lime.rallyefokus.de

Issued by R3

About this certificate

This digital certificate with serial number 04:a4:b7:15:28:ba:66:e6:ab:c5:66:1d:35:05:b4:08:3e:4a was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lime.rallyefokus.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a4:b7:15:28:ba:66:e6:ab:c5:66:1d:35:05:b4:08:3e:4a
Serial Number (int): 404498810489602232139436937022299106197066
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 07:98:12:92:1e:db:ec:df:5c:4f:b5:08:16:45:2b:0f:fe:97:11:83
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 98:9a:00:f8:d9:20:ac:25:2b:9a:d9:c3:91:ce:4e:5a:f1:1c:17:4d
Fingerprint (sha256): 98:b6:0b:bc:47:b3:d3:2d:4b:c7:50:37:ba:b3:56:52:f1:8c:58:fe:11:91:ee:e6:fc:6c:50:bb:7c:6a:66:09

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lime.rallyefokus.de

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lime.rallyefokus.de

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.actie-in-de-transport.org
*.actofviolence.de
*.aidt-ev.org
*.buergerforum-atter.de
*.buergerforum-atter.eu
*.ccdb.eu
*.cstrsk.de
*.familytalk.at
*.flindt.dev
*.fuechse-berlin-basketball.de
*.gerritmueller.de
*.heiner-thiel.com
*.inhaleproduction.com
*.kleinehp.de
*.kosmetikpraxis-js.de
*.nikolausmarkt-hau.de
*.profelios.de
*.rantzen.de
*.rnbguitars.at
*.schuetzengilde-ludwigsfelde.de
*.xn--augenarzt-in-dren-g3b.de
actie-in-de-transport.org
actofviolence.de
aidt-ev.org
backend.p-s-soft.de
buergerforum-atter.de
buergerforum-atter.eu
ccdb.eu
cstrsk.de
familytalk.at
flindt.dev
fuechse-berlin-basketball.de
gerritmueller.de
heiner-thiel.com
ideen-zum-schenken.net
inhaleproduction.com
kleinehp.de
kosmetikpraxis-js.de
lime.rallyefokus.de
nikolausmarkt-hau.de
portal.p-s-soft.de
profelios.de
rantzen.de
rnbguitars.at
schuetzengilde-ludwigsfelde.de
ssl.rallyefokus.de
testing.p-s-soft.de
trafficplex.de
xn--augenarzt-in-dren-g3b.de

Other certificates including the domain name rallyefokus.de

(limited to 100 certificates)
n2017.witzepedia.de
cloud.mengqianhonglou.eu.org
pma.gaestehaus-kicker.at
test.antimarder.com
stormp.lima-city.de
*.diecrew.at
www.updates.slashadmincms.de
app.icekey.org
*.zolongo.de
akhpwdikycsdnb.tjark.pro
*.altschottenball.at
2015.p-s-soft.de
www.beste.xhokola.de
hlspam.tjark.pro
*.buchsbaum-atrops.de
*.kleine-raupe-tagesmutter.de
www.rallyefokus.de
dev-api.dlrg-jugend-rn.de
*.meine-schutzfolie.de
exchaanger.lima-city.de
*.gpsfreyzeit.de
www.steinbergprojekte.lima-city.de
zimmer-frei-berlin.de
018.icekey.org
iddtiedwoebxkt.tjark.pro
sistema.enjoi-sailing.com
sistema.kevinkoziol.de
*.wunderzeitmerken.de
www.triplefly.de
*.pixelspielemagazin.de
nate.moinalex.de
agrabbe.lima-city.de
*.thomas-gail.de
*.dr-heil-berlin.de
*.kevinkupilas.de
www.hneubacher.lima-city.de
nkorz.eu
mail01.p-s-soft.de
www.ilonas-cottage.de
kos.lima-city.net
2020.woeschka.com
sunshop.lima-city.net
mailgate.icekey.org
*.physio-millat.de
*.schneele-lengerer.de
agento.rotglut.net
aargauer-jugendradio.ch
*.braut-perle-schneiderei.de
mail.moinalex.de
*.musikschule-adlershof.de
*.ccdb.eu
*.novus-ordo-mundus.org
punkomatisch.lima-city.de
*.mepent.de
www.colorfog.cf
2016.dsl-berater-wst.de
*.lernbluete.at
sql.morningstar-online.de
*.citymusicfm.de
davdi.2icecube.de
*.vitabowl.de
*.family-talk.at
www.merchandise.fabiansimon.info
2015.kevinkoziol.com
*.pss-technik.de
zqddggwwuscvkfw.lima-city.eu
m.rallyefokus.de
www.user60.lima-city.de
*.arameo-security.com
mailgw.bigpicture.at
www.trunstadt.fridaybar.eu
*.braut-perle-schneiderei.de
www.tofukeule.lima-city.de
lingclwww1.kevinkoziol.de
licht2002.lima-city.de
*.betriebsumzug.ch
lobeta.p-s-soft.de
staging.lb-systems.at
*.langeoog-fotos.de
alkh.lima-city.de
o69iay0p.rallyefokus.de
dpgvlidcdfzgakd.infinite-web.de
www.addition100.bdithmar.de
news.dubistdeingym.de
forum.woeschka.com
*.diekleinewilde.de
www.nc.beenaural.de
twentyseventeen.wp-testarea.de
crrozckzrhbphvf.immo-look.eu
ingenieurbuero-scharbach.de
nightowlproductionsw.dt80.net
acms.kevinkoziol.de
projects.tjark.pro
old.beautyled.com
*.b-h-gartenservice.de
p.gullshock.com
fe.vidpxxel.de
vire-waggis.de
app.flaucher.wachbuch.info
internet.rotglut.net

Certificate

The complete raw certificate details for lime.rallyefokus.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE1ry3ZswCzzMpBn8gf0KUPlyOalJC
DSYnwdLM5N1dO+qGGIB84DqCC4nQKdDLv8XhVHbzB97QqaRI5bXR4+WGrQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404498810489602232139436937022299106197066
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-15 09:41:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-16 09:41:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lime.rallyefokus.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004d6bcb766cc02cf3329067f207f42943e5c8e6a52420d2627c1d2cce4dd5d3bea8618807ce03a820b89d029d0cbbfc5e15476f307ded0a9a448e5b5d1e3e586ad
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							079812921edbecdf5c4fb50816452b0ffe971183
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (987 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.actie-in-de-transport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.actofviolence.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aidt-ev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buergerforum-atter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buergerforum-atter.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccdb.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cstrsk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familytalk.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flindt.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fuechse-berlin-basketball.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gerritmueller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heiner-thiel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inhaleproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kleinehp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kosmetikpraxis-js.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nikolausmarkt-hau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.profelios.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rantzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rnbguitars.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schuetzengilde-ludwigsfelde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--augenarzt-in-dren-g3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actie-in-de-transport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actofviolence.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aidt-ev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.p-s-soft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buergerforum-atter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buergerforum-atter.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccdb.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cstrsk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familytalk.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flindt.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuechse-berlin-basketball.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gerritmueller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heiner-thiel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideen-zum-schenken.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inhaleproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kleinehp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosmetikpraxis-js.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lime.rallyefokus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikolausmarkt-hau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.p-s-soft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profelios.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rantzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnbguitars.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuetzengilde-ludwigsfelde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.rallyefokus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.p-s-soft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trafficplex.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--augenarzt-in-dren-g3b.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018654aa62a20000040300473045022100a3a63e7af3a08393443a485bb4705d5ba77c9aa90e5353a9d7d71fd60b63c2ef0220237b682157151a27aa2b23a7ff8d017918d068d0265fb83a89022731ea1aa7e4007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018654aa631a00000403004830460221008921719998a9db7a34ba2be7c2915836fe0abe38e44cce2d3f09455be2e207a50221009f1438cf87c8e9d880153742f0d8a10a79208c6e37aa866fd4648cc63da19715
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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