egsk.weita.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7b:10:7b:38:db:5f:30:30:af:2d:26:8d:e7:21:2b:6f:70 was issued on by Let's Encrypt.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=egsk.weita.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7b:10:7b:38:db:5f:30:30:af:2d:26:8d:e7:21:2b:6f:70
Serial Number (int): 303213496380197694113026373177926690238320
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 66:c2:2e:65:b0:bf:7f:7e:cc:65:b4:36:3e:9a:30:07:82:af:1c:60
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a7:25:05:06:3b:57:a7:27:28:fa:6a:f3:ae:5c:2c:bc:61:5d:14:b9
Fingerprint (sha256): e5:8a:20:13:dd:04:c6:e6:91:dd:3e:54:80:62:71:c3:cb:b9:4b:ca:40:6d:8b:78:b3:4e:bb:b5:6b:d0:3f:90

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate egsk.weita.ch

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for egsk.weita.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

andermatter.andermatt-swissalps.ch
autodiscover.epaper-poonen.neuer-bund-verlag.de
catalogues.alfacareinternational.com
ebook.aimara.ch
egsk.weita.ch
epaper.bielbienne.com
epaper.wta-suhl.de
fu-kiosk.futuriststeam.co.uk
gastro.papstar.de
katalog.isa-racing.com
katalog.promondo.de
kiosk.heinmedia.eu
kiosk.ownersclub.immo
kiosk.rattpack.eu
kiosk.visionen.com
lies.buchaktuell.de
magazine.arbeit-und-arbeitsrecht.de
magazine.infoboard.de
media.auvesy.com
neubau-projekte.vr-immoservice-mainfranken.de
oldnick.thesatanicwarlock.com
online.gitaliamagazine.it
print.werwaswo.eu
programme.holiday-event.de
publikationen.ehs-verlag.de
read.citymatters.london
webkiosk.beck.de
webkiosk.epaper-kiosk.beam-verlag.de
webkiosk.paginasiete.bo
webkiosk.quittenprojekt-bergstrasse.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosks.sufijournal.org

Other certificates including the domain name weita.ch

(limited to 100 certificates)
moebel-gruber.mediaflip.de
jobst-wohnwelt.mediaflip.de
www.revistacipcisa.com
broschuere.bildkunstakademie.de
kataloge.vitaltours.de
magazine.landroverusa.com
digiprospekt.freyplus.de
kiosk.dolcevita-magazin.ch
jobst-wohnwelt.mediaflip.de
catalogs.k7-pro.com
webkiosks.zaubertopf-club.de
lemagazine.landrover.com
blaetterkatalog.kleentex.eu
jobst-wohnwelt.mediaflip.de
epaper.treffpunkt-bau.eu
immobilienmagazin.steinauer-immo.ch
magazine.montana-cans.com
app.procycling.de
moebel-mmz.mediaflip.de
magazine.montana-cans.com
digital.queencityconnections.com
magazine.montana-cans.com
publications.nursingald.com
magazin.zibibbo.de
jobst-wohnwelt.mediaflip.de
hoffmann-moebel.mediaflip.de
hoffmann-moebel.mediaflip.de
hummerich.mediaflip.de
flyer.medion-fabrikverkauf.de
magazine.landrover.com.cn
www.maryspubs.com
ruesen.mediaflip.de
ruesen.mediaflip.de
ebooks.teammelanie.nz
webkiosk.magazinmarley.de
moebel-zuck.mediaflip.de
digital.queencityconnections.com
egsk.weita.ch
hummerich.mediaflip.de
blaetterkatalog.kleentex.eu
trop.mediaflip.de
angebote.dersteirerhof.at
magazine.biss.team
jobst-wohnwelt.mediaflip.de
read.africanphotomag.co.ke
jobst-wohnwelt.mediaflip.de
weita.ch
hummerich.mediaflip.de
jobst-wohnwelt.mediaflip.de
trop.mediaflip.de
kiosk.leuchtfeuer-verlag.com
weita.ch
kataloge.triplex-fischer.de
mail.weita.ch
moebel-mmz.mediaflip.de
moebel-mai.mediaflip.de
publikationen.kmu.org
kurse.bdb-musikakademie.de
epaper.treffpunkt-bau.eu
app.worldofmtb.de
sonavsofab.xp1.com
ruesen.mediaflip.de
epaper.chili-peppers.de
jobst-wohnwelt.mediaflip.de
catalog.trendyourbrand.com
moebel-zuck.mediaflip.de
webkiosks.zaubertopf-club.de
magazine.biss.team
moebel-berta.mediaflip.de
digital.queencityconnections.com
kataloge.holzimpraegnierwerk.ch
digital.queencityconnections.com
moebel-mmz.mediaflip.de
jobst-wohnwelt.mediaflip.de
digiprospekt.freyplus.de
hummerich.mediaflip.de
digital.queencityconnections.com
publikationen.kmu.org
mobila.mediaflip.de
webkiosk.stephanshof.com
trop.mediaflip.de
publications.nursingald.com
weita.ch
moebel-gruber.mediaflip.de
digital.queencityconnections.com
katalog.hltravel.at
rieswick.mediaflip.de
app.fahrrad-news.com
rieswick.mediaflip.de
webkiosk.stephanshof.com
kiosk.seniorenreisen.de
moebelundobjekt.mediaflip.de
immomagazin.wegenerimmobilien.de
katalog.unzerbrechbar.de
hetmagazine.landrover.com
webkiosk.edeka-koehne.de
weita.ch
medien.koinno-bmwi.de
moebel-meyer.mediaflip.de
mail.weita.ch

Certificate

The complete raw certificate details for egsk.weita.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB1NcHz1VaFi8g+yOiKA
IIyk4YE3KTlDaDPOPXjVrz/mfo/rZOlfNbIdm0anpR7eqrPtHV8hz2SKyTSmbdJa
StBQ3py2DmsshiuiQ3suIcA7gQtqs+/URFtKrL92KvHvWv3o+up+9VdYVSKiktED
GjmKttSeF8st15kA+FSxXKToj48iz3OO17LzuJ5TMhMYrOv+Hzrqx5a/W3MF4sxz
Rzdm8sPcooQ8PeVI6e4PpVhOUYlhX2PMrTYRvjsAKpZtPjmQ9WgXbsYGPoh0QvvH
NGTzDh06fxdwPzlcHneA2e/8M2OPx174kqWrv3egmjfgIc+DXmYdiPH0mA0hIYec
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303213496380197694113026373177926690238320
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-27 07:03:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-25 07:03:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'egsk.weita.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20717531614584813932101110573178967356332622813655101878159671395351653798709166158042791299139279917135382175334039123486835807685401293150644902141833199880528337959454953764082728758417061734285739841973390857295651806627575171679661608812790271373255953315276876964111088286895039628882223717881717846298792466833147343618219718100715298411676777378919618990208390284796710242204270116993059480231853390826406215935045977969426677620458223657306127839886697099354402242669333798953081141541975028749308477488244689012581044579940489185294151249226605023611768870025162224719036835239402171453085008588186560470211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66c22e65b0bf7f7ecc65b4363e9a300782af1c60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (890 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andermatter.andermatt-swissalps.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.epaper-poonen.neuer-bund-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogues.alfacareinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebook.aimara.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egsk.weita.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.bielbienne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.wta-suhl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fu-kiosk.futuriststeam.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gastro.papstar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.isa-racing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.promondo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.heinmedia.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.ownersclub.immo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.rattpack.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.visionen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lies.buchaktuell.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.arbeit-und-arbeitsrecht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.infoboard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.auvesy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neubau-projekte.vr-immoservice-mainfranken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldnick.thesatanicwarlock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.gitaliamagazine.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'print.werwaswo.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programme.holiday-event.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.ehs-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.citymatters.london'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.beck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.epaper-kiosk.beam-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.paginasiete.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.quittenprojekt-bergstrasse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.sufijournal.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001657a6883a10000040300473045022100c8838cb235e35d54caa76d42012db7e673c4eb238d5b2aef002030fc4e37c40a02205bda72e0bf8b8453e1dc2117a4249be81f9150ebdd961de7bd2f6c26ac3d073d0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001657a688479000004030046304402205819cf3e8b5fdec80921359a70f437229be122041b82755d972a35feae0fef2c022041d4a5fcc7f2041a9aaf14bca49571b7227d2328601c9e4096c080e8e41bd324
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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