ssl.1.damoh.manager-magazin.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d0:a5:12:b1:60:4b:55:f0:45:30:71:bc:4c:42:60:df:ef was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssl.1.damoh.manager-magazin.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d0:a5:12:b1:60:4b:55:f0:45:30:71:bc:4c:42:60:df:ef
Serial Number (int): 332335009793099623802970640146586579034095
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ae:f0:ce:96:19:e3:e3:cf:70:8a:bc:c4:32:e1:f9:d2:aa:86:bf:14
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): be:58:fe:27:da:6d:81:be:ec:d4:87:d0:57:51:58:7e:5a:84:5f:61
Fingerprint (sha256): 2b:f2:cf:5d:c0:97:a4:4b:ce:9f:9a:d8:c7:1a:fe:ce:62:8b:d0:b0:2e:16:66:7b:85:b8:80:79:71:b2:80:ee

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ssl.1.damoh.manager-magazin.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.1.damoh.manager-magazin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl.1.damoh.manager-magazin.de
ssl.2.damoh.manager-magazin.de
ssl.3.damoh.manager-magazin.de

Other certificates including the domain name manager-magazin.de

(limited to 100 certificates)
ftp.manager-magazin.de
www.manager-lounge.com
boerse.m.manager-magazin.de
umfrage.manager-magazin.de
qs.spiegel.de
akamai-san18.exacttarget.com
consent.planetradio.co.uk
click.angebote.manager-magazin.de
tagesgeld.manager-magazin.de
count.manager-magazin.de
wissen.manager-magazin.de
boersen.manager-magazin.de
akamai-san18.exacttarget.com
tagesgeld.manager-magazin.de
akamai-san18.exacttarget.com
magazin.spiegel.de
derspiegel.eu
tagesgeld.manager-magazin.de
www.manager-magazin.de
managermagazin.de
boersen.manager-magazin.de
boerse.m.manager-magazin.de
boersen.manager-magazin.de
abo.manager-magazin.de
link.manager-magazin.de
profilemobile.newsletter.manager-magazin.de
count.manager-magazin.de
profilemobile.newsletter.manager-magazin.de
www.manager-magazin.de
managermagazin.de
admin.dev.aboshop.manager-magazin.de
qs-tech.manager-magazin.de
manager-lounge.manager-magazin.de
amazon-kann-mich-mal.de
link.manager-magazin.de
view.angebote.manager-magazin.de
boerse.m.manager-magazin.de
newsletterversand.manager-magazin.de
newsletterversand.manager-magazin.de
ssl.1.damoh.manager-magazin.de
abo.manager-magazin.de
spiegel-tv.spiegel.tv
*.cmk.iqdigital.de
boersen.manager-magazin.de
sams.manager-magazin.de
derspiegel.eu
abo.spiegel.de
www.manager-magazin.de
ssl.1.damoh.manager-magazin.de
boersen.manager-magazin.de
rankings.manager-magazin.de
embed.spiegel.de
a.manager-magazin.de
gcp.dev.cm.spiegel.de
profile.newsletter.manager-magazin.de
profile.newsletter.manager-magazin.de
boersen.manager-magazin.de
boersen.manager-magazin.de
interactive.spiegel.de
profile.newsletter.manager-magazin.de
abo.spiegel.de
m.manager-magazin.de
m.manager-magazin.de
profile.newsletter.manager-magazin.de
akamai-san18.exacttarget.com
m.manager-magazin.de
events.manager-magazin.de
akamai-san18.exacttarget.com
www.manager-magazin.de
gruppenkonto.spiegel.de
ssl.1.damoh.manager-magazin.de
sams.manager-magazin.de
microshop.manager-magazin.de
cdn.review.www.manager-magazin.de
m.manager-magazin.de
abo.manager-magazin.de
advent.manager-magazin.de
www.manager-magazin.de
abo.spiegel.de
managermagazin.de
count.spiegel.de
gruppenkonto.spiegel.de
newsletterversand.manager-magazin.de
veranstaltungen.manager-magazin.de
amp-manager-magazin-de.manager-magazin.de
ssl.1.damoh.manager-magazin.de
boerse.m.manager-magazin.de
qs.abo.spiegel.de
profile.newsletter.manager-magazin.de
qs.cm.manager-magazin.de
derspiegel.eu
akamai-san18.exacttarget.com
amazon-kann-mich-mal.de
amp-manager-magazin-de.manager-magazin.de
akamai-san18.exacttarget.com
link.manager-magazin.de
live.manager-magazin.de
count.spiegel.de
www.manager-lounge.com
ebusiness.manager-magazin.de

Certificate

The complete raw certificate details for ssl.1.damoh.manager-magazin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGtTCCBZ2gAwIBAgISA9ClErFgS1XwRTBxvExCYN/vMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjEwODI4NThaFw0y
MDA0MjAwODI4NThaMCkxJzAlBgNVBAMTHnNzbC4xLmRhbW9oLm1hbmFnZXItbWFn
YXppbi5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALrOX2BBf4oQ
ijmeWkMILHjy+vGRdoBoDWmdXHfvouRrQIahTurAbRVsfAaoqhpDmWQNiVt6wcRD
/Ikwat1zqs3ZH5q3Fvb1YsmFggo6hZ8ehgrzY1gvl+jNYTncnd+oM6PFDJYYwewF
bOHIdZqALz0k/KyxjqQD6hZf7c6j8d0Oqmlrj8bAp7VLsozcDq3HVFl7pIdv16yE
xP3wgugNsHdBDjlmzA6SDTTqKBnplB+HzUmfv/aWmZFaRYeCbcs5YtlKGQF5lL0W
Z8aoSFe4j+c0mJtjCWoBw5Ag56M7qDUAuKkQPzGMVihdJ9p2vDpNn1UWJzhptAGH
Tx3BxeSAdyiwsj0vSUK2wZ7+qq+XhMJ2/8AtKuoK3T/Kxia8lxMCgcOAl6rkyPVN
wSjGtNc2MZNLB/peUKNtURT4sw3wdFMlfQXjZJROgOfJqdaV4WlHjCh0LxPHBjuX
XHo6ciks7lxOIU4zX1yu20iIeVzDbS9mEeIQQ/ZM+SJoQaPnvnG34+LgDHUHfHuv
9dVJqSI9sRX6zOtEkRmDSd/mFip0Ot8wGTgwPYP77Iyz8KkATVFksvCbHGQKeaLx
MiEI9LvzMfYEsikoOX209RIZAdc8pH5wC7/G8391cpPySaptZE1NzTIVxefYm0Yr
zZXLMhNjZDQ7Sm8L7P5GlJsznBXKGeblAgMBAAGjggK0MIICsDAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFK7wzpYZ4+PPcIq8xDLh+dKqhr8UMB8GA1UdIwQYMBaAFKhK
amMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYi
aHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYj
aHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8waQYDVR0RBGIwYIIe
c3NsLjEuZGFtb2gubWFuYWdlci1tYWdhemluLmRlgh5zc2wuMi5kYW1vaC5tYW5h
Z2VyLW1hZ2F6aW4uZGWCHnNzbC4zLmRhbW9oLm1hbmFnZXItbWFnYXppbi5kZTBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYE
gfMA8QB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABb8dvAvgA
AAQDAEcwRQIhAJTatGb7DzLA+DcJCiW6FhpvoE9zXl1RL9p1oHZqfQ5NAiAdPt8O
fGAMutxblC2whvaO4fjBf/9CXGLbAn/F6MNlTAB3ALIeBcyLos2KIE6HZvkruYol
IGdr2vpw57JJUy3vi5BeAAABb8dvBMMAAAQDAEgwRgIhALYXS436j5V4hZtKNZ2+
Xqx0cJScutqKkmvbvmZTjGyeAiEA41UA5IsbeKfjH2Rhm0dnlTi36CVY2rrCmelP
sbdqeMQwDQYJKoZIhvcNAQELBQADggEBAGMf5EpP8IEo3WnI5w3IxcPBis2T9pSA
jok1qxSRIb8AAmZVrxUx4Ht3eaqmkl+VFJp/yjR1CVacIXpz3Jm7UhBrQXPJOtcH
8gBlyCPlF8x3+bwL7mojfHSm9Fi09S4eieL2xJRLEaVTG/DFukC5/qWDoIWrBQH7
84buzOkb4mL7mea4K6QgBb+xPvqdDgh4TLD3oew+xiGUQDjv0s/BmtftD2/mkY7b
OILaZAPuVt4DIypV1N1ZXrE5PXFe1fZ8IHlCPzGprPYBHZBrCwaZP2bcxYUDRh2g
X5s+MDFirgA/d0yP8GIvLVeHgBoIrpeSeLagMvb0BY9bfMKG/K78hMU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332335009793099623802970640146586579034095
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 08:28:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-20 08:28:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.1.damoh.manager-magazin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 762102572434540674200277571222858639269488101578706533610097792928910736370496039776780067294791187410150189266656321088797274872467795968301232000044006084661110560502329797571459447980494154641428915519815702270903453769494602737864058177823236434226061343889552986558401937681524003136398080413279844889902883850076562511901297957860744555459639144610346619765670370220359364344271841631907074094068173796993700706868539164899132771335861873098519972708151817068074690713922807141073175695077758755834709429445096010482445725225635557762392087499660226043330279481896345507781792563289755673013055067560369283594525451699008151259415336321671960803722139320183273636975808647287884990396180634265673018782891046977637402746245558133019538472629597710249599546662554005830851952416524317824037372477045280369424845836674676172046495252947639017960531177924975178416005266348446148789588548557631796228830315440075025375144197527274235901143992500877689387830442095610903223748326476306296750656991239509364517376336973123279395356179797922972770263390389168832051959044349539268110064337511089352175628716501726184704667889977585487972265295983474955177983838301029084809989794609190930906588340774854405330532412041770617173305061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aef0ce9619e3e3cf708abcc432e1f9d2aa86bf14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.1.damoh.manager-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.2.damoh.manager-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.3.damoh.manager-magazin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fc76f02f8000004030047304502210094dab466fb0f32c0f837090a25ba161a6fa04f735e5d512fda75a0766a7d0e4d02201d3edf0e7c600cbadc5b942db086f68ee1f8c17fff425c62db027fc5e8c3654c007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fc76f04c30000040300483046022100b6174b8dfa8f9578859b4a359dbe5eac7470949cbada8a926bdbbe66538c6c9e022100e35500e48b1b78a7e31f64619b47679538b7e82558dabac299e94fb1b76a78c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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