*.sodexo.rayoapp.com

Issued by R3

About this certificate

This digital certificate with serial number 04:8e:2c:14:30:d7:2f:96:c0:b5:2b:80:f4:d9:e3:d5:a7:b3 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.sodexo.rayoapp.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8e:2c:14:30:d7:2f:96:c0:b5:2b:80:f4:d9:e3:d5:a7:b3
Serial Number (int): 396827830698170399353473048893577563056051
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 17:7f:38:d8:ee:1b:63:bd:8f:0b:33:70:d8:a1:9c:c7:2e:9d:6f:72
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cf:ae:31:a7:03:3a:4d:9a:ba:21:83:71:78:28:f8:5e:81:4a:26:a4
Fingerprint (sha256): 0b:1d:a8:d8:69:36:1c:3b:25:39:88:e9:0c:c8:a0:05:e8:f2:79:43:3b:f2:4b:0c:ce:d1:1e:46:59:fd:cd:ca

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.sodexo.rayoapp.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sodexo.rayoapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.borrarjuan.rayoapp.com
*.control.rayoapp.com
*.rayoapp.com
*.sodexo.rayoapp.com
rayoapp.com
www.contratosclaro.rayoapp.com
www.datasocofar.rayoapp.com
www.entregas.rayoapp.com
www.fmdev.rayoapp.com
www.freya.rayoapp.com
www.market.rayoapp.com
www.mx.rayoapp.com
www.rayo-ecommerce.rayoapp.com
www.reclutamiento.rayoapp.com
www.store.rayoapp.com

Other certificates including the domain name rayoapp.com

(limited to 100 certificates)
www.dgonor.com
www.caballerovsfidelitone.com
upswell.marketswift.com
www.audiocay.com
www.juke80s-group.com
web.alraska.com
www.ieee-dypiemr.com
innishari.com
cs.tn
crawvision.agro-viz.com
panamericano.app
web.lio.io
www.aisinfo.org
www.luxury.prosperme.in
app.gohihome.com
bayatechllc.com
mre.alyne.app
*.sodexo.rayoapp.com
sandbox.dabblewriter.com
randombrewing.co
innishari.com
vtc2.simpliroute.com
morganlewis.app
sodexo.rayoapp.com
puff.rayoapp.com
partharora.co
salcobrand.rayoapp.com
wallet.0xhazavana.com
feasibility.cway.28east.co.za
lets.dobee.it
duskland.com
codoc.dev
market.manybuild.app
tyer.se
seedbiosciences.com
becasdeportivasusa.com
www.hollyjfitnessapp.com
miiinman.com
nasekomo.tech
dev-dashboard.blendid.com
legotomia.com
www.crescenttraders.in
docs.oqdigital.com
www.ops.rayoapp.com
demo.cao.app
glsl.evos.studio
christmasparty.app
giveaway.organization.gg
cpop.api.cheetay.pk
alpha.nwzer.com
pdf.pdfpal.co
beta.thor.seguimiento.rayoapp.com
www.skadisoft.com
app.spicemissile.com
www.vreau.md
mobile.unikuni.com
wofferz.com
www.mercilith.com
galishops.in
coygo.app
www.fantasize-technology.com
drewcoble.dev
u-link.io
lagaaypharma.nl
moprosoft.halexhg.com
aiventures.ai
app.numerise.com
bunker.finance
rwgprd-1907.enchatment.com
tekode.com
app.pacelist.co.uk
subscription.maider.jp
dev.maeckers.com
www.arugulu.com
www.sunrisesoapindustries.in
abuelaecologica.org
www.accommodationlondon.com
www.datasocofar.rayoapp.com
school-it-plz-no-block.adueppen.xyz
cindydelvalledesign.com
www.gallax.it
checkwise.nl
newcomics.jp
www.palacode-pattatharasi-amman.in
tokyotoushihigai.net
acertei.app
www.kesarkunj.in
panel.localrocket.me
majlisqatarllshabab.com
daveyton.org
going2.com.br
demo.artifact.io
quickfix.tk
care.meruhealth.com
marc.afilio.de
sandbox-kissht.poshvine.com
www.coursewingsblogs.com
api.blaze.today
sada-brian-suk-002.sada-clp-demo.com
partharora.co

Certificate

The complete raw certificate details for *.sodexo.rayoapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgISBI4sFDDXL5bAtSuA9Nnj1aezMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMjEwNTI3MjdaFw0yNDAyMTkwNTI3MjZaMB8xHTAbBgNVBAMM
FCouc29kZXhvLnJheW9hcHAuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2Vwhz30QMvDW4o821qXglN5tTbHGgV0UcbntvbXWk2lM6EPtN+b4BOHJ
urbkwljIu3WbuweTilOc9xBMEeSRwiXNUdHkOfdgN4GU8iZUb5bHyPZbDTd6wNNs
YXZtDtXSeDspbRToMhdmogvfuu3inuJ0LwpMzWfCv5/LDYPgUxVcMewcuST+MLfQ
kBIqVGfUWDg/HcEMTycQafBrAkwpVu1y5V0Cq5IyCethpSD9OVKWJVmzmELKFhxU
MEtZGGl2Zmtg2YBPhr1gEdOIpUjKEPBOvIgGqEuJppm2HhXE6+yxPwDApex2jcPO
uEEJRcAUA3gCBXHN+dfTbBHHI06BPQIDAQABo4IDbzCCA2swDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBQXfzjY7htjvY8LM3DYoZzHLp1vcjAfBgNVHSMEGDAWgBQULrMX
t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0
dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu
Y3Iub3JnLzCCAXcGA1UdEQSCAW4wggFqghgqLmJvcnJhcmp1YW4ucmF5b2FwcC5j
b22CFSouY29udHJvbC5yYXlvYXBwLmNvbYINKi5yYXlvYXBwLmNvbYIUKi5zb2Rl
eG8ucmF5b2FwcC5jb22CC3JheW9hcHAuY29tgh53d3cuY29udHJhdG9zY2xhcm8u
cmF5b2FwcC5jb22CG3d3dy5kYXRhc29jb2Zhci5yYXlvYXBwLmNvbYIYd3d3LmVu
dHJlZ2FzLnJheW9hcHAuY29tghV3d3cuZm1kZXYucmF5b2FwcC5jb22CFXd3dy5m
cmV5YS5yYXlvYXBwLmNvbYIWd3d3Lm1hcmtldC5yYXlvYXBwLmNvbYISd3d3Lm14
LnJheW9hcHAuY29tgh53d3cucmF5by1lY29tbWVyY2UucmF5b2FwcC5jb22CHXd3
dy5yZWNsdXRhbWllbnRvLnJheW9hcHAuY29tghV3d3cuc3RvcmUucmF5b2FwcC5j
b20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8A
dgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYvwj/QPAAAEAwBH
MEUCIA5zjCbpY6byPaDFP+yFq/sDZ12kkMUcYy7jRG/riNQ7AiEA+d1r9O0NZKoA
TGZw07Um4w5njh8neQ7+Z8xo+/5bZXwAdQDuzdBk1dsazsVct520zROiModGfLzs
3sNRSFlGcR+1mwAAAYvwj/QfAAAEAwBGMEQCIC/YR+/yuPBtGVUV0RP8AVO+vHaB
eodlNp243B3f6ZGhAiAiFEBRnSrvVPEeIwqDNPkcVnMOpIDetXIO1ie/L84CTjAN
BgkqhkiG9w0BAQsFAAOCAQEAcaOpzBes6j0Sg1v9jXCkp2wnmnCtSLuEVy05wCze
j5ygwcp+4IBYH/FLayJSnR+7Szm0B4TIoPPhZSC7uYQuFkvfpijkyx+YR1M9yetw
pF0kgEpwSwWlzaJa0EddNWFeRDji1/otxr2GcxekcWYkIad27OvTH2lEmcS91mYz
OeU7TA3EhMFiu8pWT0XVlFDxHpfcNBuo2dI5oTzMRaw3rSVmNjJM/zyzLSeylUkR
d8EJ6g2BUE4TJ2pyCXkGrl5pDm6PqgVH5+DZ/qLg8BzXRhXSiXPgWaiBe5LcfFCz
a97gupDxSr7dGIcbRGN2fF0c9F3patqnACp2v1VMm5Anzg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Vwhz30QMvDW4o821qXg
lN5tTbHGgV0UcbntvbXWk2lM6EPtN+b4BOHJurbkwljIu3WbuweTilOc9xBMEeSR
wiXNUdHkOfdgN4GU8iZUb5bHyPZbDTd6wNNsYXZtDtXSeDspbRToMhdmogvfuu3i
nuJ0LwpMzWfCv5/LDYPgUxVcMewcuST+MLfQkBIqVGfUWDg/HcEMTycQafBrAkwp
Vu1y5V0Cq5IyCethpSD9OVKWJVmzmELKFhxUMEtZGGl2Zmtg2YBPhr1gEdOIpUjK
EPBOvIgGqEuJppm2HhXE6+yxPwDApex2jcPOuEEJRcAUA3gCBXHN+dfTbBHHI06B
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396827830698170399353473048893577563056051
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 05:27:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 05:27:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sodexo.rayoapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27439144195747380404633328055935476396833962677016911090539363015207122259324973199062969781943108580588647656653585688405893346870432034711475047277335975798020144047399197278570909750044928747701749816073262054793379778531567711777072727894457325457079947966561942387704397829124375334842789504170447039863643710153646175859262040930782969855213804580150930690859096554184150545759248853699153568312334766668981793867943344332915896037935816825699964153040392278928003142894318503110440772505694368999233330784027923879598904358668824950417691501103139494545746109956793380821571522719173155841248650874795647205693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							177f38d8ee1b63bd8f0b3370d8a19cc72e9d6f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.borrarjuan.rayoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.rayoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rayoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sodexo.rayoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contratosclaro.rayoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datasocofar.rayoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.entregas.rayoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmdev.rayoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freya.rayoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.market.rayoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mx.rayoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rayo-ecommerce.rayoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reclutamiento.rayoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.store.rayoapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bf08ff40f000004030047304502200e738c26e963a6f23da0c53fec85abfb03675da490c51c632ee3446feb88d43b022100f9dd6bf4ed0d64aa004c6670d3b526e30e678e1f27790efe67cc68fbfe5b657c007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bf08ff41f000004030046304402202fd847eff2b8f06d195515d113fc0153bebc76817a8765369db8dc1ddfe991a10220221440519d2aef54f11e230a8334f91c56730ea480deb5720ed627bf2fce024e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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