hd.cbs.dk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6c:60:3f:91:7e:2b:b2:55:25:bf:da:9e:78:93:96:3f:fb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hd.cbs.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6c:60:3f:91:7e:2b:b2:55:25:bf:da:9e:78:93:96:3f:fb
Serial Number (int): 298215289375985198064460751371264817774587
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:2d:e2:46:b9:c3:90:80:1a:76:bb:6a:28:4f:95:68:16:70:6c:76
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c6:a9:4d:13:04:f1:8a:c2:0e:42:f4:7d:dd:e2:0e:ad:a2:c8:dd:e8
Fingerprint (sha256): 13:e1:f4:a8:19:e0:15:a8:ce:97:5a:79:59:ce:9c:98:10:39:ab:ad:ce:1e:7b:6a:83:02:26:7b:1b:d1:46:8c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hd.cbs.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hd.cbs.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hd.cbs.dk

Other certificates including the domain name cbs.dk

(limited to 100 certificates)
mmd.cbs.dk
graduateland.com
hd.cbs.dk
hd.cbs.dk
demo.mystudy.fit
libguides.cbs.dk
tlf-cucm-prd-10.tlf.cbs.dk
research.cbs.dk
tlf-web-prd-25.tlf.cbs.dk
graduateland.com
demo.mystudy.fit
www.service.cbs.dk
impact.cbs.dk
graduateland.com
careergate.sh.se
radiator.cbs.dk
careerland.dk
mpg.cbs.dk
careergate.sh.se
kursuskatalog.cbs.dk
libguides.cbs.dk
hd.cbs.dk
bluesocket2.cbs.dk
graduateland.com
tlf-cuc-prd-20.tlf.cbs.dk
mpg.cbs.dk
mail.cbs.dk
cse.cbs.dk
libguides.cbs.dk
help.student.cbs.dk
mbd.cbs.dk
graduateland.com
graduateland.com
tlf-uccx-prd-10.tlf.cbs.dk
graduateland.com
graduateland.com
demo.mystudy.fit
kursuskatalog.cbs.dk
studieliv.cbs.dk
hd.cbs.dk
libguides.cbs.dk
*.cbs.dk
graduateland.com
webdesk.oefu.cbs.dk
graduateland.com
hd.cbs.dk
flow.cbs.dk
career.cphbusiness.dk
graduateland.com
hd.cbs.dk
mmd.cbs.dk
career.cphbusiness.dk
hd.cbs.dk
cast.cbs.dk
mbd.cbs.dk
mpg.cbs.dk
mmd.cbs.dk
*.esc-web.lib.cbs.dk
demo.mystudy.fit
*.cbs.dk
*.cbs.dk
studieordninger.cbs.dk
cse.cbs.dk
mpg.cbs.dk
sgs.mic.cbs.dk
graduateland.com
impact.cbs.dk
impact.cbs.dk
careerland.dk
*.cbs.dk
res.docshare.cbs.dk
*.docshare.cbs.dk
graduateland.com
tlf-cucm-prd-10.tlf.cbs.dk
rh.cbs.dk
studieliv.cbs.dk
*.docarchive.cbs.dk
ocspool01.hhk.dk
radiator.cbs.dk
studieliv.cbs.dk
careerland.dk
cse.cbs.dk
career.cphbusiness.dk
mbd.cbs.dk
mbd.cbs.dk
hd.cbs.dk
studieliv.cbs.dk
libguides.cbs.dk
mmd.cbs.dk
eksamen.cbs.dk
eksamen.cbs.dk
help.student.cbs.dk
*.cbs.dk
studieliv.cbs.dk
mmd.cbs.dk
kursuskatalog.cbs.dk
kursuskatalog.cbs.dk
mmd.cbs.dk
webaccess.cbs.dk
graduateland.com

Certificate

The complete raw certificate details for hd.cbs.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSjCCBTKgAwIBAgISA2xgP5F+K7JVJb/anniTlj/7MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMjYxOTM3NDZaFw0x
OTAzMjYxOTM3NDZaMBQxEjAQBgNVBAMTCWhkLmNicy5kazCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBALBZy1hrv2MgyiSdUqBE1fQg/UkuY/jP7KKnG2VV
Ezj7TJfi8K+9L72mWC7w/NiFcjLLViDnDHCKUvpV+r9lIgwqUApSR6rn0JjFCjLj
ZNYWiqPJCbgQVaSdgygK29rrISlck71wbgij03c05m5K1PwYD6jknHIAOSmijQt7
jFweKLj/8MR0yuJZwSM2iCePgMMTW+XcQ0GuICeokzdb3Anama0kJEXZzFWjy1xi
WxEr4CITooyVBRwrKiV4opYfNvUvMM5BqFmJOT70n0KGIjci6GwWwppBZ40uxDyt
Bp5Nr/plKQH69MGpA4/nCUeMX2KSy9du1j5NJHSY+yDrA6IulcXOBN1RiC/ox57s
JA74ze8XoSTmnbyu32tYOo/E7Y/DeBLSqS4Zpd++W2wN0TzWFPIDBDWluwTsJVL5
QlHJ07QK7TCZ0LCYQYAnPBzr9DCAWzAfGRnknNv+lAOabkzof36P4MCHOF/Jjf+a
u5Q8xfhOKICJ6Y/dpV5zblR5SemyPfb4MqbVEHA8hq1OxXf55/EVsybWq8oFJE0F
0HovVdVJpmTG8w5vsobah/V2V/LADxv1tZGPrj5slvIR2yLs50Pr7lxUUPgFzhtM
Gd1jw8mRRd93H7+NITI8A+AQhO4i7DncN27DFPNPkP0HtxWapG9sm87oIsWrUKha
pFvbAgMBAAGjggJeMIICWjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNot4ka5w5CA
Gna7aihPlWgWcGx2MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJaGQuY2JzLmRrMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA4mlL
ribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFn7DzJ7QAABAMARzBFAiEA
lhw4OEbJIBTUdM1zf56i3hI7DW2lUhHHG3vyX/QS2NkCIGQJQucj+ZXSPeEELSHF
6JOX26dchD4KfTsvYh/ekLNqAHYAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHH
aFRL2I0AAAFn7DzJ7gAABAMARzBFAiBDjHHyMBNGjgq+xWUBvmDsY84hGwujwu4D
ioyRTX/C2QIhAJwsC3m5fICPg6wzwIGJ4ncRN9PX33pUS2N9elsYf/TDMA0GCSqG
SIb3DQEBCwUAA4IBAQAu24mjGLWFyHRExPFPE353Q7knofFZ8lXGziaWWykdi7t9
GVarmFbxl97eVH/R1gEs8wl7xxkgycbCtkw+zV3H5DJntLNte7v0XltU1Gtgp/VM
FK6iJIsg11hASrQx8QwBO0VK/4R9UCDmtElbrXohBv3RYWYS9nJl0IYszoIv7o5C
O1HWD3mbE9e5qA9g+yo1RnowQ9UONdSH0owuXMPyWB/yvMKVZmqCTEz3VutNsIHg
xqp5OP7cQ0CWcOGgNLSsnksecgu5B2C0+Aj5+jsWh3neeIuTh0yBt57Z4MoXNiFA
oAt2etojw4nAW50cDkT1HPhEkrzmcP0P6QlthbWy
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsFnLWGu/YyDKJJ1SoETV
9CD9SS5j+M/soqcbZVUTOPtMl+Lwr70vvaZYLvD82IVyMstWIOcMcIpS+lX6v2Ui
DCpQClJHqufQmMUKMuNk1haKo8kJuBBVpJ2DKArb2ushKVyTvXBuCKPTdzTmbkrU
/BgPqOSccgA5KaKNC3uMXB4ouP/wxHTK4lnBIzaIJ4+AwxNb5dxDQa4gJ6iTN1vc
CdqZrSQkRdnMVaPLXGJbESvgIhOijJUFHCsqJXiilh829S8wzkGoWYk5PvSfQoYi
NyLobBbCmkFnjS7EPK0Gnk2v+mUpAfr0wakDj+cJR4xfYpLL127WPk0kdJj7IOsD
oi6Vxc4E3VGIL+jHnuwkDvjN7xehJOadvK7fa1g6j8Ttj8N4EtKpLhml375bbA3R
PNYU8gMENaW7BOwlUvlCUcnTtArtMJnQsJhBgCc8HOv0MIBbMB8ZGeSc2/6UA5pu
TOh/fo/gwIc4X8mN/5q7lDzF+E4ogInpj92lXnNuVHlJ6bI99vgyptUQcDyGrU7F
d/nn8RWzJtarygUkTQXQei9V1UmmZMbzDm+yhtqH9XZX8sAPG/W1kY+uPmyW8hHb
IuznQ+vuXFRQ+AXOG0wZ3WPDyZFF33cfv40hMjwD4BCE7iLsOdw3bsMU80+Q/Qe3
FZqkb2ybzugixatQqFqkW9sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298215289375985198064460751371264817774587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-26 19:37:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-26 19:37:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hd.cbs.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 719448328067437149392278026897511402291472559192122572932441842490565982056368917127400317937752142369825213138626748814207202721909317162386712772224925195207322053839775809486832492935249385698872215633318198243628409215893370777048774309520958259119186345689664064566387784602466907129005944571852049920279915637345573951947606407949490877178107273457268797839642745735428700325537333811221094765387178051655190005339436369318188064168054390159583919458675041288569295608563380088839295053157860882952827931423271900424303186895275408666018579975801956911491684359702097581470165332164530574449634768238266947421509070341446123069784422731689615375799156337888383608581401956323864721219220785631818306452900807358455796435908498369595585621568288726116170206078427103147670479789534926000077283175411801129564881285332619510356351052957499171187704508780729657513491224061954549987090093561860855753015828029011541031008939315223005725663673722394753131836612734923992175851733100583032694113023039742745530812356889717877267896072245225280697555457670726359253324987810139075103350375464108231210934977758187955443821263648307718434178591082901425939688831727633267907026656323920881528631567758837029393091433709481122452495323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da2de246b9c390801a76bb6a284f956816706c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hd.cbs.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167ec3cc9ed0000040300473045022100961c383846c92014d474cd737f9ea2de123b0d6da55211c71b7bf25ff412d8d90220640942e723f995d23de1042d21c5e89397dba75c843e0a7d3b2f621fde90b36a00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167ec3cc9ee00000403004730450220438c71f23013468e0abec56501be60ec63ce211b0ba3c2ee038a8c914d7fc2d90221009c2c0b79b97c808f83ac33c08189e2771137d3d7df7a544b637d7a5b187ff4c3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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