kiosk.dorfstadt.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:32:2a:f7:6f:84:d0:58:f4:3f:03:cd:a7:c7:46:65:ab:56 was issued on by Let's Encrypt.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kiosk.dorfstadt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:32:2a:f7:6f:84:d0:58:f4:3f:03:cd:a7:c7:46:65:ab:56
Serial Number (int): 278408088476344751560279752046930106362710
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 37:ac:18:7d:29:00:9c:c4:7d:84:29:16:09:00:fd:5a:cb:81:57:de
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c2:c2:46:4c:79:01:b0:8c:b3:0f:f9:2f:70:3b:d4:89:27:40:5d:1b
Fingerprint (sha256): 43:b3:61:88:b3:2c:3e:b7:2f:26:ec:9b:4a:c4:d2:da:6d:5f:d8:88:d8:6b:f7:43:c7:9d:86:52:89:3b:30:ba

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kiosk.dorfstadt.de

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kiosk.dorfstadt.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

andermatter.andermatt-swissalps.ch
autodiscover.epaper-poonen.neuer-bund-verlag.de
booker.turningpages.me.uk
catalogues.alfacareinternational.com
ebook.aimara.ch
egsk.weita.ch
epaper.bielbienne.com
epaper.ehg-stahl.com
epaper.wta-suhl.de
fu-kiosk.futuriststeam.co.uk
gastro.papstar.de
katalog.isa-racing.com
katalog.promondo.de
kataloger.alfacare.no
kiosk.dorfstadt.de
kiosk.heinmedia.eu
kiosk.ownersclub.immo
kiosk.rattpack.eu
kiosk.velototal.de
kiosk.visionen.com
lies.buchaktuell.de
magazine.arbeit-und-arbeitsrecht.de
magazine.infoboard.de
media.auvesy.com
neubau-projekte.vr-immoservice-mainfranken.de
oldnick.thesatanicwarlock.com
online.gitaliamagazine.it
oppelt-kuechen.mediaflip.de
print.werwaswo.eu
programme.holiday-event.de
publikationen.ehs-verlag.de
read.citymatters.london
webkiosk.beck.de
webkiosk.epaper-kiosk.beam-verlag.de
webkiosk.paginasiete.bo
webkiosk.quittenprojekt-bergstrasse.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosks.sufijournal.org

Other certificates including the domain name dorfstadt.de

(limited to 100 certificates)
www.revistacipcisa.com
broschuere.bildkunstakademie.de
kataloge.vitaltours.de
digiprospekt.freyplus.de
kiosk.dolcevita-magazin.ch
catalogs.k7-pro.com
immobilienmagazin.steinauer-immo.ch
magazine.montana-cans.com
app.procycling.de
magazine.montana-cans.com
digital.queencityconnections.com
magazine.montana-cans.com
publications.nursingald.com
www.maryspubs.com
www.dorfstadt.de
webkiosk.magazinmarley.de
digital.queencityconnections.com
angebote.dersteirerhof.at
magazine.biss.team
read.africanphotomag.co.ke
kiosk.leuchtfeuer-verlag.com
www.dorfstadt.de
kataloge.triplex-fischer.de
kurse.bdb-musikakademie.de
app.worldofmtb.de
magazine.biss.team
digital.queencityconnections.com
kataloge.holzimpraegnierwerk.ch
digital.queencityconnections.com
digital.queencityconnections.com
publications.nursingald.com
digital.queencityconnections.com
katalog.hltravel.at
app.fahrrad-news.com
immomagazin.wegenerimmobilien.de
webkiosk.edeka-koehne.de
kataloge.otto-pokale.de
digital.queencityconnections.com
publications.nursingald.com
webkiosk.magazinmarley.de
brochures.adipec.com
webkiosk.airhoppark.de
catalogs.k7-pro.com
brochures.hts-touristik.de
publikationen.manres.ch
biblioteca.sciens.com.ar
digital.queencityconnections.com
kurse.bdb-musikakademie.de
publications.nursingald.com
magazine.biss.team
kiosk.thewholenote.com
epaper.asscompact.de
rieswick.mediaflip.de
brochures.hts-touristik.de
kataloge.werbeartikel-laeser.ch
magazine.biss.team
magazine.biss.team
ebooks.teammelanie.nz
webkiosk.werk5.ch
webkiosk.lurkoi.com
webkiosk.lurkoi.com
webkiosk.magazinmarley.de
kiosk.suncruisermedia.com
kiosk.dorfstadt.de
magazine.biss.team
read.africanphotomag.co.ke
kurse.bdb-musikakademie.de
publications.nursingald.com
katalog.hltravel.ch
magazine.biss.team
brochures.adipec.com
kataloge.otto-pokale.de
kiosk.tsg-reutlingen.info
epaper.asscompact.de
prospekte.wernigerode-tourismus.de
katalog.hltravel.ch
kataloge.pricon.one
catalogs.k7-pro.com
kurse.bdb-musikakademie.de
magazine.montana-cans.com
webkiosk.magazinmarley.de
biblioteca.sciens.com.ar
digital.queencityconnections.com
publications.nursingald.com
epaper.asscompact.de
kiosk.leuchtfeuer-verlag.com
kiosk.leuchtfeuer-verlag.com
brochures.hts-touristik.de
magazine.biss.team
mitarbeitermagazin.uk-essen.de
kiosk.hinzundkunzt.de
digital.queencityconnections.com
kurse.bdb-musikakademie.de
digital.queencityconnections.com
magazine.montana-cans.com
app.procycling.de
epaper.technischesysteme.com
kataloge.kurdirekt.de
magazine.montana-cans.com
epaper.chili-peppers.de

Certificate

The complete raw certificate details for kiosk.dorfstadt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e61uZdQTys9aX1QnlqZ
b4tf3cATnpYvCiAcEoRAuf2CEIiNzvY9wfL+FRIn1dN2ZGt7hDQGO3bVjXduFGPO
4rmssDM2WKxg1+3WLxApjQfLfZTHezWtCmqwG8nEPC1JLOJP7v7+19f4tu6lIx+T
d1C0FsOgcf6IPT02ukKponP+kbjVUiIJrMUPinuGylvquXaXDl2EUdpvPktwGZBn
F2+Beqs4yBViaHozaL2ziynnm+Kpu8rbJV7OYP3gTIXzmHn+vFNhww0soYAUCRAh
wbETMInoO019mNT6le7uXUznn3TJSnDfV5LGn/P3eq8t1PUAOIab0SPgKMbM38Yw
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278408088476344751560279752046930106362710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-31 11:07:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-29 11:07:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kiosk.dorfstadt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26501517958617586607570148486656365211574129653893723709331492910552337657398818853580789603381168976522210727130010901893707472062893596305376411860193896138952067796397979302632840296870602875574524606294025775533988789985168884076447371936041423597160910387560247555139769515520294023679477164747890594644547194235533712117168751281066020302971233294666603840569951585317110854066872099281418664719471141062890654277012710204781589099412296390106541270470590638681436293038447060891804182945459001563449404768322765102636947522718302666826125625409213398937783846641291801915343208852392801695524378623897898463387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37ac187d29009cc47d8429160900fd5acb8157de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1031 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andermatter.andermatt-swissalps.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.epaper-poonen.neuer-bund-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booker.turningpages.me.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogues.alfacareinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebook.aimara.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egsk.weita.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.bielbienne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.ehg-stahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.wta-suhl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fu-kiosk.futuriststeam.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gastro.papstar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.isa-racing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.promondo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloger.alfacare.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.dorfstadt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.heinmedia.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.ownersclub.immo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.rattpack.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.velototal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.visionen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lies.buchaktuell.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.arbeit-und-arbeitsrecht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.infoboard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.auvesy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neubau-projekte.vr-immoservice-mainfranken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldnick.thesatanicwarlock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.gitaliamagazine.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oppelt-kuechen.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'print.werwaswo.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programme.holiday-event.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.ehs-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.citymatters.london'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.beck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.epaper-kiosk.beam-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.paginasiete.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.quittenprojekt-bergstrasse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.sufijournal.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f63360000001658fe1356f000004030047304502203e128d21eff5fc673acef5af8bf89bce83abe45110bef88aaca3d76967f5227c022100df04735be845b74ea46004815030a21f7a66fad24c057d01a1d1360e01fe1790007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001658fe137720000040300483046022100ed3a4f5c45ecc639bb990c1fed176b72579976e66df8c8e827c1056b39d3000b0221008f472ce007fcd5cae7f9a21decd9a69efdf14e4e093efcdb92158b4224690a28
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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