bauzinsrechner.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f7:6e:5d:91:a0:36:ec:7e:04:f1:9c:cc:5f:6c:a4:d4:3d was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bauzinsrechner.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f7:6e:5d:91:a0:36:ec:7e:04:f1:9c:cc:5f:6c:a4:d4:3d
Serial Number (int): 432645589273299868170845659164921548821565
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9e:65:e9:96:88:bc:52:09:10:aa:c8:73:eb:81:4c:e9:34:75:27:05
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d1:2d:bd:f9:18:36:20:8e:8d:e7:af:35:62:48:68:81:1e:4f:fc:f6
Fingerprint (sha256): 77:88:c0:04:d6:bc:6a:d9:c3:6e:fe:4a:a7:4a:89:10:2e:76:9b:1a:88:3a:64:c4:14:7f:33:9e:a9:69:27:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bauzinsrechner.org

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bauzinsrechner.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.babyskinderwagen.de
autodiscover.bauzinsrechner.org
autodiscover.kafka-zeitschrift.de
babyskinderwagen.de
babyskinderwagen.t6a.de
bauzinsrechner.org
bauzinsrechner1.t6a.de
kafka-zeitschrift.de
kafka-zeitschrift.t6a.de
mail.babyskinderwagen.de
mail.bauzinsrechner.org
mail.kafka-zeitschrift.de
onlinekredit-01.t6a.de
webdisk.babyskinderwagen.de
webdisk.bauzinsrechner.org
webdisk.kafka-zeitschrift.de
www.babyskinderwagen.de
www.babyskinderwagen.t6a.de
www.bauzinsrechner.org
www.bauzinsrechner1.t6a.de
www.kafka-zeitschrift.de
www.kafka-zeitschrift.t6a.de
www.onlinekredit-01.t6a.de

Other certificates including the domain name bauzinsrechner.org

(limited to 100 certificates)
www.nach-london.t6a.de
bauzinsrechner.org
bauzinsrechner.org
bauzinsrechner.org
www.herrenportemonnaie.de
bauzinsrechner.org
tipps-poker.de
bauzinsrechner.org
china-reisen-visum.de

Certificate

The complete raw certificate details for bauzinsrechner.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHZDCCBkygAwIBAgISBPduXZGgNux+BPGczF9spNQ9MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAzMDUwMDM1MjVaFw0x
ODA2MDMwMDM1MjVaMB0xGzAZBgNVBAMTEmJhdXppbnNyZWNobmVyLm9yZzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM3JyiL9d/+F7Fx+GdqVJqLJEpkl
8BaZjp1td7bgbZEmDOW9TKCA8sJ0mQr9ACyflkQAqUyjC8K9SuMFZ0iuuYcZlpqm
b/26FhVeRqra50Ln1KogY+J11aE1FnVFodq+aj25Y3t8BBd67cAfUNnol063Mil3
LclXLuv++vmOcXE2nyQuTXaWZeP67lqjob5CV5jRLSWGWKErV8JsgUx1BXMKNvv+
a8mQM/pG87fT5ePC8UUl6pFH19OKhwOuSXgzl/eMHiGOiZlyCYYQmwb0lC1fPWNw
Z2WjVI5l17P1oxEjp1C/8m5xyx6j2cwJ0ezaSyPgD9QkgwKsvNZhvuh7gwcCAwEA
AaOCBG8wggRrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUnmXploi8UgkQqshz64FM
6TR1JwUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCAngGA1UdEQSCAm8wggJrgiBhdXRvZGlzY292ZXIuYmFieXNraW5k
ZXJ3YWdlbi5kZYIfYXV0b2Rpc2NvdmVyLmJhdXppbnNyZWNobmVyLm9yZ4IhYXV0
b2Rpc2NvdmVyLmthZmthLXplaXRzY2hyaWZ0LmRlghNiYWJ5c2tpbmRlcndhZ2Vu
LmRlghdiYWJ5c2tpbmRlcndhZ2VuLnQ2YS5kZYISYmF1emluc3JlY2huZXIub3Jn
ghZiYXV6aW5zcmVjaG5lcjEudDZhLmRlghRrYWZrYS16ZWl0c2NocmlmdC5kZYIY
a2Fma2EtemVpdHNjaHJpZnQudDZhLmRlghhtYWlsLmJhYnlza2luZGVyd2FnZW4u
ZGWCF21haWwuYmF1emluc3JlY2huZXIub3JnghltYWlsLmthZmthLXplaXRzY2hy
aWZ0LmRlghZvbmxpbmVrcmVkaXQtMDEudDZhLmRlght3ZWJkaXNrLmJhYnlza2lu
ZGVyd2FnZW4uZGWCGndlYmRpc2suYmF1emluc3JlY2huZXIub3Jnghx3ZWJkaXNr
LmthZmthLXplaXRzY2hyaWZ0LmRlghd3d3cuYmFieXNraW5kZXJ3YWdlbi5kZYIb
d3d3LmJhYnlza2luZGVyd2FnZW4udDZhLmRlghZ3d3cuYmF1emluc3JlY2huZXIu
b3Jnghp3d3cuYmF1emluc3JlY2huZXIxLnQ2YS5kZYIYd3d3LmthZmthLXplaXRz
Y2hyaWZ0LmRlghx3d3cua2Fma2EtemVpdHNjaHJpZnQudDZhLmRlghp3d3cub25s
aW5la3JlZGl0LTAxLnQ2YS5kZTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYL
KwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9u
bHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGlu
IGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0
IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEB
CwUAA4IBAQBsLPe1qWILGf5dBB1bILSPiWs8V93zuyHIxoA1fsCUHRnZfnVB1zC8
7UL6ll9R2xX9/p01NEq3uF/JX7TcNWlrLLYXrqxFxX0i/xIjcskuLOaLy2eQYTSb
OVTzl/17n2Ri1SXAPC6mubBi6Z3e/TxDJAbbdEuH48izJ9o97wm2YoRIFAdmfHU3
W0/aaOU4vCL5HrXdYkZg8XJQ/gZzZJmyV3j2mGaDuk7BGB+hzCV3j4vBwcDdDLzf
wpwi2DX1coO0huWMl07wMkEzOv3u8bgYyjbHeGZodC+voIfAeBRFFq+ZiJcqHq+Y
FsG/o6pproWWKsjrIdzU+YQUqViwnLti
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcnKIv13/4XsXH4Z2pUm
oskSmSXwFpmOnW13tuBtkSYM5b1MoIDywnSZCv0ALJ+WRACpTKMLwr1K4wVnSK65
hxmWmqZv/boWFV5GqtrnQufUqiBj4nXVoTUWdUWh2r5qPblje3wEF3rtwB9Q2eiX
TrcyKXctyVcu6/76+Y5xcTafJC5NdpZl4/ruWqOhvkJXmNEtJYZYoStXwmyBTHUF
cwo2+/5ryZAz+kbzt9Pl48LxRSXqkUfX04qHA65JeDOX94weIY6JmXIJhhCbBvSU
LV89Y3BnZaNUjmXXs/WjESOnUL/ybnHLHqPZzAnR7NpLI+AP1CSDAqy81mG+6HuD
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432645589273299868170845659164921548821565
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-05 00:35:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-03 00:35:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bauzinsrechner.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25978358676675502902689753812779105999819994164070071612809783528469438581638318121022305883632316245073365789055286521051781592044890300470741305954999333923147021431475382848840326861341080261634060632521285647779360106307112140459927992239012041311055821835801639186078748175679547723740114041907340715869828908159800542411081979608090078949426425885602542529867716465749014775393017843635445234251656356771697877665027008384537042812635368747096081320922953488799352121064296868599541966758884175840382107955125023049634323769631404737723094781416627053307692412554174740389337030849296231551591497662784889127687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e65e99688bc520910aac873eb814ce934752705
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (623 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.babyskinderwagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bauzinsrechner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kafka-zeitschrift.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babyskinderwagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babyskinderwagen.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bauzinsrechner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bauzinsrechner1.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kafka-zeitschrift.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kafka-zeitschrift.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.babyskinderwagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bauzinsrechner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kafka-zeitschrift.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinekredit-01.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.babyskinderwagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.bauzinsrechner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.kafka-zeitschrift.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.babyskinderwagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.babyskinderwagen.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bauzinsrechner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bauzinsrechner1.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kafka-zeitschrift.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kafka-zeitschrift.t6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinekredit-01.t6a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006c2cf7b5a9620b19fe5d041d5b20b48f896b3c57ddf3bb21c8c680357ec0941d19d97e7541d730bced42fa965f51db15fdfe9d35344ab7b85fc95fb4dc35696b2cb617aeac45c57d22ff122372c92e2ce68bcb679061349b3954f397fd7b9f6462d525c03c2ea6b9b062e99ddefd3c432406db744b87e3c8b327da3def09b66284481407667c75375b4fda68e538bc22f91eb5dd624660f17250fe06736499b25778f6986683ba4ec1181fa1cc25778f8bc1c1c0dd0cbcdfc29c22d835f57283b486e58c974ef03241333afdeef1b818ca36c7786668742fafa087c078144516af9988972a1eaf9816c1bfa3aa69ae85962ac8eb21dcd4f98414a958b09cbb62