*.springer.com
Issued by R3
About this certificate
This digital certificate with serial number 03:49:9f:29:5c:43:29:09:78:f8:39:91:50:f4:9b:05:bc:aa was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.springer.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:49:9f:29:5c:43:29:09:78:f8:39:91:50:f4:9b:05:bc:aaSerial Number (int): 286389032587312920085829879884826672479402
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2c:e2:c4:eb:06:4b:43:06:02:41:b1:4a:e1:14:31:b0:ba:fe:04:c7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c1:d6:76:25:52:c6:b1:a6:cb:b6:34:ed:5e:42:9a:04:94:f4:df:bc
Fingerprint (sha256): 16:fb:a5:24:c8:e7:a3:3c:2d:e8:f5:fc:65:8d:f3:58:a9:18:58:9b:bb:74:e7:03:62:50:3d:36:83:de:22:8e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.springer.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.springer.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.springer.com
Other certificates including the domain name springer.com
(limited to 100 certificates)
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
www.3scale.net
springer2.map.fastly.net
adwizard.springer.com
springer2.map.fastly.net
fdus-51.freshdesk.com
lehrbuch-psychologie.springer.com
www.3scale.net
support13.cdnetworks.net
*.springer.com
springer2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting1e.map.fastly.net
*.springer.com
support13.cdnetworks.net
dns-vetting2.map.fastly.net
springer2.map.fastly.net
dns-vetting2.map.fastly.net
*.springer.com
dns-vetting2.map.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
support13.cdnetworks.net
www.springer.com
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
springer2.map.fastly.net
support13.cdnetworks.net
oda.springer.com
springer2.map.fastly.net
oda.springer.com
support13.cdnetworks.net
springer2.map.fastly.net
*.springer.com
springer2.map.fastly.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
springer2.map.fastly.net
support13.cdnetworks.net
dns-vetting2.map.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
fdus-51.freshdesk.com
*.springer.com
dns-vetting2.map.fastly.net
mailings.springer.com
support13.cdnetworks.net
support13.cdnetworks.net
*.springer.com
springer2.map.fastly.net
springer2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
i.ssl.fastly.net
dns-vetting1e.map.fastly.net
springer2.map.fastly.net
support13.cdnetworks.net
ict.kolibrie.nl
akamai-cn.springer.com
i.ssl.fastly.net
www.3scale.net
i.ssl.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
ftps.springer.com
dns-vetting1i.map.fastly.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
akamai-cn.springer.com
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting2.map.fastly.net
springer.com
www.springer.com
*.springer.com
dns-vetting1i.map.fastly.net
dns-vetting2.map.fastly.net
i.ssl.fastly.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
dns-vetting2.map.fastly.net
ict.kolibrie.nl
springer2.map.fastly.net
support13.cdnetworks.net
i.ssl.fastly.net
dns-vetting1e.map.fastly.net
support13.cdnetworks.net
www.springer.com
*.springer.com
dns-vetting2.map.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
www.3scale.net
springer2.map.fastly.net
adwizard.springer.com
springer2.map.fastly.net
fdus-51.freshdesk.com
lehrbuch-psychologie.springer.com
www.3scale.net
support13.cdnetworks.net
*.springer.com
springer2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting1e.map.fastly.net
*.springer.com
support13.cdnetworks.net
dns-vetting2.map.fastly.net
springer2.map.fastly.net
dns-vetting2.map.fastly.net
*.springer.com
dns-vetting2.map.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
support13.cdnetworks.net
www.springer.com
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
springer2.map.fastly.net
support13.cdnetworks.net
oda.springer.com
springer2.map.fastly.net
oda.springer.com
support13.cdnetworks.net
springer2.map.fastly.net
*.springer.com
springer2.map.fastly.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
springer2.map.fastly.net
support13.cdnetworks.net
dns-vetting2.map.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
fdus-51.freshdesk.com
*.springer.com
dns-vetting2.map.fastly.net
mailings.springer.com
support13.cdnetworks.net
support13.cdnetworks.net
*.springer.com
springer2.map.fastly.net
springer2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
i.ssl.fastly.net
dns-vetting1e.map.fastly.net
springer2.map.fastly.net
support13.cdnetworks.net
ict.kolibrie.nl
akamai-cn.springer.com
i.ssl.fastly.net
www.3scale.net
i.ssl.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
ftps.springer.com
dns-vetting1i.map.fastly.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
akamai-cn.springer.com
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting2.map.fastly.net
springer.com
www.springer.com
*.springer.com
dns-vetting1i.map.fastly.net
dns-vetting2.map.fastly.net
i.ssl.fastly.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
dns-vetting2.map.fastly.net
ict.kolibrie.nl
springer2.map.fastly.net
support13.cdnetworks.net
i.ssl.fastly.net
dns-vetting1e.map.fastly.net
support13.cdnetworks.net
www.springer.com
*.springer.com
Certificate
The complete raw certificate details for *.springer.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISA0mfKVxDKQl4+DmRUPSbBbyqMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjExMTkxMjU2MDJaFw0yMzAyMTcxMjU2MDFaMBkxFzAVBgNVBAMM Diouc3ByaW5nZXIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA yPc2Vrp1ZO+njAoas4MN1AdJR5ipbUpn1SGmNx7wtRSyiLv95qUhAGKcRY6GTrbc 0xT/qsd2hUJi4gPuPzOYS3fengZSnXHLGKK367V0DOsQRy1nnZ9sdODlIz4xkYZH zzGKl7vrjcGJImYP70bplVXkSLK5Kc+B10vJRZF0yhIsk7Emb45c8p5AKdC+ypjl pn3fK+FqvOSHt2H8sX8aYjvchnBIAtJlSMh0UYjK1jUf+fZx0L/wPh8ffI/FrxqL 8ljGdthGhVZ4g4DKr8sQpAQAJ+6pOph3ek9HhPH9GkzBI+dMFLI/h+FEPP3TPrFF MxINhE3gXHvMF7u7QpaXJwIDAQABo4ICSDCCAkQwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBQs4sTrBktDBgJBsUrhFDGwuv4ExzAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzAZBgNVHREEEjAQgg4qLnNwcmluZ2VyLmNvbTBMBgNVHSAERTBDMAgGBmeBDAEC ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl bmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AHoyjFTYty22IOo4 4FIe6YQWcDIThU070ivBOlejUutSAAABhJAsvrYAAAQDAEcwRQIhAKC7jUPxXEij W6oNzhDvGS6Voiw8DAVautOJ3gMpgqUjAiAdD0s1C1Kwabbw7V3tfghNS260hKe1 Fs1auncQyBVaPAB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAAB hJAswIMAAAQDAEYwRAIgJ2bhkMzFBmMPqT/9nHPX4N+ibHPxgd5Lx0eQsTD1wXoC IDhFYijp4JM3In7xuTWP6u2SgR8KTf0WFMRvRtcqgkNRMA0GCSqGSIb3DQEBCwUA A4IBAQANfVqSMF5Lix+ZZd87+OidOsBYM77WcFQ3yvzSqLj8a/40s1dExjwYFqSS fyHfALiw1nu9RRy6fuD8mjYap6uvJH3iWzvqG9OZgMrNl1rTdJBptEV1x6tYIBfP 62Dd/uZPMOq6ALyKO9nowcIrSphdlZEsob5fqY+hYQ4Oh0OqS1xTRwuHShIR1zFb 0vfsO1Y0I84zCQtu6xHklS3Ls1Ncg5KsArwHFuSFBjCctwV6Gac61bSKaBR7H10a GGTaUbzr1mAwOFcTULvUEB7PTJgPjBgFPWaV81WOi2zTsYBSSJZXMEdbJ4lVQajW b+9aM83RbqvgXhtoCtZCgJaLPHDr -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPc2Vrp1ZO+njAoas4MN 1AdJR5ipbUpn1SGmNx7wtRSyiLv95qUhAGKcRY6GTrbc0xT/qsd2hUJi4gPuPzOY S3fengZSnXHLGKK367V0DOsQRy1nnZ9sdODlIz4xkYZHzzGKl7vrjcGJImYP70bp lVXkSLK5Kc+B10vJRZF0yhIsk7Emb45c8p5AKdC+ypjlpn3fK+FqvOSHt2H8sX8a YjvchnBIAtJlSMh0UYjK1jUf+fZx0L/wPh8ffI/FrxqL8ljGdthGhVZ4g4DKr8sQ pAQAJ+6pOph3ek9HhPH9GkzBI+dMFLI/h+FEPP3TPrFFMxINhE3gXHvMF7u7QpaX JwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 286389032587312920085829879884826672479402 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-19 12:56:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-17 12:56:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.springer.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25369565902504742075493773706071045825762741758477986861942453685506477077180848155765714939916440920925660712873913020579127616490225693294145883383616443795182900024317772256692727450599019266997628609416646689664798232796788445600086767455762078728981402427141363297587397542722224754378979671041341517347999508334336975647843606756266050434215984547234288623210738039754709572817269845499720615246436830393606803109095099871457759283549927537374558091707117289305667827489248787008729508592700926528788482681915298730178579617061418429478421841580640316412659095641312607746445703560683493905570382870188914022183 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2ce2c4eb064b43060241b14ae11431b0bafe04c7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.springer.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000184902cbeb60000040300473045022100a0bb8d43f15c48a35baa0dce10ef192e95a22c3c0c055abad389de032982a52302201d0f4b350b52b069b6f0ed5ded7e084d4b6eb484a7b516cd5aba7710c8155a3c0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000184902cc083000004030046304402202766e190ccc506630fa93ffd9c73d7e0dfa26c73f181de4bc74790b130f5c17a022038456228e9e09337227ef1b9358feaed92811f0a4dfd1614c46f46d72a824351 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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