prd-infra-haproxy-ber-7b.int.chip.de
Issued by R3
About this certificate
This digital certificate with serial number 03:a4:f2:b5:cf:43:e5:18:e8:26:e3:69:d4:24:96:b5:54:65 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=prd-infra-haproxy-ber-7b.int.chip.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a4:f2:b5:cf:43:e5:18:e8:26:e3:69:d4:24:96:b5:54:65Serial Number (int): 317465783154863969415035253765049463166053
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 6b:40:4a:6a:84:20:e6:7f:9b:4f:a0:48:85:6f:5f:10:67:04:65:b0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ab:a4:a9:2c:f1:3b:66:74:69:22:a4:9f:b3:4c:b3:52:da:cd:a1:f5
Fingerprint (sha256): 12:4a:b6:70:fc:1d:1d:c6:5c:61:af:c9:15:3c:9d:2f:cd:80:22:73:6f:21:42:eb:38:84:2f:07:ae:7b:59:e9
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate prd-infra-haproxy-ber-7b.int.chip.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for prd-infra-haproxy-ber-7b.int.chip.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
prd-infra-haproxy-ber-7b.int.chip.de
Other certificates including the domain name chip.de
(limited to 100 certificates)
ssl.1.damoh.chip.de
prd-log-elasticsearch-ber-46.int.chip.de
suche.chip.de
testcenter.chip.de
pub.chip.de
asus-t300-chi-testblog.chip.de
data-6314dfb442.chip.de
bfops.io
*.chip.de
www.tarife.chip.de
testcenter.chip.de
api.docker1.chdi-server.de
bfops.io
np-develop.gutscheine.chip.de
forum.chip.de
kzsicw.chip.de
behave.chip.de
ops-infra-prometheus-ber-12.int.chip.de
mms.burda-forward.de
data-45ccb8748c.chip.de
nokia-8-testblog.chip.de
api.docker1.chdi-server.de
api.docker1.chdi-server.de
consent.planetradio.co.uk
dl.cdn.chip.de
handy-software.chip.de
branded-stories.chip.de
asus-t300-chi-testblog.chip.de
dl.cdn.chip.de
prospekte.chip.de
branded-stories.chip.de
api.docker1.chdi-server.de
api.docker1.chdi-server.de
jobs.chip.de
info.chip.de
kuendigen.chip.de
branded-stories.chip.de
branded-stories.chip.de
tags.fitforfun.de
api.docker1.chdi-server.de
branded-stories.chip.de
stg-log-elasticsearch-fra-26.int.chip.de
*.chip.de
stage.contentlounge.net
*.stg.int.chip.de
damoh.chip.de
gutscheine.chip.de
digito.chip.de
branded-story.chip.de
gopro-max-testblog.chip.de
autodiscover.chip.de
api.docker1.chdi-server.de
ops-log-elasticsearch-fra-75.int.chip.de
huawei-p9-testblog.chip.de
data-c66a1ae096.chip.de
testcenter.chip.de
www.tarife.chip.de
testcenter.chip.de
ops-log-elasticsearch-ber-b6.int.chip.de
mms.chip.de
acer-switch-alpha-12-testblog.chip.de
fsm.chip.de
*.chip.de
ssl.1.damoh.chip.de
kzsicw.chip.de
*.chip.de
bfops.io
pub.chip.de
acer-aspire-5-testblog.chip.de
data-c66a1ae096.chip.de
suche.chip.de
nokia-8-testblog.chip.de
data-1818d50639.chip.de
rt.chip.de
prd-infra-haproxy-ber-7b.int.chip.de
api.docker1.chdi-server.de
s.burda-forward.com
cmp.bestcheck.de
acer-aspire-5-testblog.chip.de
tags.fitforfun.de
mms.chip.de
api.docker1.chdi-server.de
damoh.chip.de
*.chip.de
np-staging.gutscheine.chip.de
forum.chip.de
ssl.1.damoh.chip.de
ssl.1.damoh.chip.de
bfops.io
cmp.bestcheck.de
info.chip.de
testcenter.chip.de
branded-stories.chip.de
api.docker1.chdi-server.de
nokia-8-testblog.chip.de
promo.chip.de
*.chip.de
forum.chip.de
sparalarm.chip.de
lumeo.chip.de
prd-log-elasticsearch-ber-46.int.chip.de
suche.chip.de
testcenter.chip.de
pub.chip.de
asus-t300-chi-testblog.chip.de
data-6314dfb442.chip.de
bfops.io
*.chip.de
www.tarife.chip.de
testcenter.chip.de
api.docker1.chdi-server.de
bfops.io
np-develop.gutscheine.chip.de
forum.chip.de
kzsicw.chip.de
behave.chip.de
ops-infra-prometheus-ber-12.int.chip.de
mms.burda-forward.de
data-45ccb8748c.chip.de
nokia-8-testblog.chip.de
api.docker1.chdi-server.de
api.docker1.chdi-server.de
consent.planetradio.co.uk
dl.cdn.chip.de
handy-software.chip.de
branded-stories.chip.de
asus-t300-chi-testblog.chip.de
dl.cdn.chip.de
prospekte.chip.de
branded-stories.chip.de
api.docker1.chdi-server.de
api.docker1.chdi-server.de
jobs.chip.de
info.chip.de
kuendigen.chip.de
branded-stories.chip.de
branded-stories.chip.de
tags.fitforfun.de
api.docker1.chdi-server.de
branded-stories.chip.de
stg-log-elasticsearch-fra-26.int.chip.de
*.chip.de
stage.contentlounge.net
*.stg.int.chip.de
damoh.chip.de
gutscheine.chip.de
digito.chip.de
branded-story.chip.de
gopro-max-testblog.chip.de
autodiscover.chip.de
api.docker1.chdi-server.de
ops-log-elasticsearch-fra-75.int.chip.de
huawei-p9-testblog.chip.de
data-c66a1ae096.chip.de
testcenter.chip.de
www.tarife.chip.de
testcenter.chip.de
ops-log-elasticsearch-ber-b6.int.chip.de
mms.chip.de
acer-switch-alpha-12-testblog.chip.de
fsm.chip.de
*.chip.de
ssl.1.damoh.chip.de
kzsicw.chip.de
*.chip.de
bfops.io
pub.chip.de
acer-aspire-5-testblog.chip.de
data-c66a1ae096.chip.de
suche.chip.de
nokia-8-testblog.chip.de
data-1818d50639.chip.de
rt.chip.de
prd-infra-haproxy-ber-7b.int.chip.de
api.docker1.chdi-server.de
s.burda-forward.com
cmp.bestcheck.de
acer-aspire-5-testblog.chip.de
tags.fitforfun.de
mms.chip.de
api.docker1.chdi-server.de
damoh.chip.de
*.chip.de
np-staging.gutscheine.chip.de
forum.chip.de
ssl.1.damoh.chip.de
ssl.1.damoh.chip.de
bfops.io
cmp.bestcheck.de
info.chip.de
testcenter.chip.de
branded-stories.chip.de
api.docker1.chdi-server.de
nokia-8-testblog.chip.de
promo.chip.de
*.chip.de
forum.chip.de
sparalarm.chip.de
lumeo.chip.de
Certificate
The complete raw certificate details for prd-infra-haproxy-ber-7b.int.chip.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISA6Tytc9D5RjoJuNp1CSWtVRlMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA5MDUyMDQ3MzZaFw0yMTEyMDQyMDQ3MzVaMC8xLTArBgNVBAMT JHByZC1pbmZyYS1oYXByb3h5LWJlci03Yi5pbnQuY2hpcC5kZTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAOIFph6j/EGC2JxSc0Z/0ywSSdT+B0Ge/sVB RolZwicUopaIIUjSKnmnsoYYKlOkUw0lc7LCBd43ywzB/1FHZbSInIWF1Gq++4Q+ F2GCX4hmgsfNgATWlhfu8XrnFfHrK5vTqq3Iif+Pm77R82pds/Xp6WrSpEV7SOrP Jc6fD28APbP8FsLLvvYe5TMBiBgjOb5CfFX8zTtd+XQLUS2GHUc3qDzxj2yfwRyo IyKUpIhQeBkOXL5KDSM2xjneVr5q0R2bLYo/OEYcFF0Sh3OEwUI2lbCqkZZQ+QtV wtJhsFAGztMO4geEjyNAvw46tTcBa8KAqo3S+hmM77cv3XjZvDXPtwRuRfo/z5Ih L5pGKs4xrJvGJrJ6jmeCh6+rA+jqUkc5k2KrmVJ3XHvzg5yqziaCjntnced2NzhB AojqkESo7L8qVAAUkVUtQruPJ2LWRtx4I3tBWv3kZD0tpnCb9uKhpjPU3tnajFQh y4+wLZyiCqPlcGIqfEK5NIYjyGWTvbFyHAqS2zPcY43bfyJsZIKw2L6479fC+IKr kZdAn9CQcMgQYQEVwmApHXPwcU6xsL3+0tQL4j3Jg+ik52Jhr3akEILrIphGzZ9S yb2FG82vhqBmf4oewtmvWkpnvchCh1jA4xyLjzsNXrFE2/7GVgHK2fCKPDCR8oc5 tiFbPOyjAgMBAAGjggFsMIIBaDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGtASmqE IOZ/m0+gSIVvXxBnBGWwMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLG MFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iu b3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMC8GA1UdEQQo MCaCJHByZC1pbmZyYS1oYXByb3h5LWJlci03Yi5pbnQuY2hpcC5kZTBMBgNVHSAE RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq hkiG9w0BAQsFAAOCAQEAKBDWAo9PHVwqG2Noll5mLt1PpXMDacr6vftcFa1nQdje LzrvD7of8UsaEUI7Pmb1qn9focte9YG9NNb5v1/oC/mvJDHojP/IesDqf9w25fKb CqVTHTxGoMZ3PU5wQ/ddN/oOY5b1jY20S7VyO9Kjn5KxhbzQvxZaWK5ggMlf/yD7 zPWu4pKarGXQr+DDm90JpkpX8Zxh/uVrtAO9FTThK3HnlNCCni7iSyLsWJ4u7bEG JipufIfk2xHK1hcsJQUC6GYnBpn/qu3j/kU/BIrxCPFzjKEerNziN3f5Ummzzu52 WpojzHFwsO1IlZku7PNfP9VNSkTAWXtIPM0cQ+XvhA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4gWmHqP8QYLYnFJzRn/T LBJJ1P4HQZ7+xUFGiVnCJxSiloghSNIqeaeyhhgqU6RTDSVzssIF3jfLDMH/UUdl tIichYXUar77hD4XYYJfiGaCx82ABNaWF+7xeucV8esrm9OqrciJ/4+bvtHzal2z 9enpatKkRXtI6s8lzp8PbwA9s/wWwsu+9h7lMwGIGCM5vkJ8VfzNO135dAtRLYYd RzeoPPGPbJ/BHKgjIpSkiFB4GQ5cvkoNIzbGOd5WvmrRHZstij84RhwUXRKHc4TB QjaVsKqRllD5C1XC0mGwUAbO0w7iB4SPI0C/Djq1NwFrwoCqjdL6GYzvty/deNm8 Nc+3BG5F+j/PkiEvmkYqzjGsm8YmsnqOZ4KHr6sD6OpSRzmTYquZUndce/ODnKrO JoKOe2dx53Y3OEECiOqQRKjsvypUABSRVS1Cu48nYtZG3Hgje0Fa/eRkPS2mcJv2 4qGmM9Te2dqMVCHLj7AtnKIKo+VwYip8Qrk0hiPIZZO9sXIcCpLbM9xjjdt/Imxk grDYvrjv18L4gquRl0Cf0JBwyBBhARXCYCkdc/BxTrGwvf7S1AviPcmD6KTnYmGv dqQQgusimEbNn1LJvYUbza+GoGZ/ih7C2a9aSme9yEKHWMDjHIuPOw1esUTb/sZW AcrZ8Io8MJHyhzm2IVs87KMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 317465783154863969415035253765049463166053 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-05 20:47:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-04 20:47:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prd-infra-haproxy-ber-7b.int.chip.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 922089580942583580845732974137971466096462921804348356787832877705710718459467179409547376728240757791889596751405451417466554211241870843625846165070021976592135888139634500174870647488042212734424783437387570952306956469290694051667675637518850668466072391103259486024669339299755524373949243071205384806881526242607904995362575252024137586892478820354548452149292513971620057088472559558771078917444671305192981147570631902241840029903956298327768259619370862822589887126159757108093563124537437984996477745784587366411416760538465942792910482350894275168488393012989239571010411300094473238237399265173856031614647600434558567749277225614496887786156766267828919460883621599933857892767689773973132661963472612804605835326623484806169869873976377939473992165103826969828639476871536978763206376664836638306966443724763075043080205666595588782099833702684097886141374956041834663853315219500063957153772284404863480929294129438253976542865141398541599173662295038232373824766713413075057458932129432107729810355333568387541810523363281402100242326597846865413336932881743849509303048870341614130768859648625583341032315650557785040997429145910308542652567755244733385168783143675177210028163373888495192846302874445774936721910947 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6b404a6a8420e67f9b4fa048856f5f10670465b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd-infra-haproxy-ber-7b.int.chip.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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