ssl.circlesoft.net

Issued by R3

About this certificate

This digital certificate with serial number 04:21:2e:0a:c0:02:8f:63:81:3c:11:28:e2:3e:08:cd:42:9d was issued on by Let's Encrypt.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl.circlesoft.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:21:2e:0a:c0:02:8f:63:81:3c:11:28:e2:3e:08:cd:42:9d
Serial Number (int): 359739662140632124235719982172751044362909
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 36:d8:d6:42:63:73:27:4a:39:16:90:39:b2:95:4e:ad:a0:2c:1b:a2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b0:94:61:72:09:0a:a9:4b:56:21:9e:f4:4e:76:f5:ad:a7:79:31:23
Fingerprint (sha256): 10:b4:39:78:0b:0e:3e:9f:06:4f:2d:b1:a5:b7:64:45:40:16:d4:8d:b5:b6:a2:2c:ad:dc:22:bb:fd:27:6d:d3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl.circlesoft.net

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.circlesoft.net

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aesopsattic.com
aesopsattic.com.au
anotherchapter.co.nz
antipodesbookshop.com
bayhillbooks.co.nz
bestlittlebookshopintown.com
boobookonowen.com.au
boobooks.net.au
bookends.co.nz
bookgrove.com.au
booksnz.com
booktique.com.au
booktiquealbury.com.au
brunswickstreetbookstore.com.au
chickenandfrog.co.nz
constantreader.com.au
cookandyoung.com.au
marsdenbooks.co.nz
nzeb.co.nz
planetbooks.com.au
poppiesbooks.co.nz
shop.blarneybooks.com.au
ssl.circlesoft.net
store.ulyssesbookstore.com.au
thebooklover.co.nz
theclocksbookshop.co.nz
volumebooks.online
www.aesopsattic.com
www.almobooks.co.nz
www.anotherchapter.co.nz
www.antipodesbookshop.com
www.bayhillbooks.co.nz
www.bestlittlebookshopintown.com
www.boobookonowen.com.au
www.boobooks.net.au
www.bookends.co.nz
www.bookgrove.com.au
www.booksnz.com
www.booktiquealbury.com.au
www.brunswickstreetbookstore.com.au
www.chickenandfrog.co.nz
www.constantreader.com.au
www.cookandyoung.com.au
www.marsdenbooks.co.nz
www.nzeb.co.nz
www.planetbooks.com.au
www.poppiesbooks.co.nz
www.theclocksbookshop.co.nz

Other certificates including the domain name circlesoft.net

(limited to 100 certificates)
timeout.circlesoft.net
moransbooks.circlesoft.net
johnreedau.alpha.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
neighbourhoodbooks.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
neighbourhoodbooks.circlesoft.net
booksatstones.circlesoft.net
aesopsattic.com
bookpassion.beta.circlesoft.net
www.teahousebooks.circlesoft.net
torquaybooks.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
childrensbookshop.beta.circlesoft.net
thebookroomatlennox.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
booksatstones.circlesoft.net
teahousebooks.beta.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
*.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
booksatstones.circlesoft.net
*.circlesoft.net
torquaybooks.circlesoft.net
moransbooks.circlesoft.net
pageblackmore.beta.circlesoft.net
ballaratonydiard.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
*.circlesoft.net
metropolis.beta.circlesoft.net
bookpassion.beta.circlesoft.net
boobookonowen.beta.circlesoft.net
*.beta.circlesoft.net
bookpassion.beta.circlesoft.net
timeout.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
wholesale.circlesoft.net
neighbourhoodbooks.circlesoft.net
*.alpha.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
childrensbookshop.beta.circlesoft.net
abacus.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
ballaratbridge.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
circlesoft.net
ssl.circlesoft.net
vivabooks.beta.circlesoft.net
abacus.beta.circlesoft.net
moransbooks.circlesoft.net
childrensbookshop.beta.circlesoft.net
ironbirdbookshop.circlesoft.net
matildabookshop.beta.circlesoft.net
johnreedau.beta.circlesoft.net
abacus.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
paradoxbooks.beta.circlesoft.net
cookthebooks.beta.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
pottspoint.beta.circlesoft.net
cowlickbooks.beta.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
area52.circlesoft.net
abacus.circlesoft.net
jasonbooks.circlesoft.net
abacus.beta.circlesoft.net
retail.dev.circlesoft.net
booksatstones.circlesoft.net
moransbooks.circlesoft.net
pageblackmore.beta.circlesoft.net
abacus.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
abacus.circlesoft.net
ssl.circlesoft.net
*.circlesoft.net
ssl.circlesoft.net

Certificate

The complete raw certificate details for ssl.circlesoft.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAESSuMO69m8lF51PG2Bn8zVFvQSZ4y
TE0ajB2vzA61ka+gfjAWSG6VHrXdPJ2BRwt2xUvsgUhDAc5UW6e0T8SEBQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359739662140632124235719982172751044362909
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 21:12:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 21:12:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.circlesoft.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004492b8c3baf66f25179d4f1b6067f33545bd0499e324c4d1a8c1dafcc0eb591afa07e3016486e951eb5dd3c9d81470b76c54bec81484301ce545ba7b44fc48405
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							36d8d6426373274a39169039b2954eada02c1ba2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1096 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesopsattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesopsattic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anotherchapter.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antipodesbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayhillbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestlittlebookshopintown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boobookonowen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boobooks.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookends.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookgrove.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booksnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booktique.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booktiquealbury.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunswickstreetbookstore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chickenandfrog.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constantreader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookandyoung.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdenbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzeb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poppiesbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.blarneybooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.circlesoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.ulyssesbookstore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebooklover.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theclocksbookshop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volumebooks.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aesopsattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.almobooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anotherchapter.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antipodesbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayhillbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestlittlebookshopintown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boobookonowen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boobooks.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookends.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookgrove.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booktiquealbury.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brunswickstreetbookstore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chickenandfrog.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.constantreader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookandyoung.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsdenbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzeb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planetbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poppiesbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theclocksbookshop.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e10ad1fff000004030047304502210089822de716dbcf5a9f80f0ecc3e29a145e30bc6f83902a9e268ac6a6d09a422f02204e8c1c6d1e2ab6762cd423abe0db67a7e49580cc711ccd1d0cef93564d6b0e50007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e10ad1ffd00000403004630440220224c3c9963ae4cae62c09416e51c681cfeb0bb6fe5f47a7e7f640cdbed2aee020220040d859fa754733200b5f847d27bac647993590ff1d168dcd72e34a153c8d9fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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