grade-rc.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d6:b3:cc:46:46:89:3f:c9:a5:e0:30:97:2e:3d:8c:29:ca was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=grade-rc.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d6:b3:cc:46:46:89:3f:c9:a5:e0:30:97:2e:3d:8c:29:ca
Serial Number (int): 334396276781523332359662989893995693091274
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 93:a4:6e:91:92:6e:e2:03:9c:40:18:df:e2:83:e1:85:f9:15:fd:03
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:73:f7:15:4f:22:be:70:0a:50:f0:6b:39:0b:f1:9e:a9:2d:0a:03
Fingerprint (sha256): e4:a1:74:dd:34:a7:01:34:31:01:12:74:94:6c:06:dc:36:f0:f0:6a:9e:e6:6d:d4:c0:c2:6f:3f:6e:21:f8:45

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate grade-rc.de

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grade-rc.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.portal.grade.uni-bonn.de
cam-group.org
circl.portal.grade-rc.de
circl.portal.grade.uni-bonn.de
collaborate.cam-group.org
collaborate.macustar.eu
dev.admin.portal.grade.uni-bonn.de
dev.manage.portal.grade-rc.de
dev.manage.portal.grade.uni-bonn.de
dev.partner.portal.grade-rc.de
dev.partner.portal.grade.uni-bonn.de
dev.portal.grade-rc.de
dev.portal.grade.uni-bonn.de
dirc.portal.grade-rc.de
dirc.portal.grade.uni-bonn.de
discourse.macustar.eu
files.cam-group.org
files.grade-rc.de
files.grade.uni-bonn.de
files.macustar.eu
grade-rc.de
heidelberg.portal.grade-rc.de
heidelberg.portal.grade.uni-bonn.de
imbie-rp.grade-rc.de
m3.portal.grade-rc.de
m3.portal.grade.uni-bonn.de
macustar.eu
mailinglist.macustar.eu
manage.portal.grade-rc.de
manage.portal.grade.uni-bonn.de
ocriplasmin.grade.uni-bonn.de
orca.grade.uni-bonn.de
ovis.augenklinik.uni-bonn.de
partner.portal.grade-rc.de
partner.portal.grade.uni-bonn.de
portal.cam-group.org
portal.grade-rc.de
portal.grade.uni-bonn.de
www.cam-group.org
www.macustar.eu

Other certificates including the domain name grade-rc.de

(limited to 100 certificates)
portal.grade-rc.de
portal.grade-rc.de
mail.grade-rc.de
mail.grade-rc.de
grade-rc.de
grade-rc.de
portal.grade-rc.de
grade-rc.de
grade-rc.de
grade-rc.de
mail.grade-rc.de
portal.grade-rc.de
mail.grade-rc.de
gitlab.grade-rc.de
grade-rc.de
chat.grade-rc.de
files.grade-rc.de
files.grade-rc.de
mail.grade-rc.de
grade-rc.de
imbie-rp.grade-rc.de
grade-rc.de
grade-rc.de
files.grade-rc.de
grade-rc.de
portal.grade-rc.de
files.grade-rc.de
grade-rc.de
files.grade-rc.de
grade-rc.de
portal.grade-rc.de
mail.grade-rc.de
files.grade-rc.de
grade-rc.de
grade-rc.de
grade-rc.de
grade-rc.de
files.grade-rc.de
imbie-rp.grade-rc.de
grade-rc.de
mail.grade-rc.de
files.grade-rc.de
portal.grade-rc.de
grade-rc.de
files.grade-rc.de
grade-rc.de
imbie-rp.grade-rc.de
files.grade-rc.de
grade-rc.de
portal.grade-rc.de
files.grade-rc.de
grade-rc.de
mail.grade-rc.de
grade-rc.de
grade-rc.de
grade-rc.de
files.grade-rc.de
imbie-rp.grade-rc.de
grade-rc.de
mail.grade-rc.de
files.grade-rc.de
grade-rc.de
imbie-rp.grade-rc.de
portal.grade-rc.de
grade-rc.de
portal.grade-rc.de
grade-rc.de
grade-rc.de
grade-rc.de

Certificate

The complete raw certificate details for grade-rc.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334396276781523332359662989893995693091274
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-25 07:34:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-23 07:34:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grade-rc.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 914715826879189291471289125630412137208924487668838301991472708035947637032518194096293410766906501142427758036982927143900341187455316313420605358485761506510231082656066281553870929842165906206858760404394048889197315782814666246321542332849835136875381218869715052212507988815483741936123760517563896916904005506840095532392119582801370349355875515517975279809496127202952495049044887688847379787600488798195290091471964686107966084986437983188710792646419372329063613386326089863061372784569269300145413744516809358223567821314995781409216354827764517475715540065744669318554441362878307597703633006947707756790686198090426099001484969705260872617811719263144285146555139094030727816814913905586546030286014530353768773865033726001415329946856878072558012197385073344739436933816428880616805213624936023410992065408239668025349224029099474308205797630606908585202493911472920426156612757760461822257631980005183278222571833703818156025770988723185822952544579787625283232713837015482018382008421472000887082943664845214547677734382754239294202595555206426734364011586312971479099807115665347762430102900843058523550980277438097323728371678329066854969559115513709932691170082054740521952455377097986194547184713126270748279818811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93a46e91926ee2039c4018dfe283e185f915fd03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1056 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cam-group.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circl.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circl.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.cam-group.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.macustar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.admin.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manage.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manage.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.partner.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.partner.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirc.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirc.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discourse.macustar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.cam-group.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.macustar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heidelberg.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heidelberg.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imbie-rp.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm3.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm3.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macustar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailinglist.macustar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocriplasmin.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orca.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovis.augenklinik.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.cam-group.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cam-group.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macustar.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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