alt.kjg-fulda.de

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 02:04:46:f9:fa:e9:57:59:57:10:98:8b:21:d9:bc:21:df:88 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alt.kjg-fulda.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:04:46:f9:fa:e9:57:59:57:10:98:8b:21:d9:bc:21:df:88
Serial Number (int): 175680045261916562410429691223055225970568
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 00:99:f7:62:22:01:ab:da:93:4f:37:8d:b1:51:5d:aa:bf:ea:89:f9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 60:10:d6:7f:46:e8:43:b5:9f:bf:cc:2e:c2:03:3d:12:85:30:b5:19
Fingerprint (sha256): 51:f8:be:03:e7:39:ae:f7:34:c5:5b:54:34:ae:0a:91:e1:90:27:9b:3f:4a:bb:11:36:32:7b:7a:e0:30:ec:ca

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate alt.kjg-fulda.de

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alt.kjg-fulda.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stats.kjg-fulda.de
webmail.kjg-fulda.de
drupal.kjg-fulda.de
piwik.kjg-fulda.de
kjg-fulda.de
kjgfulda.de
alt.kjg-fulda.de
pad.kjg-fulda.de
trac.kjg-fulda.de
www.kjgfulda.de
www.kjg-fulda.de
git.kjg-fulda.de
mail.kjg-fulda.de

Other certificates including the domain name kjg-fulda.de

(limited to 100 certificates)
piwik.kjg-fulda.de
mail.kjg-fulda.de
kjg-fulda.de
trac.kjg-fulda.de
kjg-fulda.de
kjg-fulda.de
drupal.kjg-fulda.de
stats.kjg-fulda.de
stats.kjg-fulda.de
kjg-fulda.de
pool.kjg-fulda.de
kjg-fulda.de
pool.kjg-fulda.de
kjg-fulda.de
webmail.kjg-fulda.de
piwik.kjg-fulda.de
stats.kjg-fulda.de
drupal.kjg-fulda.de
git.kjg-fulda.de
piwik.kjg-fulda.de
kjg-fulda.de
alt.kjg-fulda.de
kjg-fulda.de
kjg-fulda.de
pool.kjg-fulda.de
kjg-fulda.de
drupal.kjg-fulda.de
webmail.kjg-fulda.de
trac.kjg-fulda.de
kjg-fulda.de
mail.kjg-fulda.de
stats.kjg-fulda.de
piwik.kjg-fulda.de
pool.kjg-fulda.de
kjg-fulda.de
piwik.kjg-fulda.de
www.kjg-fulda.de
kjg-fulda.de
kjg-fulda.de
webmail.kjg-fulda.de
kjg-fulda.de
www.kjg-fulda.de
www.kjg-fulda.de
kjg-fulda.de
piwik.kjg-fulda.de
www.kjg-fulda.de
kjg-fulda.de
pool.kjg-fulda.de
kjg-fulda.de
pool.kjg-fulda.de
drupal.kjg-fulda.de
kjg-fulda.de
pad.kjg-fulda.de
git.kjg-fulda.de
alt.kjg-fulda.de
stats.kjg-fulda.de
drupal.kjg-fulda.de
www.kjg-fulda.de
kjg-fulda.de
www.kjg-fulda.de
git.kjg-fulda.de
kjg-fulda.de
pool.kjg-fulda.de
pool.kjg-fulda.de
kjg-fulda.de
git.kjg-fulda.de
trac.kjg-fulda.de
kjg-fulda.de
kjg-fulda.de

Certificate

The complete raw certificate details for alt.kjg-fulda.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG4jCCBcqgAwIBAgISAgRG+frpV1lXEJiLIdm8Id+IMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNjAzMDMwOTQ4MDBaFw0x
NjA2MDEwOTQ4MDBaMBsxGTAXBgNVBAMTEGFsdC5ramctZnVsZGEuZGUwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC3ZjQhVYMZ6FQ8/WNcISbsssVsvDYz
QaF9zMIFBk9titf+MrwW+fjlrbZXAL56baXC1Ang+j1+iLf3HrTQMwNEnfsqrB5U
EgA3XrgA6QXdDwn2Qx59nFW1oou/x8GQ5N/ZyrddRLT6nhfOolPLty/LAO0Ez3HM
AO4Q1Ok+cI2FDRKxvbM25C26HWuEgqHiCUAz0ZYqWLzz8nm2BxHOTFqMdXm6ndwN
9QZnbe5F/aFAmEGsw/3Ws+FnK/tDPKd7FZbM9lpUuyTw+pcI6BSNZxUesnXEVA6x
q1tXn747XMgzbcNAu+nld/LsbsUUqSEnrb+u2JxZdePuIW2NI/31Ri0m2JBZxYYz
R2Q2P0/eZNsJ7dpbS2zHgESt3WuNCdkI2v9NO+/746cpTRfhg5eVfUuN3yK9A7HJ
TtMBMuSDhjL4I46Zm5fzU1bmmgzdse4AOFgAnA6rZ1ZWLDniYqBDlXvo5ckCRTTr
+9uq+hesUDzwBOj86dxGhaOnIH6X5dQqQYH6iybDS3hXOD6Lm0HFh4HtXoNaWcO7
dKzyLpA0Z4G5B212sPSyqj63MZi3Jd8+DyBbUeCeZ0oz/r8azRmlHCMTHBZPA0fG
MOusP2OlFFx+XNA9ix0RKpismaDr5j0oq3W1iOTKB87sEJR1l+UOa4V7bDD4eIv9
1m5JRl4pL7xMCQIDAQABo4IC7zCCAuswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQA
mfdiIgGr2pNPN42xUV2qv+qJ+TAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmlu
dC14MS5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDEubGV0c2VuY3J5cHQub3JnLzCB+AYDVR0RBIHwMIHtghJzdGF0cy5ramct
ZnVsZGEuZGWCFHdlYm1haWwua2pnLWZ1bGRhLmRlghNkcnVwYWwua2pnLWZ1bGRh
LmRlghJwaXdpay5ramctZnVsZGEuZGWCDGtqZy1mdWxkYS5kZYILa2pnZnVsZGEu
ZGWCEGFsdC5ramctZnVsZGEuZGWCEHBhZC5ramctZnVsZGEuZGWCEXRyYWMua2pn
LWZ1bGRhLmRlgg93d3cua2pnZnVsZGEuZGWCEHd3dy5ramctZnVsZGEuZGWCEGdp
dC5ramctZnVsZGEuZGWCEW1haWwua2pnLWZ1bGRhLmRlMIH+BgNVHSAEgfYwgfMw
CAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0
aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRp
ZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQ
b2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9y
eS8wDQYJKoZIhvcNAQELBQADggEBAImwhJz0H8KqqHEOOoey19OaR62KLET7v6hM
TTYwim77RzFuuiefN4azTh4DqNG7N5cPCumbEsouKOCe9hkDKxTuTUmiVtPGFkGZ
/x3xusXYfUxEPf4leGAxGwFGSxud9Kc8bB6xYdfxR5fm1VLpuHKQw1SHbsAGa65Z
2Vl/SgRdNdD9tjRvRpPy1S22fULlsZZL6asdTXJ4TLFpjtGUzIcDf1sWfxUcH1cw
JyH9HK85E1M5onaiQm4tJDc8ImYO5YLqv17DIqJbqoOIewFkzXBTMp3RoeOPzrt8
htLJuIMbUC+H6M9boKpiI8PIWIblOY7jzDCyeytUl+1el6FG8Mw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 175680045261916562410429691223055225970568
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-03 09:48:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-01 09:48:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alt.kjg-fulda.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 748203592759000108385918006768048851494179665019421951948021684076010162865645402297023771797501188758855695001166872164117922661072213916434834074708125038292409328822888667194708996288252998556567156848454325788652847940890418989190461342646893504083741579453222337301146244896661652672217549523402035795990971200060599436171038166869316667928167508102728708733536653776029394924867802786548698051016351315027537451214129098970377009782810613027805531868211629117636824492276232720273354794082361042890206032079262468474898025302399404305438750086279282704636769116477765308903706166480822997800623259695783653056859147969920162232809381158087261820757047653578676120142912835484723212036491173030442308925335377277083998458710640861978338833177279030956803567190708984909837470360862397639317271811878334433105398316417365585824448411420608482419121362576468377973629226159028968074313233111489221717110132357269274240474896221258890434615243861644393321972916657598607943117895198144649054007662856263772889839009310874405692887776343399855865308458513647657283913648061186309661214000409255563522426725245210326468198435913763368261362166551352418670795876532594226678774639719231031719014711974898604660560581970674223960312841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0099f7622201abda934f378db1515daabfea89f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.kjg-fulda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.kjg-fulda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal.kjg-fulda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piwik.kjg-fulda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjg-fulda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjgfulda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alt.kjg-fulda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pad.kjg-fulda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trac.kjg-fulda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjgfulda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjg-fulda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.kjg-fulda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kjg-fulda.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0089b0849cf41fc2aaa8710e3a87b2d7d39a47ad8a2c44fbbfa84c4d36308a6efb47316eba279f3786b34e1e03a8d1bb37970f0ae99b12ca2e28e09ef619032b14ee4d49a256d3c6164199ff1df1bac5d87d4c443dfe257860311b01464b1b9df4a73c6c1eb161d7f14797e6d552e9b87290c354876ec0066bae59d9597f4a045d35d0fdb6346f4693f2d52db67d42e5b1964be9ab1d4d72784cb1698ed194cc87037f5b167f151c1f57302721fd1caf39135339a276a2426e2d24373c22660ee582eabf5ec322a25baa83887b0164cd7053329dd1a1e38fcebb7c86d2c9b8831b502f87e8cf5ba0aa6223c3c85886e5398ee3cc30b27b2b5497ed5e97a146f0cc