www.shantira-bhsgroup.duy6.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 04:f4:25:fc:1c:2e:9e:7e:61:c5:e5:2f:19:22:71:d4:c2:6f was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.shantira-bhsgroup.duy6.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f4:25:fc:1c:2e:9e:7e:61:c5:e5:2f:19:22:71:d4:c2:6f
Serial Number (int): 431528531722003380131246880000618702094959
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9e:7b:b8:36:d0:cf:d7:d1:32:ee:88:80:38:86:17:1e:f1:48:16:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:7b:82:08:26:c7:a6:0f:fb:3f:f8:67:b4:09:53:17:13:bd:a3:c0
Fingerprint (sha256): 1a:ee:7a:d6:a6:40:88:d1:d5:0e:f9:96:68:31:f3:a3:4d:b1:fa:de:26:8a:72:8e:af:75:dd:42:87:0b:1d:a6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.shantira-bhsgroup.duy6.name.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.shantira-bhsgroup.duy6.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.phuonglammedia.com
*.spaceenglishcenter.edu.vn
*.vinhomesmienbac.info
damahad.duy6.name.vn
gosol.duy6.name.vn
phuonglammedia.com
phuonglammedia.duy6.name.vn
shantira-bhsgroup.duy6.name.vn
shantira.bhsgroup.vn
shantira.duy6.name.vn
spaceenglishcenter.duy6.name.vn
spaceenglishcenter.edu.vn
vinhomesmienbac.info
vinhomesmienbac2.duy6.name.vn
voffice.duy6.name.vn
voffice.ihappy.info
www.damahad.duy6.name.vn
www.gosol.duy6.name.vn
www.phuonglammedia.duy6.name.vn
www.shantira-bhsgroup.duy6.name.vn
www.shantira.duy6.name.vn
www.spaceenglishcenter.duy6.name.vn
www.vinhomesmienbac2.duy6.name.vn
www.voffice.duy6.name.vn

Other certificates including the domain name duy6.name.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.shantira-bhsgroup.duy6.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHrjCCBpagAwIBAgISBPQl/Bwunn5hxeUvGSJx1MJvMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA1MTgxMTI4NDNaFw0yMzA4MTYxMTI4NDJaMC0xKzApBgNVBAMT
Ind3dy5zaGFudGlyYS1iaHNncm91cC5kdXk2Lm5hbWUudm4wggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQC6ch7lyHsCHOS26XqM7WMwTXaKXqKntBb4htYc
xRGnBhHHpxNwu4BlR8LoxyUcMbSTKRKf5RCZalz7kgeWMgGWlCI9rQudkp/CZJva
XKq9lKYXUISWnEHzYc7qCt8ygo/vfNd6rUjq20EN7w2yHM1WcIWqCTzkFbiu7OJJ
Xm7FEXzLd6FZ9CPC2PvsFx0n4Uo8GWqD+zk/7M0fH7boIaZcouXe4r8wys9h5x/J
0bWTwqrFfUE4xR1j5r9AF1+GHzb2Bt/COCPtJZN8XlZ8V+2+KS4ukdRmdwozGDh6
18Ebc1gM8ofSa8G0UN6iujgRMoWEyoWQYVnAyIIUE05saXZJAgMBAAGjggTBMIIE
vTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJ57uDbQz9fRMu6IgDiGFx7xSBZEMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMIICkAYDVR0RBIIChzCCAoOCFCoucGh1b25n
bGFtbWVkaWEuY29tghsqLnNwYWNlZW5nbGlzaGNlbnRlci5lZHUudm6CFioudmlu
aG9tZXNtaWVuYmFjLmluZm+CFGRhbWFoYWQuZHV5Ni5uYW1lLnZughJnb3NvbC5k
dXk2Lm5hbWUudm6CEnBodW9uZ2xhbW1lZGlhLmNvbYIbcGh1b25nbGFtbWVkaWEu
ZHV5Ni5uYW1lLnZugh5zaGFudGlyYS1iaHNncm91cC5kdXk2Lm5hbWUudm6CFHNo
YW50aXJhLmJoc2dyb3VwLnZughVzaGFudGlyYS5kdXk2Lm5hbWUudm6CH3NwYWNl
ZW5nbGlzaGNlbnRlci5kdXk2Lm5hbWUudm6CGXNwYWNlZW5nbGlzaGNlbnRlci5l
ZHUudm6CFHZpbmhvbWVzbWllbmJhYy5pbmZvgh12aW5ob21lc21pZW5iYWMyLmR1
eTYubmFtZS52boIUdm9mZmljZS5kdXk2Lm5hbWUudm6CE3ZvZmZpY2UuaWhhcHB5
LmluZm+CGHd3dy5kYW1haGFkLmR1eTYubmFtZS52boIWd3d3Lmdvc29sLmR1eTYu
bmFtZS52boIfd3d3LnBodW9uZ2xhbW1lZGlhLmR1eTYubmFtZS52boIid3d3LnNo
YW50aXJhLWJoc2dyb3VwLmR1eTYubmFtZS52boIZd3d3LnNoYW50aXJhLmR1eTYu
bmFtZS52boIjd3d3LnNwYWNlZW5nbGlzaGNlbnRlci5kdXk2Lm5hbWUudm6CIXd3
dy52aW5ob21lc21pZW5iYWMyLmR1eTYubmFtZS52boIYd3d3LnZvZmZpY2UuZHV5
Ni5uYW1lLnZuMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYB
BAHWeQIEAgSB9ASB8QDvAHUAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS
61IAAAGILtV9+AAABAMARjBEAiBXFMHfkt0UXapwfttcIp1C3YQ0PNeXKJhzKgyF
TFOAJQIgZwdA2V2TFwKfarAD5jOZHr360+2rFoGKQLNSXBvcHWYAdgDoPtDaPvUG
NTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYgu1X3YAAAEAwBHMEUCIQCKIbDu
DvxEpyCNMF2xcrcDlRsboEccrmwve6q4UWHRPAIgNaV503R8TvLgnun5Pg50UDlz
wV35Q2jLQw1H8i9gJ5cwDQYJKoZIhvcNAQELBQADggEBAK8ksUUQVbAo7ScaCDE0
b2vGXyzoIgaV5TfB44X7eG03sWZg/RBs4163ThZUVXYKuNsj8sz/wyAP9XGOavXS
cteGsctLSjENqm1/wFCXSpx/TUCHArx9hVVvdFfx2TwTyxD9KNUUcUecEQaOVzia
aNBLja5Y2bR2JpWFn3nTzOgU2Snr1N+BD94img+zXbDN86umLpTyapficOEvwdkm
3kFYnDDYh/lhZG8UyFc76s5XsTvROpREGIIs2wZswsq57mf49U0qbOghsx7sKVoE
kADSlQ8EB2aKhfHdxIRs+JA0dTcA1Ev+uEwUeRk0v9lVfgp8xgd0nR3CqSvfkWNM
eKo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunIe5ch7Ahzktul6jO1j
ME12il6ip7QW+IbWHMURpwYRx6cTcLuAZUfC6MclHDG0kykSn+UQmWpc+5IHljIB
lpQiPa0LnZKfwmSb2lyqvZSmF1CElpxB82HO6grfMoKP73zXeq1I6ttBDe8NshzN
VnCFqgk85BW4ruziSV5uxRF8y3ehWfQjwtj77BcdJ+FKPBlqg/s5P+zNHx+26CGm
XKLl3uK/MMrPYecfydG1k8KqxX1BOMUdY+a/QBdfhh829gbfwjgj7SWTfF5WfFft
vikuLpHUZncKMxg4etfBG3NYDPKH0mvBtFDeoro4ETKFhMqFkGFZwMiCFBNObGl2
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431528531722003380131246880000618702094959
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-18 11:28:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 11:28:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.shantira-bhsgroup.duy6.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23536599735154821697950683080027645342040162760997120936322011717098831060637803238334791533100596742680796744402083868135962773016042710125753093616964240619857491883931282193931986519044605624442681647736486964850795461648003771959971239836857215582231128078863180720742573293563391769725543894789024320543112596440041125762327173710596967313338115491990036235258410138306710028614272012774083825082553994026877788958409439945736617534592714221897027936061305361495857351082391922446383204776229687062744448226806057598509468029675511296071769598566970432756250138485698063863442949005020702661719998268238887220809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e7bb836d0cfd7d132ee88803886171ef1481644
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (647 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phuonglammedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spaceenglishcenter.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vinhomesmienbac.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damahad.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gosol.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phuonglammedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phuonglammedia.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shantira-bhsgroup.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shantira.bhsgroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shantira.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaceenglishcenter.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaceenglishcenter.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinhomesmienbac.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinhomesmienbac2.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voffice.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voffice.ihappy.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.damahad.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gosol.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phuonglammedia.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shantira-bhsgroup.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shantira.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spaceenglishcenter.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinhomesmienbac2.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voffice.duy6.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001882ed57df8000004030046304402205714c1df92dd145daa707edb5c229d42dd84343cd7972898732a0c854c5380250220670740d95d9317029f6ab003e633991ebdfad3edab16818a40b3525c1bdc1d66007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001882ed57dd800000403004730450221008a21b0ee0efc44a7208d305db172b703951b1ba0471cae6c2f7baab85161d13c022035a579d3747c4ef2e09ee9f93e0e74503973c15df94368cb430d47f22f602797
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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