www.bergmannstr71.berlin
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ee:cc:7d:d1:32:ab:a4:46:3e:86:5f:c2:fa:11:e2:08:a9 was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.bergmannstr71.berlin
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ee:cc:7d:d1:32:ab:a4:46:3e:86:5f:c2:fa:11:e2:08:a9Serial Number (int): 342595876913749669756826034924834793851049
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 13:42:5c:ab:27:6d:35:4a:13:d3:ac:24:fd:6e:c8:14:1b:d7:6a:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e8:c6:b3:bc:c6:de:06:23:3d:92:2d:cb:b2:36:c2:9f:71:65:5b:e9
Fingerprint (sha256): 92:e7:8f:7f:5c:29:c3:c6:fd:e9:fa:86:64:a7:13:a2:b5:b6:bb:8e:72:9c:9c:fe:0f:e9:03:2a:f5:ce:fb:02
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.bergmannstr71.berlin
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.bergmannstr71.berlin
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bergmannstr71.berlin
elstercube.de
greifswalderstr212.berlin
sic.berlin
www.bergmannstr71.berlin
www.elstercube.de
www.greifswalderstr212.berlin
www.sic.berlin
elstercube.de
greifswalderstr212.berlin
sic.berlin
www.bergmannstr71.berlin
www.elstercube.de
www.greifswalderstr212.berlin
www.sic.berlin
Other certificates including the domain name bergmannstr71.berlin
(limited to 100 certificates)
www.bergmannstr71.berlin
sicproperties.de
www.bergmannstr71.berlin
sicproperties.de
sicproperties.de
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
*.m44.berlin
www.www.birdstop.eu
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
sicproperties.de
po.dt80.net
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
sicproperties.de
*.paidediting.de
sicproperties.de
sicproperties.de
www.bergmannstr71.berlin
sicproperties.de
sicproperties.de
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
*.m44.berlin
www.www.birdstop.eu
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
sicproperties.de
po.dt80.net
www.bergmannstr71.berlin
www.bergmannstr71.berlin
www.bergmannstr71.berlin
sicproperties.de
*.paidediting.de
sicproperties.de
Certificate
The complete raw certificate details for www.bergmannstr71.berlin in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgISA+7MfdEyq6RGPoZfwvoR4gipMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMDQxNjQ3NDZaFw0x OTA1MDUxNjQ3NDZaMCMxITAfBgNVBAMTGHd3dy5iZXJnbWFubnN0cjcxLmJlcmxp bjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAM2BF1lvQyoBxaU98MHc 21sOm2bYIS02wZbH/aLpPHuqZvlz22wI5C38CJJhdIFhxVsa1tutyMy3qAfJAXPR bMbIlJWD2RmbBeI4USl7P1crb9iWLkgtLGFpiqnUE216lgxAnOEbJjH17zy29m4E rxvO1ODmTlHYCI1HVQinzT/XuLOieJXpnoMWo4AfmMbYGZw6g7dntzdfDiQe3Wuy fNh+aeaeuUlEzYu/VUySmpkacaTdukZun1JGIGK3HobJ953VlyizU01LYqXHjygi zUMPj35zgSAojECY76AvmJDM59ajmCtOxzrRdiMhMPgyQP3/g2N/oQsHKfrYcxRP OOySDq1TWU6lj07ZBg4IzWRMbmOHz7dcVgr6ZFZFp+mEssjAWgeYed3ArlxafOi6 d4QOex8jraQYam1q7j4aQ3PSq7jU0MKAyYqfbCwEyQSC+KaCkmD7TH69m6/TqBJX LuS1hTWR6Qa13+Dux7tLTx3Ref+clnQk72bH5XGXceuMpd0Pn0iBPUd3owJfgP6z rMokCVixemgoA8vNFjvGcI/6kAIx1Bxe0gqzTMq7Q3ItkPaCAAqP4+wBksAfJsLv 3vBSSAuRVo1nriASMf79saLkceawcFB6B/ejkiz2TtWiqzt3n+8u+pwDvU0D8sNI vTunoU2zvr6hmuSV9s4ah9WzAgMBAAGjggL+MIIC+jAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFBNCXKsnbTVKE9OsJP1uyBQb12q7MB8GA1UdIwQYMBaAFKhKamMEfd26 5tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDov L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDov L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wgbMGA1UdEQSBqzCBqIIUYmVy Z21hbm5zdHI3MS5iZXJsaW6CDWVsc3RlcmN1YmUuZGWCGWdyZWlmc3dhbGRlcnN0 cjIxMi5iZXJsaW6CCnNpYy5iZXJsaW6CGHd3dy5iZXJnbWFubnN0cjcxLmJlcmxp boIRd3d3LmVsc3RlcmN1YmUuZGWCHXd3dy5ncmVpZnN3YWxkZXJzdHIyMTIuYmVy bGlugg53d3cuc2ljLmJlcmxpbjBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEE AYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y ZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3AOJpS64m6OlACeiGG7Y7g9Q+5/50 iPukjyiTAZ3d8dv+AAABaLmfiCAAAAQDAEgwRgIhAJfUmdhirzTA8Fk3te1V5AtV mGjsinMoDTfy3bYL4kMgAiEA0KDLYZo3R26JhT9GCzjuSsNMq9VxV+WKNLD69n+d oHIAdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWi5n4YsAAAE AwBGMEQCIA2twMwORJWtbmSbCNS6gmXYEYuX/fpm390xkW05xmuLAiA1kOqXR79W VHf/PsglWErRZzCTXRUre1BJEIntJA0fZzANBgkqhkiG9w0BAQsFAAOCAQEAUK1W fhNOvD3wMghfj/H1RovttFjJAv+TWAXZkNWKAN7u3xPmjHAPAE9JuZWhujuH7CIS AeM5SmSelou/wE50/31xHSEf3MLdzMjrlMHktheX5qH5XCO8u2c46by2h34VoIw7 qFlPzqEn2Su6ZucallbBaW0RmuZFwj32cHKBI82zDcrWoVReskrjSY4NtfeXV0QF OFmzYzPjYAZEDkwrMxpblxj5h6sYaeYFruvaB8BBcISjfGiP6C5QW6ALrFXINEhl 1hIWwIFsnGdfb+0NSLSDYeQALvh9aPNVjhqQCWeayUhOEBnvhgnXkQ8h1RW/P2C9 JlYDh2B/rD+8P+ytxg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzYEXWW9DKgHFpT3wwdzb Ww6bZtghLTbBlsf9ouk8e6pm+XPbbAjkLfwIkmF0gWHFWxrW263IzLeoB8kBc9Fs xsiUlYPZGZsF4jhRKXs/Vytv2JYuSC0sYWmKqdQTbXqWDECc4RsmMfXvPLb2bgSv G87U4OZOUdgIjUdVCKfNP9e4s6J4lemegxajgB+YxtgZnDqDt2e3N18OJB7da7J8 2H5p5p65SUTNi79VTJKamRpxpN26Rm6fUkYgYrcehsn3ndWXKLNTTUtipcePKCLN Qw+PfnOBICiMQJjvoC+YkMzn1qOYK07HOtF2IyEw+DJA/f+DY3+hCwcp+thzFE84 7JIOrVNZTqWPTtkGDgjNZExuY4fPt1xWCvpkVkWn6YSyyMBaB5h53cCuXFp86Lp3 hA57HyOtpBhqbWruPhpDc9KruNTQwoDJip9sLATJBIL4poKSYPtMfr2br9OoElcu 5LWFNZHpBrXf4O7Hu0tPHdF5/5yWdCTvZsflcZdx64yl3Q+fSIE9R3ejAl+A/rOs yiQJWLF6aCgDy80WO8Zwj/qQAjHUHF7SCrNMyrtDci2Q9oIACo/j7AGSwB8mwu/e 8FJIC5FWjWeuIBIx/v2xouRx5rBwUHoH96OSLPZO1aKrO3ef7y76nAO9TQPyw0i9 O6ehTbO+vqGa5JX2zhqH1bMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 342595876913749669756826034924834793851049 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-04 16:47:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-05 16:47:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bergmannstr71.berlin' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838384245595062137677673767182850549560790221736383673349339770460159727037638737923965454094550872109998732045373991717007866052494023821574576862872447256750131591533382877301386257102495092074559649558998216177678142144778205585527272269740389969433730976067557745787822298913979781467708679124602964392797674956493414178229952331877007894494792928487007623312709563134818245246608792042471752083259452837291352674764738590525483430585746042705179881331730070707826951853703699184990151877518620833036375755663208881828763146798843792698813587087040376261812967829691814085121273014444998432132648643122785475810618541609353726590105108186434668316416858060991510295852655878434847533565424141512859921595144005512877649843013210634524181691320840323831413776208705906816301839678892180731312401840538007050135699989908719764172400563839971872701060079969229590798318932698529875689709869646988471401228454365974327055448650854960069647359384360022155244679492176798793748145687935695927959905839177222883793417889149801991482280310292068408074717382307989373337203446563676437594555466118322823111007431545041259330578506754409967450659045757333268091542727900813032800309668076032656175247086131618690342655481002526544950187443 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 13425cab276d354a13d3ac24fd6ec8141bd76abb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bergmannstr71.berlin' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elstercube.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greifswalderstr212.berlin' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sic.berlin' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bergmannstr71.berlin' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elstercube.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greifswalderstr212.berlin' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sic.berlin' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168b99f8820000004030048304602210097d499d862af34c0f05937b5ed55e40b559868ec8a73280d37f2ddb60be24320022100d0a0cb619a37476e89853f460b38ee4ac34cabd57157e58a34b0faf67f9da072007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168b99f862c000004030046304402200dadc0cc0e4495ad6e649b08d4ba8265d8118b97fdfa66dfdd31916d39c66b8b02203590ea9747bf565477ff3ec825584ad16730935d152b7b50491089ed240d1f67 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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