chat.datpasst.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:4c:58:be:a7:16:af:c7:84:39:0a:62:6e:d4:08:2f:93:2a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=chat.datpasst.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4c:58:be:a7:16:af:c7:84:39:0a:62:6e:d4:08:2f:93:2aSerial Number (int): 287316279670264081839657327845840786527018
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d4:7c:5b:25:34:53:1c:21:4e:77:86:6f:dc:16:3c:65:a8:f9:02:31
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5f:e0:a7:e7:4c:44:3b:3c:dc:15:02:25:b6:bf:73:ff:85:36:a2:0a
Fingerprint (sha256): 7b:50:9a:8a:44:3f:3b:42:7c:db:94:84:e2:bf:7c:54:a0:aa:51:4f:b6:d0:9f:dd:9a:df:99:2b:a0:8c:c5:14
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate chat.datpasst.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for chat.datpasst.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
chat.datpasst.de
Other certificates including the domain name datpasst.de
(limited to 100 certificates)
datpasst.de
jwd-paderborn-de.datpasst.de
version.snailsites.com
tee-kaffee-shop.com.datpasst.de
datpasst.de
fullwood.de.datpasst.de
api.analysa24.de.datpasst.de
jwd-paderborn-de.datpasst.de
version.snailsites.com
version.snailsites.com
stage.datpasst.de
gruebel-duebel.de.datpasst.de
sanetta.de.datpasst.de
tee-kaffee-shop.com.datpasst.de
stage.datpasst.de
chat.datpasst.de
version.snailsites.com
chat.datpasst.de
datpasst.de
ccontor.de.datpasst.de
sanetta.de.datpasst.de
chat.datpasst.de
gruebel-duebel.de.datpasst.de
datpasst.de
datpasst.de
version.snailsites.com
chat.datpasst.de
chat.datpasst.de
version.snailsites.com
adfab.de.datpasst.de
ccontor.de.datpasst.de
tee-kaffee-shop.com.datpasst.de
app.analysa24.de
tee-kaffee-shop.com.datpasst.de
gruebel-duebel.de.datpasst.de
fullwood.de.datpasst.de
gruebel-duebel.de.datpasst.de
version.snailsites.com
jwd-paderborn-de.datpasst.de
gruebel-duebel.de.datpasst.de
stage.datpasst.de
datpasst.de
tee-kaffee-shop.com.datpasst.de
stage.datpasst.de
chat.datpasst.de
stage.datpasst.de
chat.datpasst.de
jwd-paderborn-de.datpasst.de
tee-kaffee-shop.com.datpasst.de
version.snailsites.com
app.analysa24.de
adfab.de.datpasst.de
gruebel-duebel.de.datpasst.de
version.snailsites.com
chat.datpasst.de
chat.datpasst.de
tee-kaffee-shop.com.datpasst.de
tee-kaffee-shop.com.datpasst.de
jwd-paderborn-de.datpasst.de
*.datpasst.de
datpasst.de
jwd-paderborn-de.datpasst.de
version.snailsites.com
tee-kaffee-shop.com.datpasst.de
datpasst.de
fullwood.de.datpasst.de
api.analysa24.de.datpasst.de
jwd-paderborn-de.datpasst.de
version.snailsites.com
version.snailsites.com
stage.datpasst.de
gruebel-duebel.de.datpasst.de
sanetta.de.datpasst.de
tee-kaffee-shop.com.datpasst.de
stage.datpasst.de
chat.datpasst.de
version.snailsites.com
chat.datpasst.de
datpasst.de
ccontor.de.datpasst.de
sanetta.de.datpasst.de
chat.datpasst.de
gruebel-duebel.de.datpasst.de
datpasst.de
datpasst.de
version.snailsites.com
chat.datpasst.de
chat.datpasst.de
version.snailsites.com
adfab.de.datpasst.de
ccontor.de.datpasst.de
tee-kaffee-shop.com.datpasst.de
app.analysa24.de
tee-kaffee-shop.com.datpasst.de
gruebel-duebel.de.datpasst.de
fullwood.de.datpasst.de
gruebel-duebel.de.datpasst.de
version.snailsites.com
jwd-paderborn-de.datpasst.de
gruebel-duebel.de.datpasst.de
stage.datpasst.de
datpasst.de
tee-kaffee-shop.com.datpasst.de
stage.datpasst.de
chat.datpasst.de
stage.datpasst.de
chat.datpasst.de
jwd-paderborn-de.datpasst.de
tee-kaffee-shop.com.datpasst.de
version.snailsites.com
app.analysa24.de
adfab.de.datpasst.de
gruebel-duebel.de.datpasst.de
version.snailsites.com
chat.datpasst.de
chat.datpasst.de
tee-kaffee-shop.com.datpasst.de
tee-kaffee-shop.com.datpasst.de
jwd-paderborn-de.datpasst.de
*.datpasst.de
datpasst.de
Certificate
The complete raw certificate details for chat.datpasst.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgISA0xYvqcWr8eEOQpibtQIL5MqMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjgwMjA3NThaFw0y MDAxMjYwMjA3NThaMBsxGTAXBgNVBAMTEGNoYXQuZGF0cGFzc3QuZGUwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDYQmF6yN8BRQfgHNEV9uXnf5XDWHJT cgWNvyU7UMwtsz9oxqFilTIt1r20EFQIdzavCF3cRMUfm3xHlCcCwe7YUAfqStu6 Dt9SxL54In3EJQv6yVddBxOr4WMJtDaUXMQcgp9wfy+gIDKegL8at5u4XDtKM/Hd J38jQ42EXp207v4DuBliZuI+KcoSHR3zLdvzfQrKRTCywTLDSPwFixInU7KIesp0 yA+LaeEwtFgtich8sAllcTULCJZMg2okvi3PuqfAQXMKvAKbGXEroaFEJuP5fZka eoMSPQqy/v7OCF+xDWwgpfseQFhsK4OXwyLbQohA//1aXJ5HM2dvECj/GZ0TlRUr Yvh2SfaDDhsszzvA8HL6Db6VzJFFfhhAkQFTpYTkGrEz1QmYIcbwOLf3Dg0mM0X8 c5RPWXDA2x6b28lC2kqN7NAYf4ja8flaygVd0a5/BfxVumwIgfsj9+E3mE7vtjqI 05EYM6x1xkGSKdj/0T6IuErWnGX6F4YDQCNRoocLv1K3cvNqe8kFzqQU6AGYz5ld NywIuve32M2R+Hcgvee4UPrVUkhFR9p7hpGMGcjfm6vcpBUgwvWTRjvp0Iiz8jT/ Cpzxy2DL37JL8vZorH89k7JNEDdqnch9j0HGyRg6i6pMKrJCGHKNFAge4PUFVepL MDnsfME6CNOtpQIDAQABo4ICZDCCAmAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTU fFslNFMcIU53hm/cFjxlqPkCMTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEGNoYXQuZGF0cGFzc3Qu ZGUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQC BIH0BIHxAO8AdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW4Q VaYdAAAEAwBHMEUCIQDSkDDG3ZgLCvHa8jpAp4Fkoeg57SgAGdwtJVQIq6sT8gIg SJkY/YXUK/prx9Lo7s+9aeZBDEKOSlazKcGjPwcg0vYAdQCyHgXMi6LNiiBOh2b5 K7mKJSBna9r6cOeySVMt74uQXgAAAW4QVaYJAAAEAwBGMEQCIHbKqaKA3E7/NZ+C KFM24HZK+MgIP3TI0YnFbGFfHzqQAiBAmSN3UMqx0WT4M1bRWF8LkoEZmuWzl2fg lVKeRKH0gDANBgkqhkiG9w0BAQsFAAOCAQEARLS/Ja/gfaMSCiD2PGfJcT4xlHdo 3ddaJhC7gxW/db3XFZxVyUtin5zow/7j3B6rsBu4K82WMSGTurmO/AxMFdVHIde2 7Y2z7j2+napIcFaayJXFW77GLMpcpDquSkdxbyTfMeSHNYO2fKyMu9eypkIKgj9B GXBnY7W0GJR67g2MRk9XqQc4UIBBk0FXAGht+2mVq+GkApaJK2E5LQ3D7UIstaCc WvRElDgFhyMMklMdvat38Bfd/6LldJxxeDDC1scK2DzW28tKPjWtUIj/sfkX64zd qYz8zIsL2HyExciDTw6d58VeRrd0b9Iq/Y4GDbAh57F2pW4848TXzF93cw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2EJhesjfAUUH4BzRFfbl 53+Vw1hyU3IFjb8lO1DMLbM/aMahYpUyLda9tBBUCHc2rwhd3ETFH5t8R5QnAsHu 2FAH6krbug7fUsS+eCJ9xCUL+slXXQcTq+FjCbQ2lFzEHIKfcH8voCAynoC/Greb uFw7SjPx3Sd/I0ONhF6dtO7+A7gZYmbiPinKEh0d8y3b830KykUwssEyw0j8BYsS J1OyiHrKdMgPi2nhMLRYLYnIfLAJZXE1CwiWTINqJL4tz7qnwEFzCrwCmxlxK6Gh RCbj+X2ZGnqDEj0Ksv7+zghfsQ1sIKX7HkBYbCuDl8Mi20KIQP/9WlyeRzNnbxAo /xmdE5UVK2L4dkn2gw4bLM87wPBy+g2+lcyRRX4YQJEBU6WE5BqxM9UJmCHG8Di3 9w4NJjNF/HOUT1lwwNsem9vJQtpKjezQGH+I2vH5WsoFXdGufwX8VbpsCIH7I/fh N5hO77Y6iNORGDOsdcZBkinY/9E+iLhK1pxl+heGA0AjUaKHC79St3LzanvJBc6k FOgBmM+ZXTcsCLr3t9jNkfh3IL3nuFD61VJIRUfae4aRjBnI35ur3KQVIML1k0Y7 6dCIs/I0/wqc8ctgy9+yS/L2aKx/PZOyTRA3ap3IfY9BxskYOouqTCqyQhhyjRQI HuD1BVXqSzA57HzBOgjTraUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 287316279670264081839657327845840786527018 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 02:07:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-26 02:07:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chat.datpasst.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 882260970077197815176989673998626907633714948786924540414806552967076030651635902085225316335125613479332901286319399498557756479310021585715068571734292238985477135498002651799864618726603030266332553006354237891522007934058624108313355208818330523754342517682871084040886801538725909515466273547111086956946247904019822603563170649013311328213304691184717402742822499617901313091760915760574021053867917751919697666749320480241643797377625355218199431008714155007350349072453649454796182632928981729466893690400542795700874303766865033118786188592227865708889168014546686484326406999821462686993812422393011332267675877157394988345762971247215421373999436497322352467165869719807795946390095197238990917492439097487299375915869625212334502409106228003087612694851739290385174210704497208206935216212330973045103737929261022590194564002281379639489771255635686363972230715358498979150628330143288136064082990357829144249144201412671502803309920607373320874930295387814503723989101341711328624602172412832125287032873543750532329487145604782292373796406144513787507916395829006728777063267141439043943434111952194110335795802955479515061483016954774891502729076748447031276845318561514336602763289858297438014113137059106112400502181 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d47c5b2534531c214e77866fdc163c65a8f90231 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.datpasst.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e1055a61d0000040300473045022100d29030c6dd980b0af1daf23a40a78164a1e839ed280019dc2d255408abab13f20220489918fd85d42bfa6bc7d2e8eecfbd69e6410c428e4a56b329c1a33f0720d2f6007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e1055a6090000040300463044022076caa9a280dc4eff359f82285336e0764af8c8083f74c8d189c56c615f1f3a9002204099237750cab1d164f83356d1585f0b9281199ae5b39767e095529e44a1f480 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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