ssl.vdivde-it.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a0:d5:34:d1:f0:c7:05:db:6c:e9:10:f8:ad:55:21:ad:b8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssl.vdivde-it.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a0:d5:34:d1:f0:c7:05:db:6c:e9:10:f8:ad:55:21:ad:b8
Serial Number (int): 403177722255029932397014137362957306277304
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a1:b4:f5:dc:99:1d:63:6d:e5:bf:5c:a2:d5:21:e1:ad:50:28:7b:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:6b:d7:e3:45:79:6d:58:d2:65:83:36:58:19:e0:ee:a0:55:f5:ab
Fingerprint (sha256): f0:23:b3:3f:58:44:e6:14:c2:fe:40:f9:e6:63:76:8d:70:ad:23:98:2d:95:b9:56:69:28:0d:b4:e0:90:70:30

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ssl.vdivde-it.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.vdivde-it.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl.vdivde-it.de

Other certificates including the domain name vdivde-it.de

(limited to 100 certificates)
analytics.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
upload.vdivde-it.de
nextmatch.vdivde-it.de
zim-foyer.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
app01.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
transfer.vdivde-it.de
upload.vdivde-it.de
survey.vdivde-it.de
wikibzf.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
stellenangebote.vdivde-it.de
www.vdivde-it.de
vdivde-it.de
*.analytics.vdivde-it.de
upload.vdivde-it.de
stellenangebote.vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
mail.vdivde-it.de
survey.vdivde-it.de
vcse.video.vdivde-it.de
stellenangebote-intranet.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
ssl.vdivde-it.de
vcse.video.vdivde-it.de
wikibzf.vdivde-it.de
app01.vdivde-it.de
exchange.vdivde-it.de
vdivde-it.de
stellenangebote.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
vcse.video.vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
www.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
zim-foyer.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
bl22.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
ssl.vdivde-it.de
analytics.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
*.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
vdivde-it.de
vdivde-it.de
app01.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
stellenangebote-intranet.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
mail.vdivde-it.de
transfer.vdivde-it.de
transfer.vdivde-it.de
vdivde-it.de
transfer.vdivde-it.de
transfer.vdivde-it.de
ssl.vdivde-it.de
app01.vdivde-it.de
vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
mdm.vdivde-it.de
upload.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
*.vdivde-it.de

Certificate

The complete raw certificate details for ssl.vdivde-it.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgISBKDVNNHwxwXbbOkQ+K1VIa24MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMTMwMDExMTFaFw0x
OTA1MTQwMDExMTFaMBsxGTAXBgNVBAMTEHNzbC52ZGl2ZGUtaXQuZGUwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDFGJyga9MXKhYI1NpVXcBzDbqm8AEm
Y1h724EIE6lCP/y7Oft8K08A9aiJc2vp5Ea8uYuWymZ2SlndAc0Xy8pXY7VsRkqz
/8P3sNIffHOujICEQ0W2+uMkcA0Ab46uTLGd1Ds72X2BDKDhiWKSdWaszAm2ZMC9
K8p3Au6uerFOyIDY97NLdZ/wCST1uTr34sKsGjAmoaVBksUHH4U3e++nVl4gtCZc
He965VZAv/BK12vevWUeL4dpOFEG61uiOzq6/DXMM7HiLuf7dhyyzV0khNSFXAM4
Lx3fSdrh+3+1Hd53YJ+W8w1YE+Xn4slguqy8kWC+wXzqrVblQcBx+zLpdmYuqS6p
fbboCypLAIjWAzFCjyt/pWCZL48exus0WS1Rsp8FJtxzjqjKaohsj9+afo0cxDmz
cGDraRFvwT5trl35KYU8oTJGbyV3fqN2tNd4inzGb+5Hc1BJEpupvDwkk0p2KYKH
1FLoo4A5vb+E38uGAEjeg5EkvP1sxXSBxBuKlCdqArF1ea/68uGFka8MaAjKm8FK
NsX2qrxw4CvdJgmovG3BW2nG5+Snkw6gtFouDXyRMeG2qk1Z2Zb7bq6UcpR/zixz
UDiPtuEZxA0C9aIJJKq+rr9rMhpwt/B1DXneuHQ+4HNHP4VvI9DckdRKrtl5ByUS
vcFUMrUUoXsx8QIDAQABo4ICZDCCAmAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSh
tPXcmR1jbeW/XKLVIeGtUCh77TAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHNzbC52ZGl2ZGUtaXQu
ZGUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQC
BIH0BIHxAO8AdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWjk
aFxdAAAEAwBHMEUCIAKQJ9jkKxvJ6KmD/RctfCBmInWpVxTrGnUMxmXBm1pJAiEA
wo7op4yjMdnM3dlUWyhAcdHh6Z/f7NK+V20aNXUfRW8AdQApPFGWVMg5ZbqqUPxY
B9S3b79Yeily3KTDDPTlRUf0eAAAAWjkaFxcAAAEAwBGMEQCIHiNj2cZg58FN/y7
y6AIUTkzWH9NHaOPkdnSXD+5qIYTAiAhEAcXMpvd483Avqh33Of/h9+g2Fz0U+SG
7ZAMT4VrejANBgkqhkiG9w0BAQsFAAOCAQEAEggbU2Zhpr+DUmys1xk9osmHti0/
/tgcULlILKQz9eaRjqdms2n6yhOOlhvEydXWWbLW3Q/uPuTGYA7ekrAKXbV46kPT
vqHHWkRUwK/AQ5mZTbeHLatOp1JY5JZbk1tuXE3xqm7mSXCMxkswDQ+1/Y6+XxUS
YiNbILjuOKiy0wWuP+pUG8t9q10RSw2cxBMooY1aFyxNQYTZtydiCmDK6QhOBHhu
8HdCXtDfIfdFx/Iuyf4c9EYwoGABeWB8+CaO1NweNQ2KUqKdI3Wqj9kfs1NC6OT4
1/lFd4/LHGWD58OuwOmM0pTqHM6XOifMbnfhTG8zNPQ2MUesvU5YuvRDGg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxRicoGvTFyoWCNTaVV3A
cw26pvABJmNYe9uBCBOpQj/8uzn7fCtPAPWoiXNr6eRGvLmLlspmdkpZ3QHNF8vK
V2O1bEZKs//D97DSH3xzroyAhENFtvrjJHANAG+OrkyxndQ7O9l9gQyg4YliknVm
rMwJtmTAvSvKdwLurnqxTsiA2PezS3Wf8Akk9bk69+LCrBowJqGlQZLFBx+FN3vv
p1ZeILQmXB3veuVWQL/wStdr3r1lHi+HaThRButbojs6uvw1zDOx4i7n+3Ycss1d
JITUhVwDOC8d30na4ft/tR3ed2CflvMNWBPl5+LJYLqsvJFgvsF86q1W5UHAcfsy
6XZmLqkuqX226AsqSwCI1gMxQo8rf6VgmS+PHsbrNFktUbKfBSbcc46oymqIbI/f
mn6NHMQ5s3Bg62kRb8E+ba5d+SmFPKEyRm8ld36jdrTXeIp8xm/uR3NQSRKbqbw8
JJNKdimCh9RS6KOAOb2/hN/LhgBI3oORJLz9bMV0gcQbipQnagKxdXmv+vLhhZGv
DGgIypvBSjbF9qq8cOAr3SYJqLxtwVtpxufkp5MOoLRaLg18kTHhtqpNWdmW+26u
lHKUf84sc1A4j7bhGcQNAvWiCSSqvq6/azIacLfwdQ153rh0PuBzRz+FbyPQ3JHU
Sq7ZeQclEr3BVDK1FKF7MfECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403177722255029932397014137362957306277304
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-13 00:11:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-14 00:11:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.vdivde-it.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804082098107090794825448192109467507403825904087593349912783709488247982369764800041536153219926727490379874888927294873042743248351288160053574408743093688981298460485951789148846543463512307172784138027405450057873033196136509205467158796464206232980335956271922916863353593579870343539689009869589882578712500382802099902695679608115040564917502687416558072597284765711188460035389642591405823998296525108050306918809888034719574899269861424522813129867535986466748309923716031605848163329809162884953051115711661750648408533607027830605832916006948901652853403199178296488005266237490235251175788014706337962407073004311284130242851061928459980732378528156037990606451601574921228867432847575110584054105957758468762758771026316739241446234948947268102926574535975081674061418340803833090309252853464510150329210423052613906272153053185333590077037510535051862294155066947706630746500703130578525767401822169804263678569249982128670667981333230816763574942089846064777770214405950063328532054274880019649894878776593472331622686461805466796248503492014456336870569056178258512939412956224838774321535642710236236491606041914796238559006942198565192007962140382404366630620793186892107693789729522641308678430261610110142838944241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1b4f5dc991d636de5bf5ca2d521e1ad50287bed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.vdivde-it.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168e4685c5d00000403004730450220029027d8e42b1bc9e8a983fd172d7c20662275a95714eb1a750cc665c19b5a49022100c28ee8a78ca331d9ccddd9545b284071d1e1e99fdfecd2be576d1a35751f456f007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168e4685c5c00000403004630440220788d8f6719839f0537fcbbcba008513933587f4d1da38f91d9d25c3fb9a88613022021100717329bdde3cdc0bea877dce7ff87dfa0d85cf453e486ed900c4f856b7a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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