmz.mediaflip.de
moebel-mai.mediaflip.de
publikationen.kmu.org
kurse.bdb-musikakademie.de
epaper.treffpunkt-bau.eu
app.worldofmtb.de
sonavsofab.xp1.com
ruesen.mediaflip.de
epaper.chili-peppers.de
jobst-wohnwelt.mediaflip.de
catalog.trendyourbrand.com
moebel-zuck.mediaflip.de
webkiosks.zaubertopf-club.de
magazine.biss.team
moebel-berta.mediaflip.de
digital.queencityconnections.com
kataloge.holzimpraegnierwerk.ch
digital.queencityconnections.com
moebel-mmz.mediaflip.de
jobst-wohnwelt.mediaflip.de
digiprospekt.freyplus.de
hummerich.mediaflip.de
digital.queencityconnections.com
publikationen.kmu.org
mobila.mediaflip.de
webkiosk.stephanshof.com
trop.mediaflip.de
publications.nursingald.com
weita.ch
moebel-gruber.mediaflip.de
digital.queencityconnections.com
katalog.hltravel.at
rieswick.mediaflip.de
app.fahrrad-news.com
rieswick.mediaflip.de
webkiosk.stephanshof.com
kiosk.seniorenreisen.de
moebelundobjekt.mediaflip.de
immomagazin.wegenerimmobilien.de
katalog.unzerbrechbar.de
hetmagazine.landrover.com
webkiosk.edeka-koehne.de
weita.ch
medien.koinno-bmwi.de
moebel-meyer.mediaflip.de
mail.weita.ch

Certificate

The complete raw certificate details for egsk.weita.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQfWF41Qk1ssoP5C85oV
Xwr8aIoIOW2Yic8ypOyEMu5aDgqLmL/xqm1o6tveYvR5u3AzNuchowLmeOPZgan0
GS7edyemZK0YJCRIX8B7OiR/pC4EQzfOtU9NHGCVa4n62Th2+NnaP5dxpT5CkZWR
agrbqAXrdWeicaFMEQdiOh5LgDnIHXW/1IxLY7U2u7kECSq9jbqzI5DKSNTiBI4C
ikA10s8scwSay4wMLCfLQVHwPuBU9QLuSHwHgWkt2qwuukMOpAniwGTQPWxkLT08
H+DHwAu3Tzv6BAN/bSFB8gX5Q78hASMbA9jv9ypyOeJXpSSHTZFAXUIfHiasV5iU
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326844789814909828610860756205984599116462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-27 11:03:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-25 11:03:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'egsk.weita.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22348044201003046074202378139650152070000710582409022120842707974768611019028066210499844559670945605436567036971974262389904771721690765340080305039626781101565612619243969713996809505707064474339341783818815512795623666610262354510950449824398686873926796617700287773616633689491537451712034824334333991547197419961697613424988230667828125052480695668732766035020286350067048193838712363464459575302425017371723767932333674468059348439799640003649730410969573738628467172214433405095399637170462455827594018780315527663683398170730421474115585583592331936274559192036150148530053989026782323049855771792486279189681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f88a5433dd3569c13bc37d7e1b7583d37830a988
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (932 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andermatter.andermatt-swissalps.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.epaper-poonen.neuer-bund-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogues.alfacareinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebook.aimara.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egsk.weita.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.bielbienne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.ehg-stahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.wta-suhl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fu-kiosk.futuriststeam.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gastro.papstar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.isa-racing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.promondo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.heinmedia.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.ownersclub.immo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.rattpack.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.velototal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.visionen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lies.buchaktuell.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.arbeit-und-arbeitsrecht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.infoboard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.auvesy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neubau-projekte.vr-immoservice-mainfranken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldnick.thesatanicwarlock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.gitaliamagazine.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'print.werwaswo.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programme.holiday-event.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.ehs-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.citymatters.london'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.beck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.epaper-kiosk.beam-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.paginasiete.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.quittenprojekt-bergstrasse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.sufijournal.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001657b441a7f0000040300473045022010780cff5139de8bc58ce22331c11b978d706894c25d1866d357cd1a39314201022100da35322a250c132e6ba0ab734598411cd2f79f9eedf74ea70cbd78bf8c8def0c007700a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a25000001657b441a490000040300483046022100db9e879fd23772e81baa2dc61a312347c5698a8af3e43e1923a7f6cbe4d2f1f4022100a17a46a70eb621d822657d4583e48671f7c92a4fe8b23d9cfe461bf6c2d4d144
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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