sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:2f:69:c2:f1:3e:bf:73:0a:69:7e:76:d7:1d:85:7b:91:54 was issued on by Let's Encrypt.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2f:69:c2:f1:3e:bf:73:0a:69:7e:76:d7:1d:85:7b:91:54
Serial Number (int): 364582996110505177560940818573463647916372
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ba:83:9a:bc:95:bd:00:7e:92:c7:c8:d3:4f:27:de:94:53:9e:9b:00
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 03:80:5c:ab:8e:02:39:4e:31:35:61:53:99:3f:6a:fe:74:2e:e3:64
Fingerprint (sha256): 05:ea:39:56:2a:c8:ae:5a:9b:66:96:5f:ea:c2:be:c8:fc:b8:a2:af:f5:2e:54:25:1d:12:a7:65:d2:50:d9:6c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

absl.co.nz
auckland.basketball
bowlswaikanae.com
clubsmart.co.nz
dunedinnetball.co.nz
greenislandbowlingclub.co.nz
hbaquatic.co.nz
hbaquatic.org.nz
hbrac.co.nz
manurewatennisclub.co.nz
matamatanetball.co.nz
myfootball.co.nz
myrugbyleague.co.nz
mysoftball.co.nz
myvolleyball.co.nz
olympicafc.org.nz
ourfc.co.nz
oxfordfc.co.nz
pafc.co.nz
paremataplimmertonrugby.club
phoenixdevelopmentcentre.co.nz
schoolsportaoraki.co.nz
softballwbop.org.nz
sporttaranaki.org.nz
sporty.org.nz
takaroafc.org.nz
warkworthnetball.co.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG/TCCBeWgAwIBAgISBC9pwvE+v3MKaX521x2Fe5FUMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MTEwMjQ5MjdaFw0yMzEyMTAwMjQ5MjZaMBgxFjAUBgNVBAMT
DXNwb3J0eS5vcmcubnowggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv
paLteHIeMl9c9jD/wrmXr6bgT+rG/U14ulymqObQR3NzVDoLoAUz7SuikRWwXTqM
D9/jrpfvFkzN6HMTn7OVza6s+N3ZSpBnAs0uTBvSYG2Q+L7rSPnk7gH9xSsGgGOH
NgMnK1Cx94/EplVomzeB0FGljBngOsnAuDy9aUMiRmfoCZ7NrtQHKMW54CA7wukb
+q/LmlcyiNmMQRQPAdYltN7xjNzaK88z4qsON6BpeyUL6lLJIAg0M/gbZ3kQ7Nfq
HSgfaEctpj6C0/4UJ9vrL943EMU8G4b57Qxp2lC//mtiqFSHZDRi7GJ31RclUPCk
e7p7Q+ZQnZqtbQUAuSKJAgMBAAGjggQlMIIEITAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFLqDmryVvQB+ksfI008n3pRTnpsAMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ
QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz
Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv
MIICKwYDVR0RBIICIjCCAh6CCmFic2wuY28ubnqCE2F1Y2tsYW5kLmJhc2tldGJh
bGyCEWJvd2xzd2Fpa2FuYWUuY29tgg9jbHVic21hcnQuY28ubnqCFGR1bmVkaW5u
ZXRiYWxsLmNvLm56ghxncmVlbmlzbGFuZGJvd2xpbmdjbHViLmNvLm56gg9oYmFx
dWF0aWMuY28ubnqCEGhiYXF1YXRpYy5vcmcubnqCC2hicmFjLmNvLm56ghhtYW51
cmV3YXRlbm5pc2NsdWIuY28ubnqCFW1hdGFtYXRhbmV0YmFsbC5jby5ueoIQbXlm
b290YmFsbC5jby5ueoITbXlydWdieWxlYWd1ZS5jby5ueoIQbXlzb2Z0YmFsbC5j
by5ueoISbXl2b2xsZXliYWxsLmNvLm56ghFvbHltcGljYWZjLm9yZy5ueoILb3Vy
ZmMuY28ubnqCDm94Zm9yZGZjLmNvLm56ggpwYWZjLmNvLm56ghxwYXJlbWF0YXBs
aW1tZXJ0b25ydWdieS5jbHVigh5waG9lbml4ZGV2ZWxvcG1lbnRjZW50cmUuY28u
bnqCF3NjaG9vbHNwb3J0YW9yYWtpLmNvLm56ghNzb2Z0YmFsbHdib3Aub3JnLm56
ghRzcG9ydHRhcmFuYWtpLm9yZy5ueoINc3BvcnR5Lm9yZy5ueoIQdGFrYXJvYWZj
Lm9yZy5ueoIWd2Fya3dvcnRobmV0YmFsbC5jby5uejATBgNVHSAEDDAKMAgGBmeB
DAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AHoyjFTYty22IOo44FIe6YQW
cDIThU070ivBOlejUutSAAABioJbx8AAAAQDAEcwRQIhAPTbITAC23DZJoQP9pDd
86OqXDSy0MIUguECkiGezkMoAiA01q6fiL89QtoU+dnwRADlijJBuXjJycDd0FxK
qjmImgB3AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABioJbx+8A
AAQDAEgwRgIhALqdKv35SrOCsUbD6g0T6pVQqqmPBGCy3TuYTeTbvrVkAiEA3DIq
PS6pHQpxv069OqqmiYWuxrlt1ZL7g/rjA8VS95YwDQYJKoZIhvcNAQELBQADggEB
AJzQZN1A6dFNRqAQrw6O52oG/Cy0FvTkYsJqPf4M+4QPKUMyPBhvL5Xm+Sfk/HAG
I+2hjAdni5W2hDFLSFLIbyUI8jfRVFKv2WF3xOAd7e+BT/MPPgeG3s1j1Foqy4r5
UmLkGMM/OxcweDHhhqEZl/gA/vc7RjpX0zPx6iSD2ljiquSgRbH2n59J9K2UZxDY
IVzc8joBbV+E3i0t/3cSruZiO+SactTfMST/dV/QSP8F60F6vjCwJVWswbGCfIax
uixaiZAm3DJuGvR3JRYNmiSAbQamtIzT2PxhLah2xMXHVf6e0AnIgyn2hip9dsTX
sxuXgqaxrvQhLhNqfmdG8h0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76Wi7XhyHjJfXPYw/8K5
l6+m4E/qxv1NeLpcpqjm0Edzc1Q6C6AFM+0ropEVsF06jA/f466X7xZMzehzE5+z
lc2urPjd2UqQZwLNLkwb0mBtkPi+60j55O4B/cUrBoBjhzYDJytQsfePxKZVaJs3
gdBRpYwZ4DrJwLg8vWlDIkZn6Ameza7UByjFueAgO8LpG/qvy5pXMojZjEEUDwHW
JbTe8Yzc2ivPM+KrDjegaXslC+pSySAINDP4G2d5EOzX6h0oH2hHLaY+gtP+FCfb
6y/eNxDFPBuG+e0MadpQv/5rYqhUh2Q0Yuxid9UXJVDwpHu6e0PmUJ2arW0FALki
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364582996110505177560940818573463647916372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-11 02:49:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 02:49:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30252633257680163051273725365110340562371576957166215500511063638970184074551280011388001551910617850949094798459862768604936339473748414398294618476922185121731029096431968039345930317840283110517585260497883957747628367827744366411505325133698498631585912696258754599618097698595905191036220346985901306954052254905894966903057631149610273475427621816223512575421505782561087826306921752986933009569852105015860042889538870076088704585806210944381782649624403276691376505112980001638479688414610771438917228236818179036733519839522766632216571111254273364053548505554161533851036476479016777513910466986996408066697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba839abc95bd007e92c7c8d34f27de94539e9b00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (546 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auckland.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswaikanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubsmart.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunedinnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenislandbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbaquatic.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbaquatic.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrac.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewatennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matamatanetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myvolleyball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympicafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxfordfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paremataplimmertonrugby.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixdevelopmentcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballwbop.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporttaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takaroafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warkworthnetball.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a825bc7c00000040300473045022100f4db213002db70d926840ff690ddf3a3aa5c34b2d0c21482e10292219ece4328022034d6ae9f88bf3d42da14f9d9f04400e58a3241b978c9c9c0ddd05c4aaa39889a007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a825bc7ef0000040300483046022100ba9d2afdf94ab382b146c3ea0d13ea9550aaa98f0460b2dd3b984de4dbbeb564022100dc322a3d2ea91d0a71bf4ebd3aaaa68985aec6b96dd592fb83fae303c552f796
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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