newsletter.klett-sprachen.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e5:b9:63:31:3a:82:49:8a:76:dd:9e:ff:f3:17:1e:84:0c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=newsletter.klett-sprachen.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e5:b9:63:31:3a:82:49:8a:76:dd:9e:ff:f3:17:1e:84:0cSerial Number (int): 339507942035258478418906961434923199529996
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 22:75:f8:b9:d3:ee:35:23:99:24:0c:e6:46:62:37:d6:25:9d:8a:2b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 54:f5:5a:47:c4:24:fd:e5:6c:6d:df:1d:ff:3b:0e:e9:51:f1:6d:eb
Fingerprint (sha256): 84:ad:a9:9b:09:de:f2:78:1b:58:89:fa:01:64:f2:2c:8f:5c:7a:ea:5b:37:f3:b1:be:b6:32:9c:b1:10:81:9c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate newsletter.klett-sprachen.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for newsletter.klett-sprachen.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
newsletter.klett-sprachen.de
Other certificates including the domain name klett-sprachen.de
(limited to 100 certificates)
euq.klett-sprachen.de
webapp.klett-sprachen.de
sixcms.klett-sprachen.de
moodle-demo.klett-sprachen.de
moodle.klett-sprachen.de
moodle.klett-sprachen.de
moodle-demo.klett-sprachen.de
newsletter.klett-sprachen.de
hybrid.klett-sprachen.de
www.klett-sprachen.de
moodle.klett-sprachen.de
registration-portal.klett-sprachen.de
registration-portal.klett-sprachen.de
sixcms.klett-sprachen.de
moodle.klett-sprachen.de
newsletter.klett-sprachen.de
newsletter.klett-sprachen.de
registration-portal.klett-sprachen.de
mail.klett-sprachen.de
international.klett-sprachen.de
webapp.klett-sprachen.de
*.klett-sprachen.de
newsletter.klett-sprachen.de
mail.klett-sprachen.de
newsletter.klett-sprachen.de
mail.klett-sprachen.de
*.klett-sprachen.de
newsletter.klett-sprachen.de
newsletter.klett-sprachen.de
*.klett-sprachen.de
moodle.klett-sprachen.de
*.klett-sprachen.de
newsletter.klett-sprachen.de
moodle.klett-sprachen.de
mam.klett-sprachen.de
mam.klett-sprachen.de
pim.klett-sprachen.de
elt.deltapublishing.co.uk
mail.klett-sprachen.de
www.klett-sprachen.de
mail.klett-sprachen.de
pim.klett-sprachen.de
newsletter.klett-sprachen.de
lizenz-portal.klett-sprachen.de
sixcms.klett-sprachen.de
newsletter.klett-sprachen.de
mail.klett-sprachen.de
newsletter.klett-sprachen.de
hybrid.klett-sprachen.de
mail.klett-sprachen.de
webapp.klett-sprachen.de
sixcms.klett-sprachen.de
moodle-demo.klett-sprachen.de
moodle.klett-sprachen.de
moodle.klett-sprachen.de
moodle-demo.klett-sprachen.de
newsletter.klett-sprachen.de
hybrid.klett-sprachen.de
www.klett-sprachen.de
moodle.klett-sprachen.de
registration-portal.klett-sprachen.de
registration-portal.klett-sprachen.de
sixcms.klett-sprachen.de
moodle.klett-sprachen.de
newsletter.klett-sprachen.de
newsletter.klett-sprachen.de
registration-portal.klett-sprachen.de
mail.klett-sprachen.de
international.klett-sprachen.de
webapp.klett-sprachen.de
*.klett-sprachen.de
newsletter.klett-sprachen.de
mail.klett-sprachen.de
newsletter.klett-sprachen.de
mail.klett-sprachen.de
*.klett-sprachen.de
newsletter.klett-sprachen.de
newsletter.klett-sprachen.de
*.klett-sprachen.de
moodle.klett-sprachen.de
*.klett-sprachen.de
newsletter.klett-sprachen.de
moodle.klett-sprachen.de
mam.klett-sprachen.de
mam.klett-sprachen.de
pim.klett-sprachen.de
elt.deltapublishing.co.uk
mail.klett-sprachen.de
www.klett-sprachen.de
mail.klett-sprachen.de
pim.klett-sprachen.de
newsletter.klett-sprachen.de
lizenz-portal.klett-sprachen.de
sixcms.klett-sprachen.de
newsletter.klett-sprachen.de
mail.klett-sprachen.de
newsletter.klett-sprachen.de
hybrid.klett-sprachen.de
mail.klett-sprachen.de
Certificate
The complete raw certificate details for newsletter.klett-sprachen.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgISA+W5YzE6gkmKdt2e//MXHoQMMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTkwNDEyMTNaFw0y MDAzMTgwNDEyMTNaMCcxJTAjBgNVBAMTHG5ld3NsZXR0ZXIua2xldHQtc3ByYWNo ZW4uZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDee9vwM3sesN4q Ko9j0N4DZG/0s5cdXrBzRWdOPRXCclLFPGG/lvHANA3//++A2Nix2mjQKaWWROnE 9AsnHKdZjOkOu1n0YJGYjJ0y2JGh6MHqdKCfTwGWvYQk47sqlglx2NjZljrj/Eq+ 8YdKgZj1TLFjWYCE1wLKm40beLtA3wn+JRkqfq+9ei6PW40cJKXCbujXigaXKZgc GiczHAwcs7ElTPnASH4YgHSM6Z36sQQ/qRyRPdHuDJbYmRR56NvK5kSHLW/LrsMR HoB3dLvQWiZ0OkYBhjoG0Osd9y1JCRMOw8nbZAEEYF6+fJdGBo4QhhuwTVKi/iS3 aJ/9sDCU0GQuOVLc05QO3UPwtW57HHFYOB4BgU5exS9jlcgNXk48P4zZrTJYwcTv ZbI7xRcpnp1IROWP7qElKJkFZZ2uCygyubCSKaFh5fvlbDVfcnYxpoxSxhoNxWTc eG+foo/zQ3iZDTfH5rvdgMRE+tt37nOtv+s2pX5BoCETCHLY7ueU9DJl2ByZ/Z0e uDaL/pn8LQjSkaC4hK62dxm+Okx2r/3WORJPyBIrxJcgY4UjYRpFR2C2AOFvlS8o 7O1v9rgqrEPn8mTHA+U2Hms82ow0q52sQ2MDb8mfBo/G0QO8rg8tTaHxWBydDaNQ iURpmnIiDEujsbVaKJkZYHLXU4FbIQIDAQABo4ICcTCCAm0wDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBQidfi50+41I5kkDOZGYjfWJZ2KKzAfBgNVHSMEGDAWgBSoSmpj BH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0 dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0 dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCcGA1UdEQQgMB6CHG5l d3NsZXR0ZXIua2xldHQtc3ByYWNoZW4uZGUwTAYDVR0gBEUwQzAIBgZngQwBAgEw NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j cnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwDwlaRZ8gDRgkAQLS+T iI6tS/4dR+OZ4dA0prCoqo6ycwAAAW8ckhZ6AAAEAwBIMEYCIQCMKACwM/l/Pss+ 9bpjosU0nw4UGlPqslAZGq88oSnuaAIhAJpvOXSFmp/OtEZEzMQzW/FXWoAtw9Al zupByy0MQj17AHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFv HJIWcQAABAMARjBEAiBjTStY1PjEae/4IO3+RysI6pK5ytL3VMkZNbIpTI+kqQIg VJOcpJPoC+LZ9645bHUMSv3hvrWnY7EzTeUMBpVBtowwDQYJKoZIhvcNAQELBQAD ggEBAHecgExQGcPd5LCME/hA7OUUcQDe0OQit48xIGxeDQIz/vBBnqNz34flPt4M tIku9wHCrhmGTX5gehY8Z5NKvK8rM0Fet/1D9C3s0FQlwFNwgZppfi9jzaEuJGK7 L2jhoWi8zzW04FrrdHfSpQfGtD5ebJ19AbN6zrUnu7K73idlW5qDyUylbyS/wJ5h b78HZf+b1BLMKRuzztiC0kzg/3q69NFitGPPEgmhWcAxiHvMQoCQk8kQiJB3EfAm TVqnGNZfbez/374Ab2aTiIfgHooXQSsyVvY8baY3KcLdtRsqcJP5s47TCnLm8SAt iHlN7XRYVu7bwm+mrm6Uf9yYPjs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3nvb8DN7HrDeKiqPY9De A2Rv9LOXHV6wc0VnTj0VwnJSxTxhv5bxwDQN///vgNjYsdpo0CmllkTpxPQLJxyn WYzpDrtZ9GCRmIydMtiRoejB6nSgn08Blr2EJOO7KpYJcdjY2ZY64/xKvvGHSoGY 9UyxY1mAhNcCypuNG3i7QN8J/iUZKn6vvXouj1uNHCSlwm7o14oGlymYHBonMxwM HLOxJUz5wEh+GIB0jOmd+rEEP6kckT3R7gyW2JkUeejbyuZEhy1vy67DER6Ad3S7 0FomdDpGAYY6BtDrHfctSQkTDsPJ22QBBGBevnyXRgaOEIYbsE1Sov4kt2if/bAw lNBkLjlS3NOUDt1D8LVuexxxWDgeAYFOXsUvY5XIDV5OPD+M2a0yWMHE72WyO8UX KZ6dSETlj+6hJSiZBWWdrgsoMrmwkimhYeX75Ww1X3J2MaaMUsYaDcVk3Hhvn6KP 80N4mQ03x+a73YDERPrbd+5zrb/rNqV+QaAhEwhy2O7nlPQyZdgcmf2dHrg2i/6Z /C0I0pGguISutncZvjpMdq/91jkST8gSK8SXIGOFI2EaRUdgtgDhb5UvKOztb/a4 KqxD5/JkxwPlNh5rPNqMNKudrENjA2/JnwaPxtEDvK4PLU2h8VgcnQ2jUIlEaZpy IgxLo7G1WiiZGWBy11OBWyECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 339507942035258478418906961434923199529996 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 04:12:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 04:12:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newsletter.klett-sprachen.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 907654815838745446403387454282341292638111868347608066912192224131531006952719116330384247363756467615018457165655775550204948172324541827865378945473695057089671876214766723830401248311069755947054230972500270398784115024062150965066945109133378554538816683197612789945834162689854196901650255257497212734272131435420132739154972103501919274859322113505681109135445623177727186457404274546722292847883613643343628420318270291872365840430386444408987427816261781153663004821137415281977794398031887424189226979942511231881434426088880522375234114719046675688235513617600294728296161562053923330803845482665581214671202341877127072508650045321584313713134059759581863983178486909617665228980833702875721027448436627098403166785510560837823374508826322258152134747004833759473313900792728990529856572251790565821287535306110299483727714660019061568901293574749229622825794121982270615479778545526007237207505921712681112144721617580721069076236610570872055943083966568413460777541458976251395183755376709637533264075724047764454223477257616136062997273618251220094425480607179109061493478873332515401998335221517964707822288723444512701219313212043722259774715140211306724026562128580667046038954016279154586813792938941205624603630369 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2275f8b9d3ee352399240ce6466237d6259d8a2b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.klett-sprachen.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f1c92167a00000403004830460221008c2800b033f97f3ecb3ef5ba63a2c5349f0e141a53eab250191aaf3ca129ee680221009a6f3974859a9fceb44644ccc4335bf1575a802dc3d025ceea41cb2d0c423d7b007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f1c92167100000403004630440220634d2b58d4f8c469eff820edfe472b08ea92b9cad2f754c91935b2294c8fa4a9022054939ca493e80be2d9f7ae396c750c4afde1beb5a763b1334de50c069541b68c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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