grade-rc.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:10:d2:8e:a6:01:6e:36:53:26:10:29:49:ff:30:4c:5e:33 was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=grade-rc.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:10:d2:8e:a6:01:6e:36:53:26:10:29:49:ff:30:4c:5e:33
Serial Number (int): 267061254218277831028543463796336860356147
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:cf:b9:45:70:5f:ab:b6:ac:7c:f4:64:a8:9f:ca:8e:f1:4e:46:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:6b:31:a6:2f:74:f0:0f:e3:91:db:7f:7e:04:42:22:8e:9a:7f:1d
Fingerprint (sha256): c8:5d:7f:68:43:b0:b3:07:a2:ee:2a:8c:88:3a:0b:5c:54:6a:1d:87:ae:41:6f:eb:50:61:2a:bf:87:6b:fd:80

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate grade-rc.de

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grade-rc.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.portal.grade.uni-bonn.de
cam-group.org
circl.portal.grade-rc.de
circl.portal.grade.uni-bonn.de
collaborate.cam-group.org
collaborate.macustar.eu
dev.admin.portal.grade.uni-bonn.de
dev.manage.portal.grade-rc.de
dev.manage.portal.grade.uni-bonn.de
dev.partner.portal.grade-rc.de
dev.partner.portal.grade.uni-bonn.de
dev.portal.grade-rc.de
dev.portal.grade.uni-bonn.de
dirc.portal.grade-rc.de
dirc.portal.grade.uni-bonn.de
discourse.macustar.eu
files.cam-group.org
files.grade-rc.de
files.grade.uni-bonn.de
files.macustar.eu
grade-rc.de
heidelberg.portal.grade-rc.de
heidelberg.portal.grade.uni-bonn.de
imbie-rp.grade-rc.de
m3.portal.grade-rc.de
m3.portal.grade.uni-bonn.de
macustar.eu
mailinglist.macustar.eu
manage.portal.grade-rc.de
manage.portal.grade.uni-bonn.de
ocriplasmin.grade.uni-bonn.de
orca.grade.uni-bonn.de
ovis.augenklinik.uni-bonn.de
partner.portal.grade-rc.de
partner.portal.grade.uni-bonn.de
portal.cam-group.org
portal.grade-rc.de
portal.grade.uni-bonn.de
www.cam-group.org
www.macustar.eu

Other certificates including the domain name grade-rc.de

(limited to 100 certificates)
portal.grade-rc.de
portal.grade-rc.de
mail.grade-rc.de
mail.grade-rc.de
grade-rc.de
grade-rc.de
portal.grade-rc.de
grade-rc.de
grade-rc.de
grade-rc.de
mail.grade-rc.de
portal.grade-rc.de
mail.grade-rc.de
gitlab.grade-rc.de
grade-rc.de
chat.grade-rc.de
files.grade-rc.de
files.grade-rc.de
mail.grade-rc.de
grade-rc.de
imbie-rp.grade-rc.de
grade-rc.de
grade-rc.de
files.grade-rc.de
grade-rc.de
portal.grade-rc.de
files.grade-rc.de
grade-rc.de
files.grade-rc.de
grade-rc.de
portal.grade-rc.de
mail.grade-rc.de
files.grade-rc.de
grade-rc.de
grade-rc.de
grade-rc.de
grade-rc.de
files.grade-rc.de
imbie-rp.grade-rc.de
grade-rc.de
mail.grade-rc.de
files.grade-rc.de
portal.grade-rc.de
grade-rc.de
files.grade-rc.de
grade-rc.de
imbie-rp.grade-rc.de
files.grade-rc.de
grade-rc.de
portal.grade-rc.de
files.grade-rc.de
grade-rc.de
mail.grade-rc.de
grade-rc.de
grade-rc.de
grade-rc.de
files.grade-rc.de
imbie-rp.grade-rc.de
grade-rc.de
mail.grade-rc.de
files.grade-rc.de
grade-rc.de
imbie-rp.grade-rc.de
portal.grade-rc.de
grade-rc.de
portal.grade-rc.de
grade-rc.de
grade-rc.de
grade-rc.de

Certificate

The complete raw certificate details for grade-rc.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267061254218277831028543463796336860356147
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-22 14:32:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-23 14:32:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grade-rc.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735056353418297849690880071689478412467214501843069538405175068279581391908367304855978367887832290196935331122275560085662582330497906522087100123213439816563648079034775558370699470276538304967636991942985628154427430142089816337469191134481535415661093669570935206357474587253534674393290646260275162947304630990015878536177527138566873592541293473915551746920552848039874312273098420652693830121297359425011194242947432909983465299625144760857828605713803712252893600523868084027533249806526174273160710962502261214299107810107511007703266654777859651153113369852052949038145147052205602575625943882557324409622676520238044949025530334915155085725298574071013495380494423094786937803547517189949444151232390614214628928446716487673668747154691664050176310968467622467713510666992133854126694423784443752816370196618271496465392403541402416577072440008960079494494271789593541274861614965931916578966874384543753923623991417774761954459064871177964282407813580034458173571358534394650236251057066997917659091526185628095902584080853701021873802381448239983551259625093924131776392494869452498519150817841562385832180287589901028589694890550923911566880997588639331263217051447985459073973807987648256627351774020623445341572158171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62cfb945705fabb6ac7cf464a89fca8ef14e469c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1056 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cam-group.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circl.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circl.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.cam-group.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.macustar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.admin.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manage.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manage.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.partner.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.partner.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirc.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirc.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discourse.macustar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.cam-group.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.macustar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heidelberg.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heidelberg.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imbie-rp.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm3.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm3.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macustar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailinglist.macustar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocriplasmin.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orca.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovis.augenklinik.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.cam-group.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cam-group.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macustar.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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