ssl.circlesoft.net
Issued by R3
About this certificate
This digital certificate with serial number 03:f7:74:e1:41:80:e6:57:75:a1:79:a6:a7:23:91:e4:4c:4c was issued on by Let's Encrypt.
With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ssl.circlesoft.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f7:74:e1:41:80:e6:57:75:a1:79:a6:a7:23:91:e4:4c:4cSerial Number (int): 345541962467625877316283686300112851848268
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: eb:8d:20:82:ce:ca:4c:6d:d3:25:a6:18:22:fd:bf:dc:71:df:2f:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 58:04:1a:ee:34:e4:7d:a6:02:7d:61:15:1e:85:a2:4d:65:03:63:92
Fingerprint (sha256): 02:07:4b:dc:67:41:4d:be:8c:b2:12:f4:df:c6:a1:e0:ff:e9:92:b3:4f:1a:59:b3:4e:23:ef:05:29:f7:c0:de
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ssl.circlesoft.net
52
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ssl.circlesoft.net
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aesopsattic.com
aesopsattic.com.au
anotherchapter.co.nz
antipodesbookshop.com
bayhillbooks.co.nz
beachsidebookshop.com
beachsidebookshop.com.au
bestlittlebookshopintown.com
boobookonowen.com.au
boobooks.net.au
bookends.co.nz
bookgrove.com.au
booksnz.com
booktique.com.au
brunswickstreetbookstore.com.au
chickenandfrog.co.nz
constantreader.com.au
cookandyoung.com.au
havelocknorth.poppiesbooks.co.nz
marsdenbooks.co.nz
nzeb.co.nz
planetbooks.com.au
poppiesbooks.co.nz
shop.blarneybooks.com.au
ssl.circlesoft.net
store.ulyssesbookstore.com.au
thebooklover.co.nz
theclocksbookshop.co.nz
volumebooks.online
www.aesopsattic.com
www.almobooks.co.nz
www.anotherchapter.co.nz
www.antipodesbookshop.com
www.bayhillbooks.co.nz
www.beachsidebookshop.com
www.beachsidebookshop.com.au
www.bestlittlebookshopintown.com
www.boobookonowen.com.au
www.boobooks.net.au
www.bookends.co.nz
www.bookgrove.com.au
www.booksnz.com
www.brunswickstreetbookstore.com.au
www.chickenandfrog.co.nz
www.constantreader.com.au
www.cookandyoung.com.au
www.havelocknorth.poppiesbooks.co.nz
www.marsdenbooks.co.nz
www.nzeb.co.nz
www.planetbooks.com.au
www.poppiesbooks.co.nz
www.theclocksbookshop.co.nz
aesopsattic.com.au
anotherchapter.co.nz
antipodesbookshop.com
bayhillbooks.co.nz
beachsidebookshop.com
beachsidebookshop.com.au
bestlittlebookshopintown.com
boobookonowen.com.au
boobooks.net.au
bookends.co.nz
bookgrove.com.au
booksnz.com
booktique.com.au
brunswickstreetbookstore.com.au
chickenandfrog.co.nz
constantreader.com.au
cookandyoung.com.au
havelocknorth.poppiesbooks.co.nz
marsdenbooks.co.nz
nzeb.co.nz
planetbooks.com.au
poppiesbooks.co.nz
shop.blarneybooks.com.au
ssl.circlesoft.net
store.ulyssesbookstore.com.au
thebooklover.co.nz
theclocksbookshop.co.nz
volumebooks.online
www.aesopsattic.com
www.almobooks.co.nz
www.anotherchapter.co.nz
www.antipodesbookshop.com
www.bayhillbooks.co.nz
www.beachsidebookshop.com
www.beachsidebookshop.com.au
www.bestlittlebookshopintown.com
www.boobookonowen.com.au
www.boobooks.net.au
www.bookends.co.nz
www.bookgrove.com.au
www.booksnz.com
www.brunswickstreetbookstore.com.au
www.chickenandfrog.co.nz
www.constantreader.com.au
www.cookandyoung.com.au
www.havelocknorth.poppiesbooks.co.nz
www.marsdenbooks.co.nz
www.nzeb.co.nz
www.planetbooks.com.au
www.poppiesbooks.co.nz
www.theclocksbookshop.co.nz
Other certificates including the domain name circlesoft.net
(limited to 100 certificates)
timeout.circlesoft.net
moransbooks.circlesoft.net
johnreedau.alpha.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
neighbourhoodbooks.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
neighbourhoodbooks.circlesoft.net
booksatstones.circlesoft.net
aesopsattic.com
bookpassion.beta.circlesoft.net
www.teahousebooks.circlesoft.net
torquaybooks.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
childrensbookshop.beta.circlesoft.net
thebookroomatlennox.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
booksatstones.circlesoft.net
teahousebooks.beta.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
*.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
booksatstones.circlesoft.net
*.circlesoft.net
torquaybooks.circlesoft.net
moransbooks.circlesoft.net
pageblackmore.beta.circlesoft.net
ballaratonydiard.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
*.circlesoft.net
metropolis.beta.circlesoft.net
bookpassion.beta.circlesoft.net
boobookonowen.beta.circlesoft.net
*.beta.circlesoft.net
bookpassion.beta.circlesoft.net
timeout.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
wholesale.circlesoft.net
neighbourhoodbooks.circlesoft.net
*.alpha.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
childrensbookshop.beta.circlesoft.net
abacus.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
ballaratbridge.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
circlesoft.net
ssl.circlesoft.net
vivabooks.beta.circlesoft.net
abacus.beta.circlesoft.net
moransbooks.circlesoft.net
childrensbookshop.beta.circlesoft.net
ironbirdbookshop.circlesoft.net
matildabookshop.beta.circlesoft.net
johnreedau.beta.circlesoft.net
abacus.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
paradoxbooks.beta.circlesoft.net
cookthebooks.beta.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
pottspoint.beta.circlesoft.net
cowlickbooks.beta.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
area52.circlesoft.net
abacus.circlesoft.net
jasonbooks.circlesoft.net
abacus.beta.circlesoft.net
retail.dev.circlesoft.net
booksatstones.circlesoft.net
moransbooks.circlesoft.net
pageblackmore.beta.circlesoft.net
abacus.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
abacus.circlesoft.net
ssl.circlesoft.net
*.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
johnreedau.alpha.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
neighbourhoodbooks.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
neighbourhoodbooks.circlesoft.net
booksatstones.circlesoft.net
aesopsattic.com
bookpassion.beta.circlesoft.net
www.teahousebooks.circlesoft.net
torquaybooks.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
childrensbookshop.beta.circlesoft.net
thebookroomatlennox.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
booksatstones.circlesoft.net
teahousebooks.beta.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
*.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
booksatstones.circlesoft.net
*.circlesoft.net
torquaybooks.circlesoft.net
moransbooks.circlesoft.net
pageblackmore.beta.circlesoft.net
ballaratonydiard.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
*.circlesoft.net
metropolis.beta.circlesoft.net
bookpassion.beta.circlesoft.net
boobookonowen.beta.circlesoft.net
*.beta.circlesoft.net
bookpassion.beta.circlesoft.net
timeout.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
wholesale.circlesoft.net
neighbourhoodbooks.circlesoft.net
*.alpha.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
childrensbookshop.beta.circlesoft.net
abacus.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
ballaratbridge.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
circlesoft.net
ssl.circlesoft.net
vivabooks.beta.circlesoft.net
abacus.beta.circlesoft.net
moransbooks.circlesoft.net
childrensbookshop.beta.circlesoft.net
ironbirdbookshop.circlesoft.net
matildabookshop.beta.circlesoft.net
johnreedau.beta.circlesoft.net
abacus.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
paradoxbooks.beta.circlesoft.net
cookthebooks.beta.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
pottspoint.beta.circlesoft.net
cowlickbooks.beta.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
area52.circlesoft.net
abacus.circlesoft.net
jasonbooks.circlesoft.net
abacus.beta.circlesoft.net
retail.dev.circlesoft.net
booksatstones.circlesoft.net
moransbooks.circlesoft.net
pageblackmore.beta.circlesoft.net
abacus.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
abacus.circlesoft.net
ssl.circlesoft.net
*.circlesoft.net
ssl.circlesoft.net
Certificate
The complete raw certificate details for ssl.circlesoft.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIII2jCCB8KgAwIBAgISA/d04UGA5ld1oXmmpyOR5ExMMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMjQxMzE4NTBaFw0yNDAxMjIxMzE4NDlaMB0xGzAZBgNVBAMT EnNzbC5jaXJjbGVzb2Z0Lm5ldDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABB0O VlMM8ruqG0GF4Kfaa2AdZxcFqhUh+UgVfZ7Q0g2u6bwo7w/w8GNhZXoPPoxP7KyF PYdFpNrbZ8/GC+MmR92jggbIMIIGxDAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOuN IILOykxt0yWmGCL9v9xx3y9RMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52L FMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVu Y3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIEzwYD VR0RBIIExjCCBMKCD2Flc29wc2F0dGljLmNvbYISYWVzb3BzYXR0aWMuY29tLmF1 ghRhbm90aGVyY2hhcHRlci5jby5ueoIVYW50aXBvZGVzYm9va3Nob3AuY29tghJi YXloaWxsYm9va3MuY28ubnqCFWJlYWNoc2lkZWJvb2tzaG9wLmNvbYIYYmVhY2hz aWRlYm9va3Nob3AuY29tLmF1ghxiZXN0bGl0dGxlYm9va3Nob3BpbnRvd24uY29t ghRib29ib29rb25vd2VuLmNvbS5hdYIPYm9vYm9va3MubmV0LmF1gg5ib29rZW5k cy5jby5ueoIQYm9va2dyb3ZlLmNvbS5hdYILYm9va3Nuei5jb22CEGJvb2t0aXF1 ZS5jb20uYXWCH2JydW5zd2lja3N0cmVldGJvb2tzdG9yZS5jb20uYXWCFGNoaWNr ZW5hbmRmcm9nLmNvLm56ghVjb25zdGFudHJlYWRlci5jb20uYXWCE2Nvb2thbmR5 b3VuZy5jb20uYXWCIGhhdmVsb2Nrbm9ydGgucG9wcGllc2Jvb2tzLmNvLm56ghJt YXJzZGVuYm9va3MuY28ubnqCCm56ZWIuY28ubnqCEnBsYW5ldGJvb2tzLmNvbS5h dYIScG9wcGllc2Jvb2tzLmNvLm56ghhzaG9wLmJsYXJuZXlib29rcy5jb20uYXWC EnNzbC5jaXJjbGVzb2Z0Lm5ldIIdc3RvcmUudWx5c3Nlc2Jvb2tzdG9yZS5jb20u YXWCEnRoZWJvb2tsb3Zlci5jby5ueoIXdGhlY2xvY2tzYm9va3Nob3AuY28ubnqC EnZvbHVtZWJvb2tzLm9ubGluZYITd3d3LmFlc29wc2F0dGljLmNvbYITd3d3LmFs bW9ib29rcy5jby5ueoIYd3d3LmFub3RoZXJjaGFwdGVyLmNvLm56ghl3d3cuYW50 aXBvZGVzYm9va3Nob3AuY29tghZ3d3cuYmF5aGlsbGJvb2tzLmNvLm56ghl3d3cu YmVhY2hzaWRlYm9va3Nob3AuY29tghx3d3cuYmVhY2hzaWRlYm9va3Nob3AuY29t LmF1giB3d3cuYmVzdGxpdHRsZWJvb2tzaG9waW50b3duLmNvbYIYd3d3LmJvb2Jv b2tvbm93ZW4uY29tLmF1ghN3d3cuYm9vYm9va3MubmV0LmF1ghJ3d3cuYm9va2Vu ZHMuY28ubnqCFHd3dy5ib29rZ3JvdmUuY29tLmF1gg93d3cuYm9va3Nuei5jb22C I3d3dy5icnVuc3dpY2tzdHJlZXRib29rc3RvcmUuY29tLmF1ghh3d3cuY2hpY2tl bmFuZGZyb2cuY28ubnqCGXd3dy5jb25zdGFudHJlYWRlci5jb20uYXWCF3d3dy5j b29rYW5keW91bmcuY29tLmF1giR3d3cuaGF2ZWxvY2tub3J0aC5wb3BwaWVzYm9v a3MuY28ubnqCFnd3dy5tYXJzZGVuYm9va3MuY28ubnqCDnd3dy5uemViLmNvLm56 ghZ3d3cucGxhbmV0Ym9va3MuY29tLmF1ghZ3d3cucG9wcGllc2Jvb2tzLmNvLm56 ght3d3cudGhlY2xvY2tzYm9va3Nob3AuY28ubnowEwYDVR0gBAwwCjAIBgZngQwB AgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDatr9rP7W2Ip+bwrtca+hwkXFs u1GEhTS9pD0wSNf7qwAAAYtiDXJCAAAEAwBHMEUCIQC8FOhoTRKgSpIyWJILBlFO /07G5zIki/ssMd1rS/lRuAIgEfd21NX3uZizb0+N3g6kenlxviEkXjmzXXZ+JI+C 1qYAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYtiDXMFAAAE AwBHMEUCIHEkz98m9rrwcEQRe0YnEqhGAlBuVwX7y9S5t854OUVZAiEAtNKEnXSs UdM5PDfNQzl2T72IzZ8rrvHVT+wsFK7yp3kwDQYJKoZIhvcNAQELBQADggEBACCh aAOG7M3tFXnBeD4ktKYX2ENVsU6MOsE1oElx4JMH17G04kqvfcgr1/0lSgEL64q1 d7psqcwleMMM3xq48PpXORZ4pSvSbSvRDwMtbtzJ6eyr67Xf9enBn3WKoZ8p4DWw SVJRDhyKa2ctUJx2CN/R5HjYczYKyqINW8wtoXPH2pM8r+7y0Urrv93zrH457Lhs pE8WXp+AMDirN3OFEhSVcTNoTCRy2L8AQ4d+k7IQSrMMBIVGpdr1lHfxnOSltj1m 1A7IYQNBqEbWX/Xsu7vpjqqJ9E8OJnrCJ6zjrC8VxmnXifpvP9UnR+wM/e8zn7cT y4f8VuDu83zrpIR3ZWc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEHQ5WUwzyu6obQYXgp9prYB1nFwWq FSH5SBV9ntDSDa7pvCjvD/DwY2Fleg8+jE/srIU9h0Wk2ttnz8YL4yZH3Q== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 345541962467625877316283686300112851848268 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 13:18:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 13:18:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.circlesoft.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 00041d0e56530cf2bbaa1b4185e0a7da6b601d671705aa1521f948157d9ed0d20daee9bc28ef0ff0f06361657a0f3e8c4fecac853d8745a4dadb67cfc60be32647dd . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) eb8d2082ceca4c6dd325a61822fdbfdc71df2f51 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1222 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesopsattic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesopsattic.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anotherchapter.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antipodesbookshop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayhillbooks.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachsidebookshop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachsidebookshop.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestlittlebookshopintown.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boobookonowen.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boobooks.net.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookends.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookgrove.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booksnz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booktique.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunswickstreetbookstore.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chickenandfrog.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constantreader.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookandyoung.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorth.poppiesbooks.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdenbooks.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzeb.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetbooks.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poppiesbooks.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.blarneybooks.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.circlesoft.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.ulyssesbookstore.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebooklover.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theclocksbookshop.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volumebooks.online' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aesopsattic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.almobooks.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anotherchapter.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antipodesbookshop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayhillbooks.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beachsidebookshop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beachsidebookshop.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestlittlebookshopintown.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boobookonowen.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boobooks.net.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookends.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookgrove.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksnz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brunswickstreetbookstore.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chickenandfrog.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.constantreader.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookandyoung.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelocknorth.poppiesbooks.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsdenbooks.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzeb.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planetbooks.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poppiesbooks.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theclocksbookshop.co.nz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b620d72420000040300473045022100bc14e8684d12a04a923258920b06514eff4ec6e732248bfb2c31dd6b4bf951b8022011f776d4d5f7b998b36f4f8dde0ea47a7971be21245e39b35d767e248f82d6a600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b620d7305000004030047304502207124cfdf26f6baf07044117b462712a84602506e5705fbcbd4b9b7ce78394559022100b4d2849d74ac51d3393c37cd4339764fbd88cd9f2baef1d54fec2c14aef2a779 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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