www.smallfarmcanada.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ea:60:ec:5e:7a:f4:c1:03:a2:2f:a4:45:1c:87:75:56:1a was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.smallfarmcanada.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ea:60:ec:5e:7a:f4:c1:03:a2:2f:a4:45:1c:87:75:56:1a
Serial Number (int): 428204050772482639432280122615093246907930
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4a:77:60:f0:f6:78:80:4f:4b:d4:92:9d:fa:80:74:aa:c4:c1:2a:2e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:fc:f5:36:e2:9d:be:ea:2a:85:07:f3:a0:e9:20:57:cc:1a:07:d7
Fingerprint (sha256): 0e:0e:ed:b6:36:33:c2:47:0d:56:b9:ef:e7:c9:83:d9:d7:c4:7c:be:53:bd:8c:a6:5e:51:ab:96:32:e7:7a:84

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.smallfarmcanada.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.smallfarmcanada.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allaboutayahuasca.com
cantmarryme.com
communitybankofdelaware.com
domainerama.com
doversportsmedicine.com
manufacturingdrone.com
ogdensportsmedicine.com
passonpence.com
premiumstockage.com
q-vc.com
securoid.com
smallfarmcanada.com
spieletage.com
stemcellsspokane.com
www.allaboutayahuasca.com
www.cantmarryme.com
www.communitybankofdelaware.com
www.domainerama.com
www.doversportsmedicine.com
www.manufacturingdrone.com
www.ogdensportsmedicine.com
www.passonpence.com
www.premiumstockage.com
www.q-vc.com
www.securoid.com
www.smallfarmcanada.com
www.spieletage.com
www.stemcellsspokane.com
www.xn--bebg0aza.com
xn--bebg0aza.com

Other certificates including the domain name smallfarmcanada.com

(limited to 100 certificates)
www.smallfarmcanada.com
www.storytimelabs.ca
smallfarmcanada.com
www.currencytraders.ca

Certificate

The complete raw certificate details for www.smallfarmcanada.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHezCCBmOgAwIBAgISBOpg7F569MEDoi+kRRyHdVYaMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MTMwNDUyMDFaFw0yMzEwMTEwNDUyMDBaMCIxIDAeBgNVBAMT
F3d3dy5zbWFsbGZhcm1jYW5hZGEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0gWzj6yQK0nRTEYe0JY8hx0EEenkWspvN3voiKlHN2CEmXDfQS+/
D3F6z9V+Al3U78OtmbGVg4OjC34W4/i5ptqt4gMmg8+zV2zI01ovCtK0M1QWs1+9
qcDC47TKF+qg/j9TNJibdY50376KtnBfHi3fRu8+8a7jAicOrEqfsTlMZ/aLQZrh
hlRvtUSsIF2q5wAqigqPsumOu6JKsBWFoc2ystmJhh1NOYiEMVDLQW1jQfgCCY6w
n/4ITSlGOiey9HmOmm5GjpXl/l3dbY/SBCswpXLM3ep2eTVD+tFTb0HdS633bLm3
RcXCzw0tfH51/pErtaOnBzqRNelb2NflwQIDAQABo4IEmTCCBJUwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBRKd2Dw9niAT0vUkp36gHSqxMEqLjAfBgNVHSMEGDAWgBQU
LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG
FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku
bGVuY3Iub3JnLzCCAp8GA1UdEQSCApYwggKSghVhbGxhYm91dGF5YWh1YXNjYS5j
b22CD2NhbnRtYXJyeW1lLmNvbYIbY29tbXVuaXR5YmFua29mZGVsYXdhcmUuY29t
gg9kb21haW5lcmFtYS5jb22CF2RvdmVyc3BvcnRzbWVkaWNpbmUuY29tghZtYW51
ZmFjdHVyaW5nZHJvbmUuY29tghdvZ2RlbnNwb3J0c21lZGljaW5lLmNvbYIPcGFz
c29ucGVuY2UuY29tghNwcmVtaXVtc3RvY2thZ2UuY29tgghxLXZjLmNvbYIMc2Vj
dXJvaWQuY29tghNzbWFsbGZhcm1jYW5hZGEuY29tgg5zcGllbGV0YWdlLmNvbYIU
c3RlbWNlbGxzc3Bva2FuZS5jb22CGXd3dy5hbGxhYm91dGF5YWh1YXNjYS5jb22C
E3d3dy5jYW50bWFycnltZS5jb22CH3d3dy5jb21tdW5pdHliYW5rb2ZkZWxhd2Fy
ZS5jb22CE3d3dy5kb21haW5lcmFtYS5jb22CG3d3dy5kb3ZlcnNwb3J0c21lZGlj
aW5lLmNvbYIad3d3Lm1hbnVmYWN0dXJpbmdkcm9uZS5jb22CG3d3dy5vZ2RlbnNw
b3J0c21lZGljaW5lLmNvbYITd3d3LnBhc3NvbnBlbmNlLmNvbYIXd3d3LnByZW1p
dW1zdG9ja2FnZS5jb22CDHd3dy5xLXZjLmNvbYIQd3d3LnNlY3Vyb2lkLmNvbYIX
d3d3LnNtYWxsZmFybWNhbmFkYS5jb22CEnd3dy5zcGllbGV0YWdlLmNvbYIYd3d3
LnN0ZW1jZWxsc3Nwb2thbmUuY29tghR3d3cueG4tLWJlYmcwYXphLmNvbYIQeG4t
LWJlYmcwYXphLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkC
BAIEgfYEgfMA8QB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAAB
iU3Ob7YAAAQDAEcwRQIhAIMGewIxzdzu38ngnSHAjRrAdxQPtq5p5y8rgLZfGYyV
AiBM5jLdD//PB6ZcuMTw3MULgZAokpYCVXUAqXWva3e2xQB3ALc++yTfnE26dfI5
xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABiU3Ob6gAAAQDAEgwRgIhAM3c9Rh6e5QK
BrlBgeJQWvZz6g8n+JBSsK0HSdUkl8G3AiEAlU6IIgKu3Ql6D9Jq6agQ05cLbU+K
f+KDSIY8UBp5x3MwDQYJKoZIhvcNAQELBQADggEBAFIwz2GjwZAYTvDFPqIDdg3D
uys3m83gCOo87ayCD2u3g99CmQ99N2bnJhCnm3CV2umnpkZMrG9BMHUt1n7czM8T
Z9QYehpW2xsybSz4Z5var8hGdZrtF5unyR8f6MBo0Pff8wJBtndmWAm60FrzNKt4
uAzufuKYhpPFMzICBep/IFgrq4qfZdVIKpXiB/5qf0/47b0CpH6rOeBXOjuqlxcH
lyc95UhEOhZPV1XMTbji/tTRQXwrjgY/Ids6RgD9RqcNPnacWbUxHR5gtxYL8tuA
Dj2b763LI0C2xUSArGyNW5az7DF5nXsSpL5txTivs3rCVc/A5J3ZeGLxZsgp7Zs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gWzj6yQK0nRTEYe0JY8
hx0EEenkWspvN3voiKlHN2CEmXDfQS+/D3F6z9V+Al3U78OtmbGVg4OjC34W4/i5
ptqt4gMmg8+zV2zI01ovCtK0M1QWs1+9qcDC47TKF+qg/j9TNJibdY50376KtnBf
Hi3fRu8+8a7jAicOrEqfsTlMZ/aLQZrhhlRvtUSsIF2q5wAqigqPsumOu6JKsBWF
oc2ystmJhh1NOYiEMVDLQW1jQfgCCY6wn/4ITSlGOiey9HmOmm5GjpXl/l3dbY/S
BCswpXLM3ep2eTVD+tFTb0HdS633bLm3RcXCzw0tfH51/pErtaOnBzqRNelb2Nfl
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428204050772482639432280122615093246907930
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 04:52:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 04:52:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.smallfarmcanada.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26512855513442262142782796824260453230845245536736507567936937871411246511093274739484907567577091996722685992564836424372224318363188873275907550937805063953384879705861486397668968658661343251506065153188994862213290191186999397777826077061537942431072004490964692118106201968324834641265322217327912773978448460143796846415401854660493702672959869570485502397146648958096781798825667476356053007376105724321682866505161910066919987312391221453813758546788777676324126514539185062572564163662278269413974381808241949116273561858104073132006148129299985055215588757958737100107164674793150969277535092557939125773761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a7760f0f678804f4bd4929dfa8074aac4c12a2e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (662 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allaboutayahuasca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantmarryme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communitybankofdelaware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainerama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doversportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manufacturingdrone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogdensportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passonpence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiumstockage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q-vc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securoid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallfarmcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spieletage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellsspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allaboutayahuasca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cantmarryme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communitybankofdelaware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domainerama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doversportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manufacturingdrone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ogdensportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passonpence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premiumstockage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.q-vc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securoid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smallfarmcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spieletage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellsspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--bebg0aza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bebg0aza.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001894dce6fb6000004030047304502210083067b0231cddceedfc9e09d21c08d1ac077140fb6ae69e72f2b80b65f198c9502204ce632dd0fffcf07a65cb8c4f0dcc50b819028929602557500a975af6b77b6c5007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001894dce6fa80000040300483046022100cddcf5187a7b940a06b94181e2505af673ea0f27f89052b0ad0749d52497c1b7022100954e882202aedd097a0fd26ae9a810d3970b6d4f8a7fe28348863c501a79c773
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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