egsk.weita.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:93:d6:49:bd:2e:95:82:82:5f:6b:f7:08:60:cd:ea:03:e3 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=egsk.weita.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:d6:49:bd:2e:95:82:82:5f:6b:f7:08:60:cd:ea:03:e3
Serial Number (int): 311643203398493520716515726365715614794723
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:0b:85:1c:82:1e:d2:2a:11:4c:aa:67:37:78:a4:3d:28:37:d8:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0c:f8:63:fa:cd:a9:cb:fd:12:17:2f:ee:a4:48:ff:90:de:0b:d8:a6
Fingerprint (sha256): 51:20:6a:eb:6c:e2:b0:0e:77:34:f8:af:02:2e:5b:02:ba:b1:42:d3:76:3a:5e:99:90:f3:e7:e2:fc:29:ab:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate egsk.weita.ch

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for egsk.weita.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

andermatter.andermatt-swissalps.ch
autodiscover.epaper-poonen.neuer-bund-verlag.de
catalogues.alfacareinternational.com
ebook.aimara.ch
egsk.weita.ch
epaper.bielbienne.com
epaper.wta-suhl.de
fu-kiosk.futuriststeam.co.uk
gastro.papstar.de
katalog.isa-racing.com
katalog.promondo.de
kiosk.heinmedia.eu
kiosk.ownersclub.immo
kiosk.rattpack.eu
kiosk.visionen.com
lies.buchaktuell.de
magazine.arbeit-und-arbeitsrecht.de
magazine.infoboard.de
media.auvesy.com
neubau-projekte.vr-immoservice-mainfranken.de
oldnick.thesatanicwarlock.com
online.gitaliamagazine.it
print.werwaswo.eu
programme.holiday-event.de
publikationen.ehs-verlag.de
read.citymatters.london
webkiosk.paginasiete.bo
webkiosk.quittenprojekt-bergstrasse.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosks.sufijournal.org

Other certificates including the domain name weita.ch

(limited to 100 certificates)
moebel-gruber.mediaflip.de
jobst-wohnwelt.mediaflip.de
www.revistacipcisa.com
broschuere.bildkunstakademie.de
kataloge.vitaltours.de
magazine.landroverusa.com
digiprospekt.freyplus.de
kiosk.dolcevita-magazin.ch
jobst-wohnwelt.mediaflip.de
catalogs.k7-pro.com
webkiosks.zaubertopf-club.de
lemagazine.landrover.com
blaetterkatalog.kleentex.eu
jobst-wohnwelt.mediaflip.de
epaper.treffpunkt-bau.eu
immobilienmagazin.steinauer-immo.ch
magazine.montana-cans.com
app.procycling.de
moebel-mmz.mediaflip.de
magazine.montana-cans.com
digital.queencityconnections.com
magazine.montana-cans.com
publications.nursingald.com
magazin.zibibbo.de
jobst-wohnwelt.mediaflip.de
hoffmann-moebel.mediaflip.de
hoffmann-moebel.mediaflip.de
hummerich.mediaflip.de
flyer.medion-fabrikverkauf.de
magazine.landrover.com.cn
www.maryspubs.com
ruesen.mediaflip.de
ruesen.mediaflip.de
ebooks.teammelanie.nz
webkiosk.magazinmarley.de
moebel-zuck.mediaflip.de
digital.queencityconnections.com
egsk.weita.ch
hummerich.mediaflip.de
blaetterkatalog.kleentex.eu
trop.mediaflip.de
angebote.dersteirerhof.at
magazine.biss.team
jobst-wohnwelt.mediaflip.de
read.africanphotomag.co.ke
jobst-wohnwelt.mediaflip.de
weita.ch
hummerich.mediaflip.de
jobst-wohnwelt.mediaflip.de
trop.mediaflip.de
kiosk.leuchtfeuer-verlag.com
weita.ch
kataloge.triplex-fischer.de
mail.weita.ch
moebel-mmz.mediaflip.de
moebel-mai.mediaflip.de
publikationen.kmu.org
kurse.bdb-musikakademie.de
epaper.treffpunkt-bau.eu
app.worldofmtb.de
sonavsofab.xp1.com
ruesen.mediaflip.de
epaper.chili-peppers.de
jobst-wohnwelt.mediaflip.de
catalog.trendyourbrand.com
moebel-zuck.mediaflip.de
webkiosks.zaubertopf-club.de
magazine.biss.team
moebel-berta.mediaflip.de
digital.queencityconnections.com
kataloge.holzimpraegnierwerk.ch
digital.queencityconnections.com
moebel-mmz.mediaflip.de
jobst-wohnwelt.mediaflip.de
digiprospekt.freyplus.de
hummerich.mediaflip.de
digital.queencityconnections.com
publikationen.kmu.org
mobila.mediaflip.de
webkiosk.stephanshof.com
trop.mediaflip.de
publications.nursingald.com
weita.ch
moebel-gruber.mediaflip.de
digital.queencityconnections.com
katalog.hltravel.at
rieswick.mediaflip.de
app.fahrrad-news.com
rieswick.mediaflip.de
webkiosk.stephanshof.com
kiosk.seniorenreisen.de
moebelundobjekt.mediaflip.de
immomagazin.wegenerimmobilien.de
katalog.unzerbrechbar.de
hetmagazine.landrover.com
webkiosk.edeka-koehne.de
weita.ch
medien.koinno-bmwi.de
moebel-meyer.mediaflip.de
mail.weita.ch

Certificate

The complete raw certificate details for egsk.weita.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmLWg6K9+5F846LDShBR
Qpt3Z74FQ6qX37eKxPxKlUMCF2PfwYQx1duXF8rD90B4JPlzS7ZDwYuuaSlrIX6b
+2xY8CWvvxNCXBP/x6Pwt/SQaAJ/0lk25T/6ZZIT+edQuUIJwpK9wRt5PNWM374D
GaYP8gTSkeMYMBM8VV2/qtNYo9vPKbqiz5+s1zuF1/gsakAqdLsuCOILMLkgyygu
3pYzuIVmg6ohQFzKTFRtNtLxId/LGO6WRHEtuudwriXM0I+L6QPBHq3eo7rZmzeE
T6uNsGPTRWEem9Nk33Ro9msHRAIpqTAPT4n8nROYvGQl1OaSn7Wg39n6T3e5zxch
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311643203398493520716515726365715614794723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-22 11:07:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-20 11:07:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'egsk.weita.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23024110311565586312078953810620770286182296463050534408981560426514858673518663757920440341995478710946796565112707208531419364394021695639534581438921610311983123359590187641467218380824693252911924590299571022429686236940947405778347992649306756742240616976023000043261973955527240876656922343039647271323377553721012243114681729952829387130758319074727553478602598179910647334722778600987596081177973802535661509744350148811173646236934517526844809563801771553593383394521875137282305819703607279704338018395938407144837621656415195990957455999343863720728349872503495509864259692430021851560892188225716971053413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b60b851c821ed22a114caa673778a43d2837d8a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (834 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andermatter.andermatt-swissalps.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.epaper-poonen.neuer-bund-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogues.alfacareinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebook.aimara.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egsk.weita.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.bielbienne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.wta-suhl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fu-kiosk.futuriststeam.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gastro.papstar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.isa-racing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.promondo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.heinmedia.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.ownersclub.immo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.rattpack.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.visionen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lies.buchaktuell.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.arbeit-und-arbeitsrecht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.infoboard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.auvesy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neubau-projekte.vr-immoservice-mainfranken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldnick.thesatanicwarlock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.gitaliamagazine.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'print.werwaswo.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programme.holiday-event.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.ehs-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.citymatters.london'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.paginasiete.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.quittenprojekt-bergstrasse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.sufijournal.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165618815a7000004030047304502206b88da0991aec84982fab9b63f9137c702227767764f379a1d6dcfe3bfe9f35a022100ca6afc17ba7008625ec8858b54af461b6f6722736465eabadd029b14fced2587007600a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000165618815ab0000040300473045022023f623b64e08026999f508a75782222e5375fb39beb8b4e212b61357e4ea77340221009edb1b4ec54d45b20cb7cc1098b0f1351a69109fa1462ee9eb23576aa7b6ddc2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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