zamiinuud.customs.gov.mn
Issued by R3
About this certificate
This digital certificate with serial number 04:86:74:35:75:f7:95:60:dc:2f:a0:07:8f:33:5b:04:f5:3b was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=zamiinuud.customs.gov.mn
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:86:74:35:75:f7:95:60:dc:2f:a0:07:8f:33:5b:04:f5:3bSerial Number (int): 394201448926348803409118898093968012408123
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 38:1e:11:5e:c4:56:e6:dd:e8:69:6e:9d:26:cc:41:74:88:84:59:cf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 11:c3:36:8f:2e:1b:91:ec:ca:66:2e:71:6f:34:c3:03:84:59:9d:11
Fingerprint (sha256): 0a:50:6d:b3:45:f7:83:38:ce:3b:0b:c0:b7:c8:a8:bc:cf:05:1b:0d:6c:b9:0f:4d:e9:d7:42:5b:0d:1a:25:0a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate zamiinuud.customs.gov.mn
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for zamiinuud.customs.gov.mn
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
zamiinuud.customs.gov.mn
Other certificates including the domain name customs.gov.mn
(limited to 100 certificates)
darkhanuul.customs.gov.mn
darkhanuul.customs.gov.mn
khovd.customs.gov.mn
gashuunsukhait.customs.gov.mn
zavkhan.customs.gov.mn
bugg.customs.gov.mn
customs.gov.mn
shiveekhuren.customs.gov.mn
buyant-ukhaa.customs.gov.mn
darkhanuul.customs.gov.mn
govialtai.customs.gov.mn
khuvsgul.customs.gov.mn
orkhon.customs.gov.mn
selenge.customs.gov.mn
zamiinuud.customs.gov.mn
govialtai.customs.gov.mn
zavkhan.customs.gov.mn
uvs.customs.gov.mn
ub.customs.gov.mn
khovd.customs.gov.mn
zamiinuud.customs.gov.mn
orkhon.customs.gov.mn
zavkhan.customs.gov.mn
darkhan.customs.gov.mn
bayanulgii.customs.gov.mn
stats.customs.gov.mn
govialtai.customs.gov.mn
orkhon.customs.gov.mn
ub.customs.gov.mn
bichigt.customs.gov.mn
bayanulgii.customs.gov.mn
khuvsgul.customs.gov.mn
zamiinuud.customs.gov.mn
govialtai.customs.gov.mn
darkhanuul.customs.gov.mn
govialtai.customs.gov.mn
customs.gov.mn
gashuunsukhait.customs.gov.mn
stats.customs.gov.mn
buyant-ukhaa.customs.gov.mn
khovd.customs.gov.mn
bugg.customs.gov.mn
ub.customs.gov.mn
gashuunsukhait.customs.gov.mn
orkhon.customs.gov.mn
govialtai.customs.gov.mn
orkhon.customs.gov.mn
khovd.customs.gov.mn
zamiinuud.customs.gov.mn
stats.customs.gov.mn
bichigt.customs.gov.mn
shiveekhuren.customs.gov.mn
bugg.customs.gov.mn
bugg.customs.gov.mn
sainshand.customs.gov.mn
ub.customs.gov.mn
orkhon.customs.gov.mn
stats.customs.gov.mn
bichigt.customs.gov.mn
customs.gov.mn
darkhan.customs.gov.mn
bayanulgii.customs.gov.mn
orkhon.customs.gov.mn
customs.gov.mn
selenge.customs.gov.mn
sainshand.customs.gov.mn
govialtai.customs.gov.mn
customs.gov.mn
gashuunsukhait.customs.gov.mn
dornod.customs.gov.mn
buyant-ukhaa.customs.gov.mn
stats.customs.gov.mn
zamiinuud.customs.gov.mn
bichigt.customs.gov.mn
uvs.customs.gov.mn
darkhanuul.customs.gov.mn
customs.gov.mn
dornod.customs.gov.mn
khuvsgul.customs.gov.mn
sainshand.customs.gov.mn
post.customs.gov.mn
selenge.customs.gov.mn
dornod.customs.gov.mn
bayanulgii.customs.gov.mn
darkhanuul.customs.gov.mn
bichigt.customs.gov.mn
ub.customs.gov.mn
dornod.customs.gov.mn
orkhon.customs.gov.mn
darkhanuul.customs.gov.mn
stats.customs.gov.mn
uvs.customs.gov.mn
darkhanuul.customs.gov.mn
bichigt.customs.gov.mn
khovd.customs.gov.mn
zavkhan.customs.gov.mn
post.customs.gov.mn
zavkhan.customs.gov.mn
post.customs.gov.mn
shiveekhuren.customs.gov.mn
darkhanuul.customs.gov.mn
khovd.customs.gov.mn
gashuunsukhait.customs.gov.mn
zavkhan.customs.gov.mn
bugg.customs.gov.mn
customs.gov.mn
shiveekhuren.customs.gov.mn
buyant-ukhaa.customs.gov.mn
darkhanuul.customs.gov.mn
govialtai.customs.gov.mn
khuvsgul.customs.gov.mn
orkhon.customs.gov.mn
selenge.customs.gov.mn
zamiinuud.customs.gov.mn
govialtai.customs.gov.mn
zavkhan.customs.gov.mn
uvs.customs.gov.mn
ub.customs.gov.mn
khovd.customs.gov.mn
zamiinuud.customs.gov.mn
orkhon.customs.gov.mn
zavkhan.customs.gov.mn
darkhan.customs.gov.mn
bayanulgii.customs.gov.mn
stats.customs.gov.mn
govialtai.customs.gov.mn
orkhon.customs.gov.mn
ub.customs.gov.mn
bichigt.customs.gov.mn
bayanulgii.customs.gov.mn
khuvsgul.customs.gov.mn
zamiinuud.customs.gov.mn
govialtai.customs.gov.mn
darkhanuul.customs.gov.mn
govialtai.customs.gov.mn
customs.gov.mn
gashuunsukhait.customs.gov.mn
stats.customs.gov.mn
buyant-ukhaa.customs.gov.mn
khovd.customs.gov.mn
bugg.customs.gov.mn
ub.customs.gov.mn
gashuunsukhait.customs.gov.mn
orkhon.customs.gov.mn
govialtai.customs.gov.mn
orkhon.customs.gov.mn
khovd.customs.gov.mn
zamiinuud.customs.gov.mn
stats.customs.gov.mn
bichigt.customs.gov.mn
shiveekhuren.customs.gov.mn
bugg.customs.gov.mn
bugg.customs.gov.mn
sainshand.customs.gov.mn
ub.customs.gov.mn
orkhon.customs.gov.mn
stats.customs.gov.mn
bichigt.customs.gov.mn
customs.gov.mn
darkhan.customs.gov.mn
bayanulgii.customs.gov.mn
orkhon.customs.gov.mn
customs.gov.mn
selenge.customs.gov.mn
sainshand.customs.gov.mn
govialtai.customs.gov.mn
customs.gov.mn
gashuunsukhait.customs.gov.mn
dornod.customs.gov.mn
buyant-ukhaa.customs.gov.mn
stats.customs.gov.mn
zamiinuud.customs.gov.mn
bichigt.customs.gov.mn
uvs.customs.gov.mn
darkhanuul.customs.gov.mn
customs.gov.mn
dornod.customs.gov.mn
khuvsgul.customs.gov.mn
sainshand.customs.gov.mn
post.customs.gov.mn
selenge.customs.gov.mn
dornod.customs.gov.mn
bayanulgii.customs.gov.mn
darkhanuul.customs.gov.mn
bichigt.customs.gov.mn
ub.customs.gov.mn
dornod.customs.gov.mn
orkhon.customs.gov.mn
darkhanuul.customs.gov.mn
stats.customs.gov.mn
uvs.customs.gov.mn
darkhanuul.customs.gov.mn
bichigt.customs.gov.mn
khovd.customs.gov.mn
zavkhan.customs.gov.mn
post.customs.gov.mn
zavkhan.customs.gov.mn
post.customs.gov.mn
shiveekhuren.customs.gov.mn
Certificate
The complete raw certificate details for zamiinuud.customs.gov.mn in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISBIZ0NXX3lWDcL6AHjzNbBPU7MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDYyMzEyMjFaFw0yNDA3MDUyMzEyMjBaMCMxITAfBgNVBAMT GHphbWlpbnV1ZC5jdXN0b21zLmdvdi5tbjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJnq+0rzVYTHZ0Lw3xWgon16nAQUSLFTusEgHzlyHacTpcVSSHyY yf1v5dfPmFqNEH9VjUJf15Sw0xlZAnZ4OxsYM5MdGDXNcZTTu7aSczMBFPTsFSza kl/tSq1BB49mt4ud6hSeul9VTaFGdKRczatJFQ3BEjeldTLuP4/ZWunwOX1x+Kz0 +1/bdo0Z3Xv9JoP4x+5PeY6r7VF7zQyBFKA1YdhpUEZFQcdtQ95OsDXrAuI1f64Y NBD6GjtnfDN9dIJHAmrpxJ0xyJ+CZxv/N4BZsk0Gj0ffZTQsDGJxq5Ln9jhWQH+3 UzpUp3rjFVgtFeVltO8iuLLIoeSrgVKU+/sCAwEAAaOCAhkwggIVMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQUOB4RXsRW5t3oaW6dJsxBdIiEWc8wHwYDVR0jBBgwFoAU FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p LmxlbmNyLm9yZy8wIwYDVR0RBBwwGoIYemFtaWludXVkLmN1c3RvbXMuZ292Lm1u MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA SLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGOteYiIQAABAMARjBE AiBIvHJeeH/8EArff1PCGU472fm5nDz1bFJHJPSx9BG8pAIgQEd2I3GDUS8KQVc0 zO0tmSv4OvGYjqQlorwre087fx8AdgA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvB vyiF7PhkbgAAAY615iIwAAAEAwBHMEUCIQC/vdOi8KUKsCylvIPAHO19tjXq4JdD OtIu9C+4HUuPKQIgFDJgWxE3diMsMNtfa2z9PrporP+yooTIKZ5DBFo68uMwDQYJ KoZIhvcNAQELBQADggEBAItdhz49CsxrqmaqeNDI4vRKL4YWXbMbr8wEyl4Bc24f 2KySXdLm6hBKzQQVyV46DNjhayMQswaoGZcx/rwbgbkrKRDJoe4tVbXJqJxyh1Fz f9xwFeNNZoxiqI1AvUe3PxxYr3VOtobl0VAXGfYkxbIyZnYa+wFZwX7nCd2psJkD QJip9QKiVGX6pQP3h/6B1elyd43e4GDbhDzRanltrJuwWy9hTiyi/sVCwbgTfofJ gYqUZbPebXbMuBYd9VvZ3DX5hsiiGOjKDq5j63EsehDEuU8ap+J8tvw3P8rd4DuR SlPYidTMW3KYD0fOQ8VJndTjYygh42jX8hiyHAIcoHQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmer7SvNVhMdnQvDfFaCi fXqcBBRIsVO6wSAfOXIdpxOlxVJIfJjJ/W/l18+YWo0Qf1WNQl/XlLDTGVkCdng7 Gxgzkx0YNc1xlNO7tpJzMwEU9OwVLNqSX+1KrUEHj2a3i53qFJ66X1VNoUZ0pFzN q0kVDcESN6V1Mu4/j9la6fA5fXH4rPT7X9t2jRnde/0mg/jH7k95jqvtUXvNDIEU oDVh2GlQRkVBx21D3k6wNesC4jV/rhg0EPoaO2d8M310gkcCaunEnTHIn4JnG/83 gFmyTQaPR99lNCwMYnGrkuf2OFZAf7dTOlSneuMVWC0V5WW07yK4ssih5KuBUpT7 +wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 394201448926348803409118898093968012408123 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 23:12:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 23:12:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zamiinuud.customs.gov.mn' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19430334411557365516354191319109481109896578388997086562700574544378601409413615691623536031785142973685060860461207726968606572964083694247245634786433553197937524498289913851335705624591615038293426339037482227972623861542322225704731068830862785490385976981432150192354797083108296323740532408162486176679004740919916367416739655182670947595581414709150488807068436145122072372252302728414577355595941534385107200420914509400815051084479466177827959463924650781873787503534435332683070002485274990409658195822933972107372062491280085893402630305964517237480283302053094487085482326659445559676414328727967077039099 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 381e115ec456e6dde8696e9d26cc4174888459cf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zamiinuud.customs.gov.mn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018eb5e622210000040300463044022048bc725e787ffc100adf7f53c2194e3bd9f9b99c3cf56c524724f4b1f411bca40220404776237183512f0a415734cced2d992bf83af1988ea425a2bc2b7b4f3b7f1f0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018eb5e622300000040300473045022100bfbdd3a2f0a50ab02ca5bc83c01ced7db635eae097433ad22ef42fb81d4b8f2902201432605b113776232c30db5f6b6cfd3eba68acffb2a284c8299e43045a3af2e3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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