chat.schlittermann.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:2c:f2:6e:a6:8b:b6:e4:6c:52:4d:fe:d2:f2:ee:5d:b9:68 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chat.schlittermann.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2c:f2:6e:a6:8b:b6:e4:6c:52:4d:fe:d2:f2:ee:5d:b9:68
Serial Number (int): 363743815577145978665234163964310267476328
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5d:df:11:d5:bd:e6:fe:25:28:8e:98:d3:dc:d8:e6:fd:1f:c3:d8:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 91:06:38:48:84:06:48:f4:72:3c:bd:9e:27:1f:fa:88:06:a2:4b:c1
Fingerprint (sha256): 6a:39:c6:de:f7:dd:d7:52:c6:91:4f:5b:12:e2:f6:4b:3e:95:38:38:29:a9:f6:10:aa:f5:26:f8:e9:5d:e3:0c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chat.schlittermann.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chat.schlittermann.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chat.schlittermann.de

Other certificates including the domain name schlittermann.de

(limited to 100 certificates)
www.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
hg.schlittermann.de
svn.schlittermann.de
accounting.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
rric-cx.dyn.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
www.schlittermann.de
w.schlittermann.de
rric-cx.dyn.schlittermann.de
hg.schlittermann.de
hg.schlittermann.de
svn.schlittermann.de
www.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
git.schlittermann.de
muli.schlittermann.de
lug-dd.schlittermann.de
git.schlittermann.de
www.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
pu.schlittermann.de
accounting.schlittermann.de
git.schlittermann.de
mailman.schlittermann.de
webmail.schlittermann.de
ssl.schlittermann.de
accounting.schlittermann.de
lug-dd.schlittermann.de
git.schlittermann.de
pu.schlittermann.de
ssl.schlittermann.de
webmail.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
w.schlittermann.de
ssl.schlittermann.de
accounting.schlittermann.de
muli.schlittermann.de
chat.schlittermann.de
owncloud.schlittermann.de
www.schlittermann.de
owncloud.schlittermann.de
fubus.de.hs12.schlittermann.de
w.schlittermann.de
fubus.de.hs12.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
www.schlittermann.de
mailman.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
www.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
otrs.schlittermann.de
www.schlittermann.de
mailman.schlittermann.de
git.schlittermann.de
www.schlittermann.de
icinga.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
pu.schlittermann.de
lug-dd.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
git.schlittermann.de
roundcube.schlittermann.de
www.schlittermann.de
otrs.schlittermann.de
git.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
mailman.schlittermann.de
otrs.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
www.schlittermann.de
accounting.schlittermann.de
accounting.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
pu.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
ssl.schlittermann.de
www.schlittermann.de
w.schlittermann.de

Certificate

The complete raw certificate details for chat.schlittermann.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgISBCzybqaLtuRsUk3+0vLuXbloMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDIxODQ0MDZaFw0y
MDA1MzExODQ0MDZaMCAxHjAcBgNVBAMTFWNoYXQuc2NobGl0dGVybWFubi5kZTCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANRsxI4fbrEDkoeAEgW3JCcw
XonFljH+XJabUzcM2QW2lO/OD1KS8o6DG/yq6FEI6O17/zbuIXHGjNIylpQY7Ome
OAJ0FogMmTa6lGlA77NwXmxr0eddv+IrhjYDTfIhyxjuRKXyGdjwQj0jkGSvdjzZ
VAjPd1qJs5IS+qvMLN6tdwmczpCBPSeudhgJpr4ZhpIF3PdRLLk0iQqfVL58rtZK
kFpWS4CI7pmJayaGYlaPiHIiYMUyhK1nzv1ZyRC4cPFKzzg2Ulcuk+CYCWVUy9+1
awepXEAOiSoSUgq7ZVGI2/eTnWvOfHSdhN9HcL0Ww5Llg6Dti/P1a4P+hqnmUOJV
e87lUVeB54jpFiPVy+OeZ/k0lVCXUpMQt/qkNChD8ekk0X5A7d0nCkCwGRQfF17Y
t/RJa8KGxu74t3yRbHZU1msgKHw5WmkJBPVGSSZcy9WHSn7XGnLWBXRM9Wn8jqzj
hVYDYvEcQtU4yhZwDXt/THri7Sinu+2hbAvIPg7RAiZJtJHQZXoqlPNDtIpMtDCk
DiZlTIhFmoNXpXXs2Dj0MjlTWNS/uSYZw3un4Nq2qTk4O+Y5jEu5XyFvxZ4HCm+t
CpTrJBl4zVQwFrL+fn8uE1FeOEfS0rWJA6cheic/AaucOKoO6gqhjs11B86k23pi
fenJMqRno2g02Yw+b1SjAgMBAAGjggJrMIICZzAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFF3fEdW95v4lKI6Y09zY5v0fw9hxMB8GA1UdIwQYMBaAFKhKamMEfd265tE5
t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j
c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl
cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIAYDVR0RBBkwF4IVY2hhdC5zY2hs
aXR0ZXJtYW5uLmRlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYK
KwYBBAHWeQIEAgSB9gSB8wDxAHcAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1
loFxRVgAAAFwnMbqEwAABAMASDBGAiEA+fOsNgPb090g1acrvovJjVFnXMl6PTyz
cJRFf6RqdLQCIQD8E1MADNYWHsiI9STU1R5/+8QwZ4iTE08MQveeuNlXjwB2ALIe
BcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcJzG6fsAAAQDAEcwRQIh
AMybY8bOKjd43gSxQsRZhc4Dx+vZnvhH5OUyMr5FPKEBAiBTEdXpjBKJ+374Jzb7
jjgTPUi3zhgHQ8sTANnQFmGGyDANBgkqhkiG9w0BAQsFAAOCAQEAebLxiXxXGOMn
3ihBcxdZRWB21UVSvPSQJCIb++Op2+MYCdHY3jZtp/CWe0BeYpX8pyoORTmbNpFj
t+zrwecJ/2A/n6BnoNQyQjQlg+LsEUvn6kFYDpk0qYRNVfDpnkaVqMbqSm2HUoFI
7+o2jOYmS14QU+8qmsPuo0tSRE9Oi1iY98mi0RNwRsehvNCG/XT3twESbWtSPhCH
jdrdIZR8ll1jlm6A1qbCFwjkp2pi44e73lJmAyceX57WbFWU/XbfOSO7nk4Hv9OC
dFveUGvnVHeUpAfpoIRCR3swjXVe8xpwVOIZOd85pVkUvKlw5jo1McRT4RkYIp8b
qyxD1kEhrQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1GzEjh9usQOSh4ASBbck
JzBeicWWMf5clptTNwzZBbaU784PUpLyjoMb/KroUQjo7Xv/Nu4hccaM0jKWlBjs
6Z44AnQWiAyZNrqUaUDvs3BebGvR512/4iuGNgNN8iHLGO5EpfIZ2PBCPSOQZK92
PNlUCM93WomzkhL6q8ws3q13CZzOkIE9J652GAmmvhmGkgXc91EsuTSJCp9Uvnyu
1kqQWlZLgIjumYlrJoZiVo+IciJgxTKErWfO/VnJELhw8UrPODZSVy6T4JgJZVTL
37VrB6lcQA6JKhJSCrtlUYjb95Oda858dJ2E30dwvRbDkuWDoO2L8/Vrg/6GqeZQ
4lV7zuVRV4HniOkWI9XL455n+TSVUJdSkxC3+qQ0KEPx6STRfkDt3ScKQLAZFB8X
Xti39ElrwobG7vi3fJFsdlTWayAofDlaaQkE9UZJJlzL1YdKftcactYFdEz1afyO
rOOFVgNi8RxC1TjKFnANe39MeuLtKKe77aFsC8g+DtECJkm0kdBleiqU80O0iky0
MKQOJmVMiEWag1eldezYOPQyOVNY1L+5JhnDe6fg2rapOTg75jmMS7lfIW/FngcK
b60KlOskGXjNVDAWsv5+fy4TUV44R9LStYkDpyF6Jz8Bq5w4qg7qCqGOzXUHzqTb
emJ96ckypGejaDTZjD5vVKMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 363743815577145978665234163964310267476328
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 18:44:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-31 18:44:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chat.schlittermann.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866617877904797575164355132360855566863230169669751922816744710836360133154311048086030524282304117460117402767783623996811584331318581783428657314667463167195252535674919292535526035277413945412498208810665781856286776065371252374718945915807646298580649691617956047336865411941230156592144214609567676219012541905347301906290774453369997638498167741698017788090503705580656641135266540924635957118262406864893513104479796247993538267820797175693998350999271132656391099927966294802449464544037941706066553362846198996556361580826115542371215904025581197846232960752369058744143624309569441051294428803357867196804933309173388843734386952130587642905927347612237766622781472858628116624346668373350766001601539352406452085505678718507309224121576280090149473876836326750023992950165873980073895810873850550467488609164241847232441841060194772055124811571551920184090846051196141559798356735500340444813099083178549568594094524455108441729362547294030048271683294837330028933393884398303220083132166410727081368670323923692192904639553390138586144308602606895895570610931612766291274999991085435842789634838482790480704197874192702668118061262940597838759851838963498891124862564841925043722625153928519613213930999315679550945318051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ddf11d5bde6fe25288e98d3dcd8e6fd1fc3d871
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.schlittermann.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001709cc6ea130000040300483046022100f9f3ac3603dbd3dd20d5a72bbe8bc98d51675cc97a3d3cb37094457fa46a74b4022100fc1353000cd6161ec888f524d4d51e7ffbc430678893134f0c42f79eb8d9578f007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001709cc6e9fb0000040300473045022100cc9b63c6ce2a3778de04b142c45985ce03c7ebd99ef847e4e53232be453ca10102205311d5e98c1289fb7ef82736fb8e38133d48b7ce180743cb1300d9d0166186c8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0079b2f1897c5718e327de2841731759456076d54552bcf49024221bfbe3a9dbe31809d1d8de366da7f0967b405e6295fca72a0e45399b369163b7ecebc1e709ff603f9fa067a0d43242342583e2ec114be7ea41580e9934a9844d55f0e99e4695a8c6ea4a6d87528148efea368ce6264b5e1053ef2a9ac3eea34b52444f4e8b5898f7c9a2d1137046c7a1bcd086fd74f7b701126d6b523e10878ddadd21947c965d63966e80d6a6c21708e4a76a62e387bbde526603271e5f9ed66c5594fd76df3923bb9e4e07bfd382745bde506be7547794a407e9a08442477b308d755ef31a7054e21939df39a55914bca970e63a3531c453e11918229f1bab2c43d64121ad