www.edificaimoveis.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:36:2d:3f:df:7d:b2:62:12:17:bd:59:07:9f:ba:98:6d:74 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.edificaimoveis.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:2d:3f:df:7d:b2:62:12:17:bd:59:07:9f:ba:98:6d:74
Serial Number (int): 279772252516459894695839780193494629903732
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 00:52:f9:f8:b0:67:74:0b:e0:3e:16:e2:e2:93:f1:51:7c:d1:29:8d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b0:a0:68:93:a4:9f:6e:56:e3:0c:9c:dc:b2:99:c9:e5:91:04:9d:6b
Fingerprint (sha256): 03:65:3f:95:2e:42:ff:90:0b:ee:a8:b9:2d:28:30:46:32:ba:36:6b:0f:8e:ec:26:49:2d:28:81:aa:47:95:81

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.edificaimoveis.com.br

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.edificaimoveis.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.imobibrasil.net
*.kellymageski.com.br
aspimoveissc.com.br
beckcentral.com.br
casasluxuosas.com.br
edificaimoveis.com.br
foltzimoveis.com.br
kellymageski.com.br
www.aptosp.imobibrasil.net
www.aspimoveissc.com.br
www.aspimoveissc.imobibrasil.net
www.beckcentral.com.br
www.beckcentral.imobibrasil.net
www.casasluxuosas.com.br
www.casasluxuosas.imobibrasil.net
www.edificaimoveis.com.br
www.edificaimoveis.imobibrasil.net
www.foltzimoveis.com.br
www.foltzimoveis.imobibrasil.net
www.imobuniversal.imobibrasil.net
www.kellymageski.imobibrasil.net
www.lucorretora.imobibrasil.net
www.teslaimoveis.imobibrasil.net

Other certificates including the domain name edificaimoveis.com.br

(limited to 100 certificates)
www.edificaimoveis.com.br
edificaimoveis.com.br
edificaimoveis.com.br
edificaimoveis.com.br
edificaimoveis.com.br
edificaimoveis.com.br
edificaimoveis.com.br

Certificate

The complete raw certificate details for www.edificaimoveis.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHYjCCBkqgAwIBAgISAzYtP999smISF71ZB5+6mG10MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA2MjkwNjU3MjFaFw0yMzA5MjcwNjU3MjBaMCQxIjAgBgNVBAMT
GXd3dy5lZGlmaWNhaW1vdmVpcy5jb20uYnIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVclSwT0bf/bVJqY/NCgnRJVDkxEtrBuPacbQ5U2SwNtwRJV/x
q0H2TFaT6FwJH1lnckuHbK9PpA7CpOJpi8Yzgu37XV6M521in6WnOhezF+wFPiZh
izzVaSODCvgwipmjXRiVm0Nbpb/qOaOQoPDWnkGyQHecY0uOZ1kbBujio5+eHD+I
kWfo8enGiq0cf2eSuGtPvN/4+bXR/+KXZb/96Cs4PIA2BP3cx5RaDBpwE6PrzaEr
NOTrCfe3s2xLRKQS9549ZSta0mgVnB+fJYqSNndYWRzNFZsXSWDsxGcmi+9POMpR
2vuIhbp/6mpHhuCfs2IJCse62Mm61wWieCfPAgMBAAGjggR+MIIEejAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFABS+fiwZ3QL4D4W4uKT8VF80SmNMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIChgYDVR0RBIICfTCCAnmCESouaW1vYmlicmFzaWwubmV0
ghUqLmtlbGx5bWFnZXNraS5jb20uYnKCE2FzcGltb3ZlaXNzYy5jb20uYnKCEmJl
Y2tjZW50cmFsLmNvbS5icoIUY2FzYXNsdXh1b3Nhcy5jb20uYnKCFWVkaWZpY2Fp
bW92ZWlzLmNvbS5icoITZm9sdHppbW92ZWlzLmNvbS5icoITa2VsbHltYWdlc2tp
LmNvbS5icoIad3d3LmFwdG9zcC5pbW9iaWJyYXNpbC5uZXSCF3d3dy5hc3BpbW92
ZWlzc2MuY29tLmJygiB3d3cuYXNwaW1vdmVpc3NjLmltb2JpYnJhc2lsLm5ldIIW
d3d3LmJlY2tjZW50cmFsLmNvbS5icoIfd3d3LmJlY2tjZW50cmFsLmltb2JpYnJh
c2lsLm5ldIIYd3d3LmNhc2FzbHV4dW9zYXMuY29tLmJygiF3d3cuY2FzYXNsdXh1
b3Nhcy5pbW9iaWJyYXNpbC5uZXSCGXd3dy5lZGlmaWNhaW1vdmVpcy5jb20uYnKC
Ind3dy5lZGlmaWNhaW1vdmVpcy5pbW9iaWJyYXNpbC5uZXSCF3d3dy5mb2x0emlt
b3ZlaXMuY29tLmJygiB3d3cuZm9sdHppbW92ZWlzLmltb2JpYnJhc2lsLm5ldIIh
d3d3Lmltb2J1bml2ZXJzYWwuaW1vYmlicmFzaWwubmV0giB3d3cua2VsbHltYWdl
c2tpLmltb2JpYnJhc2lsLm5ldIIfd3d3Lmx1Y29ycmV0b3JhLmltb2JpYnJhc2ls
Lm5ldIIgd3d3LnRlc2xhaW1vdmVpcy5pbW9iaWJyYXNpbC5uZXQwEwYDVR0gBAww
CjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgC3Pvsk35xNunXy
OcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYkGKCVBAAAEAwBHMEUCIQDUwcd2/SDB
1hEdWSg0DA93Btb0Aq/EKLAFjSP/hrZ1NAIgfVdxxmITHDm30qtqMrNuRf7icDpZ
LlVFho9eBpx9W+QAdQDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAA
AYkGKCViAAAEAwBGMEQCID4GF4kJmq0/JUH+dAYaJn8MSOt6SfNt2iOHYfJjoFjY
AiAQofGchuWiWRtSDceY5HjWWqVOBXdK3N19u3/TgsT3dzANBgkqhkiG9w0BAQsF
AAOCAQEAeSP6UADrGgSdR9FQSECZvl2T08F33e0T6YAGKfXhLB9kyv6yWIATKnHK
RfV7V1KA2iok7PDLA/zxeFSixMgsywavitHsHH6ZWaXqa+UGolzSI0Ul2mkcDj1F
KGsKDBu5ZDxnWxaCOa9TuqaNHlR8tyH7aKvURRuHR2BTGm/PnsWa3tFwnNCWkE2B
fBOemuaRageXDk1yAdp2xcfan6eskMHjubM4hif2HFBfX7qURtkUNaVT6t7Dj9Tw
4nq1wFA3WCgaaio/2BM+3HxVgVy4Vs18eHWf7c2Mt1WwVb+HbHgxvk8gpN5SGjAR
D14+KOxXnoT6cC8pv1k41Q8cvGKs2g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XJUsE9G3/21SamPzQoJ
0SVQ5MRLawbj2nG0OVNksDbcESVf8atB9kxWk+hcCR9ZZ3JLh2yvT6QOwqTiaYvG
M4Lt+11ejOdtYp+lpzoXsxfsBT4mYYs81Wkjgwr4MIqZo10YlZtDW6W/6jmjkKDw
1p5BskB3nGNLjmdZGwbo4qOfnhw/iJFn6PHpxoqtHH9nkrhrT7zf+Pm10f/il2W/
/egrODyANgT93MeUWgwacBOj682hKzTk6wn3t7NsS0SkEveePWUrWtJoFZwfnyWK
kjZ3WFkczRWbF0lg7MRnJovvTzjKUdr7iIW6f+pqR4bgn7NiCQrHutjJutcFongn
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279772252516459894695839780193494629903732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 06:57:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 06:57:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.edificaimoveis.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26945137584041357643816612208484461977113846811162402418319827432899127396505479217858688686712685200975830623443551947398254561196266942954512317079809663257466140121041603820802424605104674850621534457895733163985558446659986854685118923188941937442355088109462351875805348374884670245812504578469800277615850362192232791528687929009578012687630395160205443611649205770387113780782407906521338670138318526725389582206875342116179656836959680401620523193379337867812943748861903155234034568170805267075276204276703185808047136838375620118510655041390164161471887159248711595789142205111585499960214635510583187220431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0052f9f8b067740be03e16e2e293f1517cd1298d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (637 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kellymageski.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspimoveissc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckcentral.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casasluxuosas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edificaimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foltzimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellymageski.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aptosp.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspimoveissc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspimoveissc.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beckcentral.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beckcentral.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casasluxuosas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casasluxuosas.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edificaimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edificaimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foltzimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foltzimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imobuniversal.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kellymageski.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucorretora.imobibrasil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teslaimoveis.imobibrasil.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189062825410000040300473045022100d4c1c776fd20c1d6111d5928340c0f7706d6f402afc428b0058d23ff86b6753402207d5771c662131c39b7d2ab6a32b36e45fee2703a592e5545868f5e069c7d5be4007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018906282562000004030046304402203e061789099aad3f2541fe74061a267f0c48eb7a49f36dda238761f263a058d8022010a1f19c86e5a2591b520dc798e478d65aa54e05774adcdd7dbb7fd382c4f777
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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