www.vdivde-it.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:67:89:2e:ad:ec:dc:af:25:76:65:e0:7e:df:68:93:99:8f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.vdivde-it.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:67:89:2e:ad:ec:dc:af:25:76:65:e0:7e:df:68:93:99:8f
Serial Number (int): 383680574128598680626078028709633407031695
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b7:ed:10:bd:d9:93:02:0a:d8:6f:24:c5:68:43:8e:a6:ad:16:cd:5d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:ab:52:47:21:c9:9e:6c:8f:a4:08:22:35:2f:69:54:16:20:b1:23
Fingerprint (sha256): 77:07:78:fc:e5:61:8d:7f:10:06:33:a9:4c:2e:56:02:f9:c1:77:62:32:4b:6c:6c:43:43:44:99:90:1b:63:05

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.vdivde-it.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vdivde-it.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vdivde-it.de

Other certificates including the domain name vdivde-it.de

(limited to 100 certificates)
analytics.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
upload.vdivde-it.de
nextmatch.vdivde-it.de
zim-foyer.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
app01.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
transfer.vdivde-it.de
upload.vdivde-it.de
survey.vdivde-it.de
wikibzf.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
stellenangebote.vdivde-it.de
www.vdivde-it.de
vdivde-it.de
*.analytics.vdivde-it.de
upload.vdivde-it.de
stellenangebote.vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
mail.vdivde-it.de
survey.vdivde-it.de
vcse.video.vdivde-it.de
stellenangebote-intranet.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
ssl.vdivde-it.de
vcse.video.vdivde-it.de
wikibzf.vdivde-it.de
app01.vdivde-it.de
exchange.vdivde-it.de
vdivde-it.de
stellenangebote.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
vcse.video.vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
www.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
zim-foyer.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
bl22.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
ssl.vdivde-it.de
analytics.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
*.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
vdivde-it.de
vdivde-it.de
app01.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
stellenangebote-intranet.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
mail.vdivde-it.de
transfer.vdivde-it.de
transfer.vdivde-it.de
vdivde-it.de
transfer.vdivde-it.de
transfer.vdivde-it.de
ssl.vdivde-it.de
app01.vdivde-it.de
vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
mdm.vdivde-it.de
upload.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
*.vdivde-it.de

Certificate

The complete raw certificate details for www.vdivde-it.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgISBGeJLq3s3K8ldmXgft9ok5mPMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMTYwMDExMTNaFw0x
OTAzMTYwMDExMTNaMBsxGTAXBgNVBAMTEHd3dy52ZGl2ZGUtaXQuZGUwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDgxRjo9oYgMNojBy/zYTcwVaroS/h9
3Z7iz0/I3Am27LeH31gM7+2vbaeT7GYU2LO2353iTpkJRb921DznprhJhzWFsnkm
pw+jBnUL3aDBLyUK6E2Da2WzQR25Hu6b3Hk8k1ZTOHS7lrHRMYigUpqjcMNaLwv9
+OpvvTrUnsmir13Z3V1cspVSil1E50pf8HXLNppXvVn0jZqsDfCZRGbX2m14PM3w
ss8SpYDtI+umdgpa3HF9btrfISYOOVCPIrqXcm0ZM6e34/EGuJdT9Xekfcoy22jI
4/y2rzvD7ox9h0pg1p0EFZTxhRAF1Uk8fR2UXeh1scO5f0TkmPlPZGq7bLjI+mxx
yr5mnsedLLdrUUSCDZJVHU09u1BnRPyz2snupGmLbJf83wOUJdmIrDeMeP2c+r/Q
WYbQE7H0rZSfHs5kPPdAUHKa472ehXrQkaowcSPdPSquXwWpOs8WKtvlm+2FCGEW
SBkgS4jMFSMwxJmgPu5/oUdKUjxXtVDoSBj8eBCNtirN57roC4Lcq7iI58o6Q47w
dov0Q1IS+nxf/WH7CjLyvuldiXRzre2Zpri+wfvXAhEuKgDHtd+quspDpyAsQhc7
CJbvNBIOqhgiOIbrpMO4yswPHpwh3s7FeXrmYGPqfVXiEin+eC74h1EJ5e59FAfp
/4pPBMS4qS/roQIDAQABo4ICZDCCAmAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS3
7RC92ZMCCthvJMVoQ46mrRbNXTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy52ZGl2ZGUtaXQu
ZGUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQC
BIH0BIHxAO8AdQB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWe0
kS+bAAAEAwBGMEQCIBqrY2cf94awhLxjUYOLa5dE8jMGCRYcT0lUP2Bi6wNUAiAI
6IwMgejgMqR+dDIWBJmuF/XaXi11MJk8YW9Qp4oTswB2AGPy283oO8wszwtyhCdX
azOkjWF3j711pjixx2hUS9iNAAABZ7SRMaQAAAQDAEcwRQIhAOf2Y28KxZ4pmDFi
MkZuYTpNgAtYRNNGdATKZx0ejZ3fAiASj5HRISWdsLIart9f9sxB9J/ynsEbXtaQ
BP1PeHjvuDANBgkqhkiG9w0BAQsFAAOCAQEAKrARwgryO6pzs5DrUQ9/Opbynb1R
sczMyLhFvds6IV1kmWXMXJ7Uxmq5v+VxRqB3SyCRUxgZC7+zXqr/3VFMk7FcQVmN
1pUGcjAMls36kMKr6KRzohPu5laQKgb8u6Kb2dvY4LElc40tuWPTSBtZhXjIFYwU
JsImZREVeJWj3IliqTlNLXX4wLFsUN+YQrq7kqByDffTjIjTkWE4O7ZHjgmpOwvM
mz2M7kcqFnjrf49uwA8+6EiGS0NoSwSWi38WLYPjE0W6XA/Vm3GLSnNRXOj6c+bi
NNm6Y/AjR9zau25qf3/oW0D/yy2a6uw5WIp2o9ZZBvCclW7Kn3i7ij55UA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4MUY6PaGIDDaIwcv82E3
MFWq6Ev4fd2e4s9PyNwJtuy3h99YDO/tr22nk+xmFNiztt+d4k6ZCUW/dtQ856a4
SYc1hbJ5JqcPowZ1C92gwS8lCuhNg2tls0EduR7um9x5PJNWUzh0u5ax0TGIoFKa
o3DDWi8L/fjqb7061J7Joq9d2d1dXLKVUopdROdKX/B1yzaaV71Z9I2arA3wmURm
19pteDzN8LLPEqWA7SPrpnYKWtxxfW7a3yEmDjlQjyK6l3JtGTOnt+PxBriXU/V3
pH3KMttoyOP8tq87w+6MfYdKYNadBBWU8YUQBdVJPH0dlF3odbHDuX9E5Jj5T2Rq
u2y4yPpsccq+Zp7HnSy3a1FEgg2SVR1NPbtQZ0T8s9rJ7qRpi2yX/N8DlCXZiKw3
jHj9nPq/0FmG0BOx9K2Unx7OZDz3QFBymuO9noV60JGqMHEj3T0qrl8FqTrPFirb
5ZvthQhhFkgZIEuIzBUjMMSZoD7uf6FHSlI8V7VQ6EgY/HgQjbYqzee66AuC3Ku4
iOfKOkOO8HaL9ENSEvp8X/1h+woy8r7pXYl0c63tmaa4vsH71wIRLioAx7XfqrrK
Q6cgLEIXOwiW7zQSDqoYIjiG66TDuMrMDx6cId7OxXl65mBj6n1V4hIp/ngu+IdR
CeXufRQH6f+KTwTEuKkv66ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383680574128598680626078028709633407031695
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-16 00:11:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-16 00:11:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vdivde-it.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 916981235494621241107707732361713284218427362034401133103202143931635947581531572068338119551289292049316903414498527350746858470154200263118089041692360249131909510401961864774477857248601868045728963908805668078404158264211320192070727243438826909693387137820193008873162575954782781750740599626384474773951015185922447558291081053842973674208467793965803959604665785073122232254445211598417567549497975530391851323782337264120072669847714056418206408546360309738090627229690118550098990124079104913141456219244784450089954774520491204549676266751209866419591954046305727057393417537324831183080890288769023720112958623848021403714918221530573989647556069747021672003335587089261397722188424854541331934099215138496689747889720222607352819317789712698506888965826611961057558040455580370717503600055877767971596469509801164532484056162603785963449532098477339584590239714422828677980131607427720656155658932360017854463789616528991154965859624793716222609996285354404897769167891444108618588775758044634775026472735494387756849359694898259667908738011685852019118374023348280565093383349606901957527043079848487426125503108454417080622759544516605156113271733251981978701422311030465188433680905811263186440346623323651703206570913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7ed10bdd993020ad86f24c568438ea6ad16cd5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vdivde-it.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167b4912f9b000004030046304402201aab63671ff786b084bc6351838b6b9744f2330609161c4f49543f6062eb0354022008e88c0c81e8e032a47e7432160499ae17f5da5e2d7530993c616f50a78a13b300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167b49131a40000040300473045022100e7f6636f0ac59e2998316232466e613a4d800b5844d3467404ca671d1e8d9ddf0220128f91d121259db0b21aaedf5ff6cc41f49ff29ec11b5ed69004fd4f7878efb8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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