pu.schlittermann.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cc:1a:7a:4b:42:85:a9:ac:75:aa:b6:f9:b1:68:6a:e6:6d was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pu.schlittermann.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cc:1a:7a:4b:42:85:a9:ac:75:aa:b6:f9:b1:68:6a:e6:6d
Serial Number (int): 330789655561710481177070385375662383490669
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:13:44:2a:e0:95:e3:bc:e4:1e:5c:df:5c:5b:91:77:8a:97:d6:ad
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c7:90:b8:30:bb:8c:2a:f8:5b:dd:35:05:fe:41:77:14:d0:1c:12:96
Fingerprint (sha256): 43:bb:7a:a4:d6:e7:a1:a3:49:61:d9:f5:dc:00:68:42:9a:94:29:7e:0a:25:c5:af:49:80:25:d8:e7:3a:c1:d3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pu.schlittermann.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pu.schlittermann.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pu.schlittermann.de
schlittermann.de
ssl.schlittermann.de

Other certificates including the domain name schlittermann.de

(limited to 100 certificates)
www.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
hg.schlittermann.de
svn.schlittermann.de
accounting.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
rric-cx.dyn.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
www.schlittermann.de
w.schlittermann.de
rric-cx.dyn.schlittermann.de
hg.schlittermann.de
hg.schlittermann.de
svn.schlittermann.de
www.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
git.schlittermann.de
muli.schlittermann.de
lug-dd.schlittermann.de
git.schlittermann.de
www.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
pu.schlittermann.de
accounting.schlittermann.de
git.schlittermann.de
mailman.schlittermann.de
webmail.schlittermann.de
ssl.schlittermann.de
accounting.schlittermann.de
lug-dd.schlittermann.de
git.schlittermann.de
pu.schlittermann.de
ssl.schlittermann.de
webmail.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
w.schlittermann.de
ssl.schlittermann.de
accounting.schlittermann.de
muli.schlittermann.de
chat.schlittermann.de
owncloud.schlittermann.de
www.schlittermann.de
owncloud.schlittermann.de
fubus.de.hs12.schlittermann.de
w.schlittermann.de
fubus.de.hs12.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
www.schlittermann.de
mailman.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
www.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
otrs.schlittermann.de
www.schlittermann.de
mailman.schlittermann.de
git.schlittermann.de
www.schlittermann.de
icinga.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
pu.schlittermann.de
lug-dd.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
git.schlittermann.de
roundcube.schlittermann.de
www.schlittermann.de
otrs.schlittermann.de
git.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
mailman.schlittermann.de
otrs.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
accounting.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
pu.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
w.schlittermann.de

Certificate

The complete raw certificate details for pu.schlittermann.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGiDCCBXCgAwIBAgISA8waektChamsdaq2+bFoauZtMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjIwNTUxMzJaFw0y
MDAxMjAwNTUxMzJaMB4xHDAaBgNVBAMTE3B1LnNjaGxpdHRlcm1hbm4uZGUwggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDFsZFDQ4LgFyR9SMPhua9FDwt7
PKAd0OVgFrODvm7iH68uYqBL2s9iNCHWDCNkPmrFoscdJN0lzr40fHsuVYoENkuQ
fF0hXNPTqRGPunCxcOjdcgp9SzCBJftWsjAK3Cwvhv9+C7widit+UW2fZOhNH2lJ
aLq0rQQew7VeDNTRKirPMj51knm64rMJL9ThoLCQrfOUhH/4YlrDCmMqL2cOEpcu
0TDTm67nJsGgLTTQtcxyrOwV3MZ48E1vuItzQutPM9yXqAl4U1oxdv2lJ7gOX6A7
h8CnKXwn3P06tEDYPgx3kY0MtvVIOl3spYOlR/DOke9VmYsQA46UuiJ8KhHZktnH
i82TDDte3sJRUGOszrAkHVsv2GlkoX6VI+IB5TD4GQVQlnRFR9vjyXbGnektioeP
l/Oo+SMgGsWVU0RTpqJGDNI5vEASJLjYIAC3s+hUvwJr8/FakNlWhr9uWxSgDzhC
Ub6ol2YKZ7rrYWw51jhhfjROt0mToURKi46fiAWZttlPrS/taTe7qL7C2ORaNJ3H
MYUWrXKBd+zg31rr8KP3t49QG84GG4q0Vs/lGtzIviwQhbf5sr6EY5vfy0lCO0Fk
PQETsbPNwNAaZfp0wZBa+f1ky65I1tGDsOKIC+QYYNnwsa2ex6sFPJ/kxp8u6OF1
qtPCg7d++33xVe/CpQIDAQABo4ICkjCCAo4wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBQ5E0Qq4JXjvOQeXN9cW5F3ipfWrTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem
RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMEYGA1UdEQQ/MD2CE3B1LnNjaGxpdHRl
cm1hbm4uZGWCEHNjaGxpdHRlcm1hbm4uZGWCFHNzbC5zY2hsaXR0ZXJtYW5uLmRl
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB
9wSB9ADyAHcAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFt8jwt
MgAABAMASDBGAiEAoAAOAzCDgN90s/qzgrxa9qqwH0NIB0JCqJRrjxQR3UkCIQDC
bVCJERa8DvytLAJssspvwhY0ay5gZULPDDcFqQEQawB3ALIeBcyLos2KIE6HZvkr
uYolIGdr2vpw57JJUy3vi5BeAAABbfI8LSAAAAQDAEgwRgIhAPobpO05zBhFPa8G
g80w7h2UmaX1xGmUcXy9yafUTaQGAiEAmR1S5CML2NWin6HqZGj9da0zlI/5Mozt
4lo0X630LAgwDQYJKoZIhvcNAQELBQADggEBAGV5gmyENdItNfy3XZ/7N+QGjpOd
Dxz/fEPlakQVE2oNND/aQOtVPdKNlPKUG7vRCGi0YatrsbsVWXqxkOvOYf7zlYyd
zL1kaFpfQu5vRa/GbHwSnlFhM5IolRWcxBLYeNXDbaSaISWa9wDycP5C7MaL3wo9
XX2EcfklpAXalW56ulQSfgfbAA/Ubff3eg45pcnGkl93cyNXw9BQGdVjx3VRdiTI
cTrbOTREohBmBw4MIH9JZ+WuP1s9xpNKx6VpKRxkYkA6GpFQndfSqJbkw1AW0NiT
JXW3Bfueu3uImV6efAy9p/IHgd/c/JW6aYT3GHMrsIS9UpIIM/c6fgbRiyw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxbGRQ0OC4BckfUjD4bmv
RQ8LezygHdDlYBazg75u4h+vLmKgS9rPYjQh1gwjZD5qxaLHHSTdJc6+NHx7LlWK
BDZLkHxdIVzT06kRj7pwsXDo3XIKfUswgSX7VrIwCtwsL4b/fgu8InYrflFtn2To
TR9pSWi6tK0EHsO1XgzU0SoqzzI+dZJ5uuKzCS/U4aCwkK3zlIR/+GJawwpjKi9n
DhKXLtEw05uu5ybBoC000LXMcqzsFdzGePBNb7iLc0LrTzPcl6gJeFNaMXb9pSe4
Dl+gO4fApyl8J9z9OrRA2D4Md5GNDLb1SDpd7KWDpUfwzpHvVZmLEAOOlLoifCoR
2ZLZx4vNkww7Xt7CUVBjrM6wJB1bL9hpZKF+lSPiAeUw+BkFUJZ0RUfb48l2xp3p
LYqHj5fzqPkjIBrFlVNEU6aiRgzSObxAEiS42CAAt7PoVL8Ca/PxWpDZVoa/blsU
oA84QlG+qJdmCme662FsOdY4YX40TrdJk6FESouOn4gFmbbZT60v7Wk3u6i+wtjk
WjSdxzGFFq1ygXfs4N9a6/Cj97ePUBvOBhuKtFbP5RrcyL4sEIW3+bK+hGOb38tJ
QjtBZD0BE7GzzcDQGmX6dMGQWvn9ZMuuSNbRg7DiiAvkGGDZ8LGtnserBTyf5Maf
LujhdarTwoO3fvt98VXvwqUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330789655561710481177070385375662383490669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 05:51:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-20 05:51:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pu.schlittermann.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806519615474701647235799244746095384801042218116210463736830484242193719063345729123560755494169156397080933060999015647695101376739539636309988613962133967633313955990596058103622554950290588377244092340002247302538862411367020084862360174723423316429106644000439188511403638475131509961977601626290777800521579280314816994441819513789062100769888699118320740551625729660427346750079572961432159118185752055390503920883432699070189081534732574180818970401889422330790521579055247845122169298176304719068045261370364224695767230642885802188377004088951119916573689196452767054592117646184197755572951926214735537793945029452533784078766398094357755538718259977968416479433914262643689769746217012233361988413234343128485104151088050002184834834906486929223804654038075560509323404821461040697136986962623845326054514307613233911306259595271907561536707418303820129775311834326216389889976810132160252898544130116693696917913634560982513489872157317448094103932824179248195830365957905912790746239185667400973555860071336276397599265964443388245524534589559283895483639450158940342876933196429720699404967561974332070091778507439982167010331816101930100558955592750006118731406328651082981596164993183129268595683172711080573377954469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3913442ae095e3bce41e5cdf5c5b91778a97d6ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pu.schlittermann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schlittermann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.schlittermann.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016df23c2d320000040300483046022100a0000e03308380df74b3fab382bc5af6aab01f4348074242a8946b8f1411dd49022100c26d50891116bc0efcad2c026cb2ca6fc216346b2e606542cf0c3705a901106b007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016df23c2d200000040300483046022100fa1ba4ed39cc18453daf0683cd30ee1d9499a5f5c46994717cbdc9a7d44da406022100991d52e4230bd8d5a29fa1ea6468fd75ad33948ff9328cede25a345fadf42c08
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006579826c8435d22d35fcb75d9ffb37e4068e939d0f1cff7c43e56a4415136a0d343fda40eb553dd28d94f2941bbbd10868b461ab6bb1bb15597ab190ebce61fef3958c9dccbd64685a5f42ee6f45afc66c7c129e516133922895159cc412d878d5c36da49a21259af700f270fe42ecc68bdf0a3d5d7d8471f925a405da956e7aba54127e07db000fd46df7f77a0e39a5c9c6925f77732357c3d05019d563c775517624c8713adb393444a21066070e0c207f4967e5ae3f5b3dc6934ac7a569291c6462403a1a91509dd7d2a896e4c35016d0d8932575b705fb9ebb7b88995e9e7c0cbda7f20781dfdcfc95ba6984f718732bb084bd52920833f73a7e06d18b2c