ditsch.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d1:0f:99:1a:54:9b:88:e6:a9:67:ea:8d:47:bc:96:43:7d was issued on by Let's Encrypt.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ditsch.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:0f:99:1a:54:9b:88:e6:a9:67:ea:8d:47:bc:96:43:7d
Serial Number (int): 332476605857158959396282403949531461206909
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dd:18:c8:c6:86:2f:ac:ea:96:8d:4e:2d:9d:22:59:8a:e5:00:08:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 61:69:e3:4c:3c:f3:6d:7f:7d:d1:af:a3:d7:b6:e1:d4:89:73:ba:12
Fingerprint (sha256): 14:63:07:a9:4b:f6:61:bf:54:0d:ae:41:9b:da:63:be:6d:a7:1a:16:7c:71:e9:c3:b3:98:93:a8:1b:df:fd:fb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ditsch.de

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ditsch.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brezelbaeckerei-ditsch.at
brezelbaeckerei-ditsch.ch
brezelbaeckerei-ditsch.de
croissants.de
dev.ditsch.de
ditsch-brezelbaeckerei.com
ditsch-brezelbaeckerei.de
ditsch.at
ditsch.biz
ditsch.ch
ditsch.de
ditsch.info
laugenprodukte.de
oktoberfest-bretzel.de
oktoberfest-brezel.de
pretzel-king.us
www.brezelbaeckerei-ditsch.at
www.brezelbaeckerei-ditsch.ch
www.brezelbaeckerei-ditsch.de
www.croissants.de
www.ditsch-brezelbaeckerei.com
www.ditsch-brezelbaeckerei.de
www.ditsch.at
www.ditsch.biz
www.ditsch.ch
www.ditsch.de
www.ditsch.info
www.laugenprodukte.de
www.oktoberfest-bretzel.de
www.oktoberfest-brezel.de
www.pretzel-king.us
www.xn--brezelbckerei-ditsch-hzb.de
www.xn--brezelbckerei-hfb.de
www.xn--brezelknig-kcb.at
xn--brezelbckerei-ditsch-hzb.de
xn--brezelbckerei-hfb.de
xn--brezelknig-kcb.at

Other certificates including the domain name ditsch.de

(limited to 100 certificates)
owa.ditsch.de
*.ditsch.de
mzvc02.corp.ditsch.de
filialemonitoring.intranet.ditsch.de
ditsch.de
ditsch.de
citrix.ditsch.de
filialemonitoring.intranet.ditsch.de
*.ditsch.de
ditsch.de
intranet.ditsch.de
monitoring.intranet.ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
owa.ditsch.de
ditsch.de
ctxlogon.corp.ditsch.de
ditsch.de
ditsch.de
owa.ditsch.de
citrix.ditsch.de
*.ditsch.de
ditsch.de
intranet.ditsch.de
intranet.ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
monitoring.intranet.ditsch.de
citrix.ditsch.de
ctxlogon.corp.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
citrix.ditsch.de
mzctxnz01.corp.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
ditsch.de
adfs.ditsch.de
intranet.ditsch.de
ditsch.de
www.ditsch.de
www.ditsch.de
ditsch.de
monitoring.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
ditsch.de
filialemonitoring.intranet.ditsch.de
*.ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
*.ditsch.de
mzvc02.corp.ditsch.de
intranet.ditsch.de
intranet.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
filialemonitoring.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
*.ditsch.de
intranet.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ctxlogon.corp.ditsch.de
citrix.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ditsch.de
intranet.ditsch.de
www.ditsch.de
intranet.ditsch.de
owa.ditsch.de
intranet.ditsch.de
*.ditsch.de
intranet.ditsch.de
intranet.ditsch.de
intranet.ditsch.de

Certificate

The complete raw certificate details for ditsch.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT1KQIovupO68zGD+kfW
fg5WhgO1eKzWEKVo/fupSkmcd0+hI/nERA7GrBB4fin07j/4CPSZ9TvqQDw8VFOl
Jqm0RGsmjnDdmJLYOk35jrI/lbUkF4w7D52mvEcZ5EaxRinAnqf/Gt7zVnVd5Uxh
VRVBRSY8LncMjA6HO8kEfm9CersuNaNidj3Yfinf43PCripMGYyPxSgAEtV1iscV
M6lsQO7Ij435zMCCuIKS5r2PNLwce5Y4gABiKBvJ+Gnz0qa/59I2hHrUSnsPCGk0
IC8ZH6wYcw14ZFLgR1K9h/yZz8kAvrBuHNRGVMlMWibvcYNIGjqoxKHfUbAJlF2F
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332476605857158959396282403949531461206909
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 07:37:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 07:37:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ditsch.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25909075766801088267455779138415146816141705950548543731687381671914769079334594144133195605294469912731285499016479940677108410333006759271371379761671631124247117275390297320354837874095135045564651384945168216158433633976621437848952953153575184596684207795165792115687962791835244418011565239755701783812621582241923353353839649359254938769107545352429809048507979659547993109725292694506254018084110238627556013213923896410239762829451441268757492957888326378884705407518327086888976368717302463404640877574041982910899115690339700890730533355724092048103813150213685330848782385970074425226978784803266630616417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd18c8c6862facea968d4e2d9d22598ae500081c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (839 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelbaeckerei-ditsch.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelbaeckerei-ditsch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelbaeckerei-ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'croissants.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch-brezelbaeckerei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch-brezelbaeckerei.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laugenprodukte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oktoberfest-bretzel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oktoberfest-brezel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pretzel-king.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelbaeckerei-ditsch.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelbaeckerei-ditsch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelbaeckerei-ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.croissants.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch-brezelbaeckerei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch-brezelbaeckerei.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laugenprodukte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oktoberfest-bretzel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oktoberfest-brezel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pretzel-king.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brezelbckerei-ditsch-hzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brezelbckerei-hfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brezelknig-kcb.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brezelbckerei-ditsch-hzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brezelbckerei-hfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brezelknig-kcb.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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