diadecolegiocristiana.org
Issued by R3
About this certificate
This digital certificate with serial number 03:07:4b:b3:c7:df:fd:f5:4c:57:eb:e7:23:ed:c3:38:48:bc was issued on by Let's Encrypt.
With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=diadecolegiocristiana.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:07:4b:b3:c7:df:fd:f5:4c:57:eb:e7:23:ed:c3:38:48:bcSerial Number (int): 263819459938494843230924298810711189506236
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 3b:55:47:d4:d4:64:ad:3a:ea:40:0e:89:0e:c3:10:56:18:29:6f:01
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b5:8f:84:c1:fa:f7:23:03:53:38:71:d2:31:a2:f5:4d:09:6c:e2:46
Fingerprint (sha256): 0e:d0:d0:a1:b6:74:cf:7f:0c:3a:0f:e6:1f:cb:6b:22:7a:d6:57:1f:c0:96:57:7e:e5:7d:6f:35:f1:da:2e:a4
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate diadecolegiocristiana.org
32
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for diadecolegiocristiana.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bankingmaven.com
beatchroniclyme.com
canibuild.properties
consultingforcharity.com
diadecolegiocristiana.org
digitalstorebuilder.com
encontrogratis.com
feedquick.com
freemanmichaels.com
grandisland.net
hairbotox.us
healthyhomekitchens.com
homesteals.com
ipvforsale.com
jameskrogers.org
lyn.co.in
milestoneinsandinvestments.com
nextnukes.com
norridgewock.com
ofdecision.com
oklawyers.com
olympiclighting.com
pic.stark2023.com
quami.com
sportsmagazine.in
stlouisschooldistrict.com
suchindram.in
swiss4vip.com
townlifthome.com
twittwe.com
ups.ink
yourdigitallife.org
beatchroniclyme.com
canibuild.properties
consultingforcharity.com
diadecolegiocristiana.org
digitalstorebuilder.com
encontrogratis.com
feedquick.com
freemanmichaels.com
grandisland.net
hairbotox.us
healthyhomekitchens.com
homesteals.com
ipvforsale.com
jameskrogers.org
lyn.co.in
milestoneinsandinvestments.com
nextnukes.com
norridgewock.com
ofdecision.com
oklawyers.com
olympiclighting.com
pic.stark2023.com
quami.com
sportsmagazine.in
stlouisschooldistrict.com
suchindram.in
swiss4vip.com
townlifthome.com
twittwe.com
ups.ink
yourdigitallife.org
Other certificates including the domain name diadecolegiocristiana.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for diadecolegiocristiana.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHQDCCBiigAwIBAgISAwdLs8ff/fVMV+vnI+3DOEi8MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMDcwNDI3NTVaFw0yNDA1MDcwNDI3NTRaMCQxIjAgBgNVBAMT GWRpYWRlY29sZWdpb2NyaXN0aWFuYS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1aDPGkZ1bDexazHerwovxpp6gOTW+t+KcB4Eejq01ZQrGIKrc LwmyJcov5i+T12rK7DQqpEbNhmCx6OPzARJ0hySZuXL6vsLsh2o9Y6GSTU0UkIe8 DtfiAoQZ0K//sVIvLUviQBjdaVBAVHdR1FxwT/L3cCvckvsQfJe9q4183Nrfi+zz +VPzBghIZv6YNFWALHDO45Ba/kMD1rH/Odjr969SPts/FnFfnSX4Lb4ipKGLbEON WUYwwZ+1IvGSJqc+YUWGFOx3VzBa/jAFzY3dEllsl5C2ZdCcJBfYe31jksrjKzHB 0oFugXfqeBHpHBBET1E55vHxmQ/Qnef9EFy7AgMBAAGjggRcMIIEWDAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFDtVR9TUZK066kAOiQ7DEFYYKW8BMB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMIICYQYDVR0RBIICWDCCAlSCEGJhbmtpbmdtYXZlbi5jb22C E2JlYXRjaHJvbmljbHltZS5jb22CFGNhbmlidWlsZC5wcm9wZXJ0aWVzghhjb25z dWx0aW5nZm9yY2hhcml0eS5jb22CGWRpYWRlY29sZWdpb2NyaXN0aWFuYS5vcmeC F2RpZ2l0YWxzdG9yZWJ1aWxkZXIuY29tghJlbmNvbnRyb2dyYXRpcy5jb22CDWZl ZWRxdWljay5jb22CE2ZyZWVtYW5taWNoYWVscy5jb22CD2dyYW5kaXNsYW5kLm5l dIIMaGFpcmJvdG94LnVzghdoZWFsdGh5aG9tZWtpdGNoZW5zLmNvbYIOaG9tZXN0 ZWFscy5jb22CDmlwdmZvcnNhbGUuY29tghBqYW1lc2tyb2dlcnMub3JngglseW4u Y28uaW6CHm1pbGVzdG9uZWluc2FuZGludmVzdG1lbnRzLmNvbYINbmV4dG51a2Vz LmNvbYIQbm9ycmlkZ2V3b2NrLmNvbYIOb2ZkZWNpc2lvbi5jb22CDW9rbGF3eWVy cy5jb22CE29seW1waWNsaWdodGluZy5jb22CEXBpYy5zdGFyazIwMjMuY29tgglx dWFtaS5jb22CEXNwb3J0c21hZ2F6aW5lLmlughlzdGxvdWlzc2Nob29sZGlzdHJp Y3QuY29tgg1zdWNoaW5kcmFtLmlugg1zd2lzczR2aXAuY29tghB0b3dubGlmdGhv bWUuY29tggt0d2l0dHdlLmNvbYIHdXBzLmlua4ITeW91cmRpZ2l0YWxsaWZlLm9y ZzATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3 AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjYIJe1MAAAQDAEgw RgIhAOt/JHA5+crKbXcjnB4A7SJKxwyC46OzxDkKNf2pxYfwAiEA7wI1ucl77mhp aIObbMdq7+pM1MkBoLWKbJ3oC55dtWcAdwCi4r/WHt4vLweg1k5tN6fcZUOwxrUu otq3iviabfUX2AAAAY2CCXtZAAAEAwBIMEYCIQC0jq9thzH+8qIQzrXAyuYHRSdB mlzx8nRfS+c62omGhQIhAIAAcNlDeP6R7cAfKGS8lMrjaXt47lOL9JaA2MW40QIL MA0GCSqGSIb3DQEBCwUAA4IBAQComabyPXhSCWKnofuhpTB86vlbgppcZiYmDH+H sYahA/ZealiJcppSoBIulSwGzDwL8haAt0jwHkVRoe7dILHdTWNUTRaAi4Fqol4N 1pU9slCjHMX7zHlpJhDV1JFcPhBxPvs4TG5BZFcnaiK68hgcpcAOpPHLmz/zDoJt IL6PW4c3Ja6D1ekHqHkiBj2CBrWTMDGA0N3kCmYrIjcXZzIklT0hIRRPIMAYgHvX BDFhn+bRsU4ce6ZV9505ppTcxNH++mw5Q84ZUYQ/RQ0sl1oW2g3G5MA1lGtRXxW9 VtXgTRy15Y19Em+J9ljolEN60BUQ4vBHpRJRX8WX92CeTr9c -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWgzxpGdWw3sWsx3q8KL 8aaeoDk1vrfinAeBHo6tNWUKxiCq3C8JsiXKL+Yvk9dqyuw0KqRGzYZgsejj8wES dIckmbly+r7C7IdqPWOhkk1NFJCHvA7X4gKEGdCv/7FSLy1L4kAY3WlQQFR3UdRc cE/y93Ar3JL7EHyXvauNfNza34vs8/lT8wYISGb+mDRVgCxwzuOQWv5DA9ax/znY 6/evUj7bPxZxX50l+C2+IqShi2xDjVlGMMGftSLxkianPmFFhhTsd1cwWv4wBc2N 3RJZbJeQtmXQnCQX2Ht9Y5LK4ysxwdKBboF36ngR6RwQRE9ROebx8ZkP0J3n/RBc uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 263819459938494843230924298810711189506236 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 04:27:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 04:27:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diadecolegiocristiana.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22900517242785107152648414512852677206413423304416739843130989442852787615118666650284286495628885128092584928721903730762168987542366904276210940601670197232565302653718501715388226160592062676606407619552245487144249209669317882611297246065701475690125671515421769235313497300215670497308781252200795191055791600916367431481921040437666672926006170650766665839218536139125580727137078237600478346335091424740475952788413754752178050197637933038081731409500584992218062265546895430090869997534353280464186893782419444910034508524440874877097961251332577063149327884982624806299079641357469674893557173040517382954171 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3b5547d4d464ad3aea400e890ec3105618296f01 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankingmaven.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beatchroniclyme.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.properties' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultingforcharity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diadecolegiocristiana.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalstorebuilder.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encontrogratis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedquick.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freemanmichaels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandisland.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairbotox.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomekitchens.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesteals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipvforsale.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jameskrogers.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyn.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milestoneinsandinvestments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextnukes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norridgewock.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofdecision.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oklawyers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympiclighting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pic.stark2023.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quami.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmagazine.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlouisschooldistrict.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suchindram.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swiss4vip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townlifthome.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twittwe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ups.ink' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourdigitallife.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d82097b530000040300483046022100eb7f247039f9caca6d77239c1e00ed224ac70c82e3a3b3c4390a35fda9c587f0022100ef0235b9c97bee686968839b6cc76aefea4cd4c901a0b58a6c9de80b9e5db567007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d82097b590000040300483046022100b48eaf6d8731fef2a210ceb5c0cae6074527419a5cf1f2745f4be73ada898685022100800070d94378fe91edc01f2864bc94cae3697b78ee538bf49680d8c5b8d1020b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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