mail.mini-cooper.id

Issued by R3

About this certificate

This digital certificate with serial number 04:5f:3d:09:50:7e:25:bb:3e:8a:75:7d:28:ee:ad:aa:25:af was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mail.mini-cooper.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:5f:3d:09:50:7e:25:bb:3e:8a:75:7d:28:ee:ad:aa:25:af
Serial Number (int): 380857099855531941375975411465027848906159
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a8:ee:dd:fa:3e:93:12:29:9f:33:16:c7:b6:2b:84:ca:db:e6:81:1d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 41:10:c0:3f:46:ea:fd:f8:02:ff:c1:f1:9e:61:c6:7e:c0:36:1d:65
Fingerprint (sha256): 17:31:85:e0:99:9c:cf:ff:e1:3d:32:0b:7f:ab:5e:5b:e9:98:2d:4a:62:70:55:71:36:a0:bd:cc:8a:cc:28:bf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mail.mini-cooper.id

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.mini-cooper.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.mini-cooper.id
autodiscover.toyotanusantara.com
cpanel.mini-cooper.id
cpanel.toyotanusantara.com
cpcalendars.mini-cooper.id
cpcalendars.toyotanusantara.com
cpcontacts.mini-cooper.id
cpcontacts.toyotanusantara.com
mail.mini-cooper.id
mail.toyotanusantara.com
mini-cooper.id
mini-cooper.id.totalquip.com
toyotanusantara.com
toyotanusantara.com.totalquip.com
webdisk.mini-cooper.id
webdisk.toyotanusantara.com
webmail.mini-cooper.id
webmail.toyotanusantara.com
www.mini-cooper.id
www.mini-cooper.id.totalquip.com
www.toyotanusantara.com
www.toyotanusantara.com.totalquip.com

Other certificates including the domain name mini-cooper.id

(limited to 100 certificates)
www.mitsubishidipobalaraja.com.guramebogor.com
mini-cooper.id
breastfriends.id
mail.mini-cooper.id
autodiscover.mini-cooper.id
mini-cooper.id
www.mini-cooper.guramebogor.com
www.mini-cooper.guramebogor.com
mini-cooper.id
mini-cooper.id
*.guramebogor.com
www.mini-cooper.guramebogor.com
mini-cooper.id
www.mitsubishidipobalaraja.com.guramebogor.com

Certificate

The complete raw certificate details for mail.mini-cooper.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgISBF89CVB+Jbs+inV9KO6tqiWvMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MTQwMTAxMjJaFw0yNDA4MTIwMTAxMjFaMB4xHDAaBgNVBAMT
E21haWwubWluaS1jb29wZXIuaWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6+at2pFUANpR1JU5uv+TF8V7gVs2Z+zfvjDJESpb7yZvAh65sntFzZEuh
uZZHIHlT344cbM7X4ZqItOYYm/dgXPKGTkHYGtjHszG7GXXbeWLVlLI14qvihHhQ
wbDWFHScleGEg+uTrObkGZzGKBT3YwxyemNX/dGgT0bUMxTV2UmkAaxmAb6geFTH
uonY90/PV2IY1RZBh+WD2UhibiUBKHvmTownhIepyD9hRHzvBe9zhDK7tQ8SRLrI
Ly7MT1cGX3rbPE+M4JetDHmJbGZiD0amoENC9zax3ic6c+CqpHpHTbjYMdPxAdf8
ijM/cLEfhflTfqJHxuFgvq0hs1wbAgMBAAGjggRkMIIEYDAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFKju3fo+kxIpnzMWx7YrhMrb5oEdMB8GA1UdIwQYMBaAFBQusxe3
WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0
cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j
ci5vcmcvMIICbAYDVR0RBIICYzCCAl+CG2F1dG9kaXNjb3Zlci5taW5pLWNvb3Bl
ci5pZIIgYXV0b2Rpc2NvdmVyLnRveW90YW51c2FudGFyYS5jb22CFWNwYW5lbC5t
aW5pLWNvb3Blci5pZIIaY3BhbmVsLnRveW90YW51c2FudGFyYS5jb22CGmNwY2Fs
ZW5kYXJzLm1pbmktY29vcGVyLmlkgh9jcGNhbGVuZGFycy50b3lvdGFudXNhbnRh
cmEuY29tghljcGNvbnRhY3RzLm1pbmktY29vcGVyLmlkgh5jcGNvbnRhY3RzLnRv
eW90YW51c2FudGFyYS5jb22CE21haWwubWluaS1jb29wZXIuaWSCGG1haWwudG95
b3RhbnVzYW50YXJhLmNvbYIObWluaS1jb29wZXIuaWSCHG1pbmktY29vcGVyLmlk
LnRvdGFscXVpcC5jb22CE3RveW90YW51c2FudGFyYS5jb22CIXRveW90YW51c2Fu
dGFyYS5jb20udG90YWxxdWlwLmNvbYIWd2ViZGlzay5taW5pLWNvb3Blci5pZIIb
d2ViZGlzay50b3lvdGFudXNhbnRhcmEuY29tghZ3ZWJtYWlsLm1pbmktY29vcGVy
Lmlkght3ZWJtYWlsLnRveW90YW51c2FudGFyYS5jb22CEnd3dy5taW5pLWNvb3Bl
ci5pZIIgd3d3Lm1pbmktY29vcGVyLmlkLnRvdGFscXVpcC5jb22CF3d3dy50b3lv
dGFudXNhbnRhcmEuY29tgiV3d3cudG95b3RhbnVzYW50YXJhLmNvbS50b3RhbHF1
aXAuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB
8QDvAHYAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGPdNU60AAA
BAMARzBFAiEA4Ed48lxOLEPPF8kXNyE5S0BnZ1SUBphVJvEZdWB0Rr4CIA/ha11m
/Ry0c7W21BJ1s5mQ8Jdorfcddq4F+CKuf/OXAHUA3+FW66oFr7WcD4ZxjajAMk6u
Vtlup/WlagHRwTu+UlwAAAGPdNU7iwAABAMARjBEAiA5Z6dPNfyuU7NQO7wO6lFw
E8FAg8FbIuHtBelTkG2KvwIgXIZcXbGlL02ShyJiJP4sUmmej6xywJ0ZYXZoVYHI
g+4wDQYJKoZIhvcNAQELBQADggEBABUswczZRTqGtHDBWiK3JLdM60YRyZTw57nG
dYoxzCie3BWzYfhv7EnHDoOFmoX0PHOMSFihwXZtpmsKj2s3LBUsQisJkMl/DSRz
e/r0/bfdmg3fdGT6dnaEXijqb4ZMUw8pbUX4+Ln1UmoBOBv6xlYSD+DucUmEL2Xr
EDjsJ5MptuZfm/puuB7Dd26f6kvljLrWkCyghzjqm7U6hUASAtiDetprDixZv48s
Mx4BdQMP7KIUgKpKEkSGzOcuRiFqKOuTu/nfwxDhODOs0hhV0g+UMWy2d40Bb+Hf
gYDpgGkQd/0BplXmPzeF1w6joIcUCdHfSMdL5hp2RUhzeGKF+eI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvmrdqRVADaUdSVObr/k
xfFe4FbNmfs374wyREqW+8mbwIeubJ7Rc2RLobmWRyB5U9+OHGzO1+GaiLTmGJv3
YFzyhk5B2BrYx7Mxuxl123li1ZSyNeKr4oR4UMGw1hR0nJXhhIPrk6zm5BmcxigU
92MMcnpjV/3RoE9G1DMU1dlJpAGsZgG+oHhUx7qJ2PdPz1diGNUWQYflg9lIYm4l
ASh75k6MJ4SHqcg/YUR87wXvc4Qyu7UPEkS6yC8uzE9XBl962zxPjOCXrQx5iWxm
Yg9GpqBDQvc2sd4nOnPgqqR6R0242DHT8QHX/IozP3CxH4X5U36iR8bhYL6tIbNc
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380857099855531941375975411465027848906159
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 01:01:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 01:01:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.mini-cooper.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23603441480376629585673915942189548875015753486218447114882643555911681911785476518412708937896304953387532437411917717181357381799626750269998540366128864951160675519571357103907802066236392564883964715131858874596167646299165927617025104001023940635550190600786582614023651888776879820081026636651903896966567315417914855198342244609655835039305841131573301608333885257108374948374787721142881974227798727310250995997686372343070183059925781103642559983856620324245227577335400053592523778581494191526400801857306391468238427656630534015572895957682302452468096461066581383233460247664267707451629021473900346956827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8eeddfa3e9312299f3316c7b62b84cadbe6811d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (611 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mini-cooper.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.toyotanusantara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.mini-cooper.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.toyotanusantara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.mini-cooper.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.toyotanusantara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.mini-cooper.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.toyotanusantara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mini-cooper.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.toyotanusantara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mini-cooper.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mini-cooper.id.totalquip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyotanusantara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyotanusantara.com.totalquip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.mini-cooper.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.toyotanusantara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.mini-cooper.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.toyotanusantara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mini-cooper.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mini-cooper.id.totalquip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toyotanusantara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toyotanusantara.com.totalquip.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f74d53ad00000040300473045022100e04778f25c4e2c43cf17c9173721394b406767549406985526f11975607446be02200fe16b5d66fd1cb473b5b6d41275b39990f09768adf71d76ae05f822ae7ff397007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f74d53b8b000004030046304402203967a74f35fcae53b3503bbc0eea517013c14083c15b22e1ed05e953906d8abf02205c865c5db1a52f4d9287226224fe2c52699e8fac72c09d196176685581c883ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00152cc1ccd9453a86b470c15a22b724b74ceb4611c994f0e7b9c6758a31cc289edc15b361f86fec49c70e83859a85f43c738c4858a1c1766da66b0a8f6b372c152c422b0990c97f0d24737bfaf4fdb7dd9a0ddf7464fa7676845e28ea6f864c530f296d45f8f8b9f5526a01381bfac656120fe0ee7149842f65eb1038ec279329b6e65f9bfa6eb81ec3776e9fea4be58cbad6902ca08738ea9bb53a85401202d8837ada6b0e2c59bf8f2c331e0175030feca21480aa4a124486cce72e46216a28eb93bbf9dfc310e13833acd21855d20f94316cb6778d016fe1df8180e980691077fd01a655e63f3785d70ea3a0871409d1df48c74be61a76454873786285f9e2