gesfactory.com

Issued by R3

About this certificate

This digital certificate with serial number 03:dd:f9:03:71:5e:2e:9b:31:56:b1:f2:9b:04:71:38:6b:30 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gesfactory.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dd:f9:03:71:5e:2e:9b:31:56:b1:f2:9b:04:71:38:6b:30
Serial Number (int): 336870256532023316438042048212517596457776
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:9b:85:ef:5a:7b:a3:59:61:ef:40:33:5d:7c:87:9e:e4:53:48:dd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c5:49:1f:59:d0:74:0f:e5:71:cd:8b:ec:34:4d:f8:06:a5:c6:d3:c2
Fingerprint (sha256): 06:93:7f:68:a8:f4:74:65:82:00:2a:25:16:b0:4e:65:51:60:f7:0f:82:88:5a:b1:8e:ab:33:6f:a5:41:f8:1b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gesfactory.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gesfactory.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

captainlindagreenlaw.com
cignalnetworks.com
donatefreely.com
dtc-tv.com
flymidway.com
gesfactory.com
grocersdelivery.com
houstonstemcelldoctors.com
juneaudentistry.com
mygolfcompany.com
partsprocessors.com
polonniex.com
posterforprint.com
sex-pyrat.com
sportsandentertainmentlawyers.com
www.captainlindagreenlaw.com
www.cignalnetworks.com
www.donatefreely.com
www.dtc-tv.com
www.flymidway.com
www.gesfactory.com
www.grocersdelivery.com
www.houstonstemcelldoctors.com
www.juneaudentistry.com
www.mygolfcompany.com
www.partsprocessors.com
www.polonniex.com
www.posterforprint.com
www.sex-pyrat.com
www.sportsandentertainmentlawyers.com

Other certificates including the domain name gesfactory.com

(limited to 100 certificates)
gesfactory.com
gesfactory.com

Certificate

The complete raw certificate details for gesfactory.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHeDCCBmCgAwIBAgISA935A3FeLpsxVrHymwRxOGswMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MTQxMjUzNTNaFw0yMzEyMTMxMjUzNTJaMBkxFzAVBgNVBAMT
Dmdlc2ZhY3RvcnkuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
2IOSLrfm1l9r9EefB0yDa+BIDhYYAxVSEOLRTHdBlexKxaHE6UpGTj2GAUGBluHn
oK79T270YWPm6+iQVRilNOMZr3f4HQ7xBDNep5IpsSQrs0WAmCb6ulVfpsOMBMmo
HJ7+70kmnPmDhJFDT0r1eEBlbPeYqzp7n3JG7WHNC4sxjTs57sUqq5GRVPZCjYb+
t/GKEsEZgBUbFHpG45UCuwGhjml3+iMHiuthTnAlPdeFDjE2ndFpyUHVRPbuTIf1
GoJKqrgQYtg6SRUibpPGOYVTn/XsWQ7snVB8q7whsjIa6gNyttikZp4hDmZl+bO1
55hNcMbbdHL7clhuhtD+ewIDAQABo4IEnzCCBJswDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBS3m4XvWnujWWHvQDNdfIee5FNI3TAfBgNVHSMEGDAWgBQULrMXt1hWy65Q
CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y
My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn
LzCCAqUGA1UdEQSCApwwggKYghhjYXB0YWlubGluZGFncmVlbmxhdy5jb22CEmNp
Z25hbG5ldHdvcmtzLmNvbYIQZG9uYXRlZnJlZWx5LmNvbYIKZHRjLXR2LmNvbYIN
Zmx5bWlkd2F5LmNvbYIOZ2VzZmFjdG9yeS5jb22CE2dyb2NlcnNkZWxpdmVyeS5j
b22CGmhvdXN0b25zdGVtY2VsbGRvY3RvcnMuY29tghNqdW5lYXVkZW50aXN0cnku
Y29tghFteWdvbGZjb21wYW55LmNvbYITcGFydHNwcm9jZXNzb3JzLmNvbYINcG9s
b25uaWV4LmNvbYIScG9zdGVyZm9ycHJpbnQuY29tgg1zZXgtcHlyYXQuY29tgiFz
cG9ydHNhbmRlbnRlcnRhaW5tZW50bGF3eWVycy5jb22CHHd3dy5jYXB0YWlubGlu
ZGFncmVlbmxhdy5jb22CFnd3dy5jaWduYWxuZXR3b3Jrcy5jb22CFHd3dy5kb25h
dGVmcmVlbHkuY29tgg53d3cuZHRjLXR2LmNvbYIRd3d3LmZseW1pZHdheS5jb22C
End3dy5nZXNmYWN0b3J5LmNvbYIXd3d3Lmdyb2NlcnNkZWxpdmVyeS5jb22CHnd3
dy5ob3VzdG9uc3RlbWNlbGxkb2N0b3JzLmNvbYIXd3d3Lmp1bmVhdWRlbnRpc3Ry
eS5jb22CFXd3dy5teWdvbGZjb21wYW55LmNvbYIXd3d3LnBhcnRzcHJvY2Vzc29y
cy5jb22CEXd3dy5wb2xvbm5pZXguY29tghZ3d3cucG9zdGVyZm9ycHJpbnQuY29t
ghF3d3cuc2V4LXB5cmF0LmNvbYIld3d3LnNwb3J0c2FuZGVudGVydGFpbm1lbnRs
YXd5ZXJzLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIE
gfYEgfMA8QB3ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABipP4
O9oAAAQDAEgwRgIhAPpL4MCfZlmNSaajd+K7KDpjPnXBqNb+XiV7NV4WUYgzAiEA
qraUsbyWWOBb4IMUi6wPp9CeSfCkN2m/v77AYg9l/RUAdgB6MoxU2LcttiDqOOBS
HumEFnAyE4VNO9IrwTpXo1LrUgAAAYqT+DvoAAAEAwBHMEUCIEWtZBxri009rpXz
12LIuvdSmCYjuDP/iyryz3AHf2j9AiEAjHd3Y1kfMK15cK+whWmDIH7wDnbx9Li3
Vv1DiKdxsvYwDQYJKoZIhvcNAQELBQADggEBAI/UKFNfEQlWCFVS6JnS3DbjvKrF
cosgpDoQ6gEn6C3dqlT4GRfjbs1SFlx4MtlShnoMtBozjzxYvzOEUFya92j+SUs2
YVA86oMb/3+5sM4EwWvWEfDcO7UZNb2RDPj7HDJWwOLmU4Iqs6krcPjgIoqJLJQ4
fgASrSPmxkYa29SUYT8Hb9A+jTL3i8KxXo166epTc3oeFaOh7j8owJDBcTwFaC6O
QA+o98NNJ/ybtQe5C+ckxQW77MwKppc/8HhkAJaSuv8MWd5MdVcN3Wvj9IfzQ7wB
UAqtQF+UozMu5+2yRCrBhHSIqXnTOJmiTxFIgcqwajk9JSc8kZeeduuK07E=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IOSLrfm1l9r9EefB0yD
a+BIDhYYAxVSEOLRTHdBlexKxaHE6UpGTj2GAUGBluHnoK79T270YWPm6+iQVRil
NOMZr3f4HQ7xBDNep5IpsSQrs0WAmCb6ulVfpsOMBMmoHJ7+70kmnPmDhJFDT0r1
eEBlbPeYqzp7n3JG7WHNC4sxjTs57sUqq5GRVPZCjYb+t/GKEsEZgBUbFHpG45UC
uwGhjml3+iMHiuthTnAlPdeFDjE2ndFpyUHVRPbuTIf1GoJKqrgQYtg6SRUibpPG
OYVTn/XsWQ7snVB8q7whsjIa6gNyttikZp4hDmZl+bO155hNcMbbdHL7clhuhtD+
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336870256532023316438042048212517596457776
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-14 12:53:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 12:53:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gesfactory.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27332353963390581837466837819661513691847574030824329405670848446582064536107753324000345315053100185705432592966533823824849182840133625260355251739817533199484806973238329961461814962051367513965448288044092321831543146071095967213675965710090502342519445925007917586698169974011664641376929958699308736730267203980709556586840536629232948867064916631573814411495644710930310844047492770101983955078256699567250922417125983885762017593290333612500649957317322353524704446390306274858629277724620576788160138933847805572875491532096156979095027920117927124426703541263997792199914701009509283380279353946966915612283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b79b85ef5a7ba35961ef40335d7c879ee45348dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (668 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captainlindagreenlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cignalnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donatefreely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtc-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flymidway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grocersdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonstemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juneaudentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygolfcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partsprocessors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polonniex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posterforprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sex-pyrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsandentertainmentlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.captainlindagreenlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cignalnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donatefreely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dtc-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flymidway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gesfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grocersdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.houstonstemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juneaudentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mygolfcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partsprocessors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polonniex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.posterforprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sex-pyrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsandentertainmentlawyers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a93f83bda0000040300483046022100fa4be0c09f66598d49a6a377e2bb283a633e75c1a8d6fe5e257b355e16518833022100aab694b1bc9658e05be083148bac0fa7d09e49f0a43769bfbfbec0620f65fd150076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a93f83be80000040300473045022045ad641c6b8b4d3dae95f3d762c8baf752982623b833ff8b2af2cf70077f68fd0221008c777763591f30ad7970afb0856983207ef00e76f1f4b8b756fd4388a771b2f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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