tesztelok.hu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:75:c2:f2:2d:48:59:4a:6f:89:fd:9b:65:20:12:c7:03:ef was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tesztelok.hu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:75:c2:f2:2d:48:59:4a:6f:89:fd:9b:65:20:12:c7:03:ef
Serial Number (int): 301409022410493073291181080952688072917999
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 74:a5:a8:50:14:3e:f3:26:0f:cf:69:48:e8:30:4b:14:d1:e5:f8:1d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 96:a9:b7:bb:c3:c6:48:1f:64:18:a7:bb:80:f3:20:fe:2f:f0:60:8f
Fingerprint (sha256): 3e:43:49:f2:69:d4:61:b9:59:33:2d:7d:c1:02:ec:b6:d2:63:b2:34:48:83:16:62:37:6c:66:7d:8f:9f:a5:8e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tesztelok.hu

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tesztelok.hu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.tesztelok.hu
cpanel.tesztelok.hu
mail.tesztelok.hu
tesztelok.autotveszek.hu
tesztelok.hu
webdisk.tesztelok.hu
webgalamb.autotveszek.hu
webmail.tesztelok.hu
www.tesztelok.autotveszek.hu
www.tesztelok.hu
www.webgalamb.autotveszek.hu

Other certificates including the domain name tesztelok.hu

(limited to 100 certificates)
tesztelok.hu
www.tesztelok.hu
jannah.tesztelok.hu
tesztelok.hu
tesztelok.hu
jannah.tesztelok.hu
tesztelok.hu
www.tesztelok.hu
tesztelok.hu
tesztelok.hu
tesztelok.hu
www.tesztelok.hu
jannah.tesztelok.hu
jannah.tesztelok.hu
www.tesztelok.hu
cpanel.tesztelok.hu
jannah.tesztelok.hu
www.tesztelok.hu
jannah.tesztelok.hu
jannah.tesztelok.hu
www.tesztelok.hu
tesztelok.hu
tesztelok.hu

Certificate

The complete raw certificate details for tesztelok.hu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG+DCCBeCgAwIBAgISA3XC8i1IWUpvif2bZSASxwPvMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MjEyMTMyMTVaFw0x
ODEyMjAyMTMyMTVaMBcxFTATBgNVBAMTDHRlc3p0ZWxvay5odTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBALLrWAmxiZfKwj4M9W3cbh9DFuqvsII7ILc8
Di1SAnmpfaMaC8j5mrwvjGtkC8DzYE/rZNWuKaiwcswJxPLY0nxbS/F0Aqztri3e
AJmvmVLKZe0Yo12a3TfiWkBp12ua5a1oaNO5CjuY9rBEdduGt6xni1scYmNmJTW8
tQyxofPzt0fUOZawZLs1vw3+jE85jgxFdCYhsfUOVxPOzvA8S4nPNGOesKTarzJK
iH6EN5SS/cb85PK4gfhCL7Ds0WYdWbUOmNPcghlN3xMnQhL9Qn0PfduU343KrdDX
6Ojg50Kg01q+ueF90jhUwN8abs+Gv5VtDVNtWhnOkQFnbknzRwECAwEAAaOCBAkw
ggQFMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUdKWoUBQ+8yYPz2lI6DBLFNHl+B0w
HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh
MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
LzCCAQsGA1UdEQSCAQIwgf+CGWF1dG9kaXNjb3Zlci50ZXN6dGVsb2suaHWCE2Nw
YW5lbC50ZXN6dGVsb2suaHWCEW1haWwudGVzenRlbG9rLmh1ghh0ZXN6dGVsb2su
YXV0b3R2ZXN6ZWsuaHWCDHRlc3p0ZWxvay5odYIUd2ViZGlzay50ZXN6dGVsb2su
aHWCGHdlYmdhbGFtYi5hdXRvdHZlc3play5odYIUd2VibWFpbC50ZXN6dGVsb2su
aHWCHHd3dy50ZXN6dGVsb2suYXV0b3R2ZXN6ZWsuaHWCEHd3dy50ZXN6dGVsb2su
aHWCHHd3dy53ZWJnYWxhbWIuYXV0b3R2ZXN6ZWsuaHUwgf4GA1UdIASB9jCB8zAI
BgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8v
Y3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRp
ZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGll
cyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBv
bGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5
LzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ANt0r+7LKeyx/so+cW0s5bmquzb3
hHGDx12dTze2H79kAAABZf5DHJEAAAQDAEcwRQIhAJFC7gi1WJ6ui9TF2CLvmRf/
L/Rnj6lWwvnycE0MD6acAiB0pQ2j4IObUMeA6ntw2AS5Nt4H8zFhm7p6G9lxposx
NwB1ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZf5DHUYAAAQD
AEYwRAIgVOumc77QVoka54X5Kad/wNn33N5pMfLjFYTiq78h+CACIExmHBej+hF/
/Re4mJ56962y1XQ1ssjwcedzUnJfDkmqMA0GCSqGSIb3DQEBCwUAA4IBAQByW3Gp
QJBYLRGgDKEAHOcpni+a7JkX/cUzTT5LnoSEgaEW5DJa8gnN0t5TaQoadWtoAjAZ
oRPXjgXmuOIf4Y3Nge/F017Z2uMK1DbOKtKgAO12uMQjZIKPG5HODm81W/w6BcSp
S+wjSo0xSKcKrtTxX5KV1NgECyNd3TsY3bAP08HXQfQDCO1E2WAypW0uEq/t+V9k
PZRGNkvMUSHNqd0qnPQy7NkvqQ2eQr4JOZ9RKcSlal79T5hvdfGXpdfPm8X9CNon
oAA58Zlv58v0eAUtT8v3TDvRGQi/4WfExa/9mVxSf9DnOgbYKWTVN0qiAvn8VsBW
FNVeC3zH0g8ZNZnw
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsutYCbGJl8rCPgz1bdxu
H0MW6q+wgjsgtzwOLVICeal9oxoLyPmavC+Ma2QLwPNgT+tk1a4pqLByzAnE8tjS
fFtL8XQCrO2uLd4Ama+ZUspl7RijXZrdN+JaQGnXa5rlrWho07kKO5j2sER124a3
rGeLWxxiY2YlNby1DLGh8/O3R9Q5lrBkuzW/Df6MTzmODEV0JiGx9Q5XE87O8DxL
ic80Y56wpNqvMkqIfoQ3lJL9xvzk8riB+EIvsOzRZh1ZtQ6Y09yCGU3fEydCEv1C
fQ9925Tfjcqt0Nfo6ODnQqDTWr654X3SOFTA3xpuz4a/lW0NU21aGc6RAWduSfNH
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301409022410493073291181080952688072917999
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-21 21:32:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-20 21:32:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tesztelok.hu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22586470685350661032428227999650041534888835182345595440028637545270313108511296022890863408519815083843608301216255323078831545923630816463319892516949062358686025561949070642163017044463580414370671957355036874615328052074245896847020460501453637168228549054559860901955232365234166998423851912332395534057302405956059917007838634563472510945966719174249822799071670174378213610883627682621283870165754123863846146325339138345059417252886564355011381496385702516109971891811284203367702639486255496734506382616221188829080887894167131568367625586840334504624737771970138380187818221288809354316102373546701746292481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74a5a850143ef3260fcf6948e8304b14d1e5f81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (258 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tesztelok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.tesztelok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tesztelok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesztelok.autotveszek.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesztelok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.tesztelok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webgalamb.autotveszek.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.tesztelok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tesztelok.autotveszek.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tesztelok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webgalamb.autotveszek.hu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165fe431c9100000403004730450221009142ee08b5589eae8bd4c5d822ef9917ff2ff4678fa956c2f9f2704d0c0fa69c022074a50da3e0839b50c780ea7b70d804b936de07f331619bba7a1bd971a68b3137007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165fe431d460000040300463044022054eba673bed056891ae785f929a77fc0d9f7dcde6931f2e31584e2abbf21f82002204c661c17a3fa117ffd17b8989e7af7adb2d57435b2c8f071e77352725f0e49aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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