www.mag4vip.com

Issued by R3

About this certificate

This digital certificate with serial number 04:6f:03:70:de:e0:70:08:11:d5:36:f0:ad:61:41:75:07:c1 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.mag4vip.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:6f:03:70:de:e0:70:08:11:d5:36:f0:ad:61:41:75:07:c1
Serial Number (int): 386225060196977379169829225124990620600257
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ad:11:98:ed:22:40:60:7a:1c:ac:66:88:58:8a:dc:48:6c:3d:30:bc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 89:a4:21:15:67:6f:e1:9d:55:2b:00:58:d5:be:d6:e9:30:02:b4:85
Fingerprint (sha256): 1b:cf:8e:76:02:88:a7:cc:7a:af:2b:22:1a:1d:07:a0:f7:0e:f8:e1:f8:47:0a:dd:6b:71:b6:de:03:da:95:25

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.mag4vip.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mag4vip.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ccpreporter.com
explorenostr.com
frescostemcelltreatmentcenter.com
globaltalentconnector.com
goodbyecancer.com
kaskokarsilastirma.com
kpopok.com
mag4vip.com
manamaforvip.com
melosync.com
offerseas.com
statesrepublic.com
subordinatework.com
vrrama.com
www.ccpreporter.com
www.explorenostr.com
www.frescostemcelltreatmentcenter.com
www.globaltalentconnector.com
www.goodbyecancer.com
www.kaskokarsilastirma.com
www.kpopok.com
www.mag4vip.com
www.manamaforvip.com
www.melosync.com
www.offerseas.com
www.statesrepublic.com
www.subordinatework.com
www.vrrama.com
www.xn--5dbhr4a.com
xn--5dbhr4a.com

Other certificates including the domain name mag4vip.com

(limited to 100 certificates)
carryarbitrage.com
www.mag4vip.com
brilliantscience.org
anja.pizza
collinbruce.com
summons.co.za
tuna.vc
evangelicalteachertrainingassociation.org
alanesears.org
aprofile.org
1071.org

Certificate

The complete raw certificate details for www.mag4vip.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHTzCCBjegAwIBAgISBG8DcN7gcAgR1TbwrWFBdQfBMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MDkwNTE5MDlaFw0yNDA4MDcwNTE5MDhaMBoxGDAWBgNVBAMT
D3d3dy5tYWc0dmlwLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AOcYmwMpsMNxyphv7m6YB/FSRC2lL7wmy6VsvHHwgu+pvyw3deeoJS1cvCq6D0iM
ZBkcMEoRtoZhKFR7oR/04D7WTpEM6o57c5rYhtZyaXoGy+liH6a3x+grUJ7ZEg6h
UeJZD/zQ9fIIDFa16Dqu/mn9O4ywC7DWY0G1I65Onl9ZbbYL0rJ5xiOn8fQv/seE
fUkcKmdEvS/AdusYU3Nvj6pGR9tIpsi7kfxgNrLZXD581OhZwJZsHciaZDClueTI
hwDWkv4ozyhitcCckyTkR+iNN9gBT6Nu8cVAlYwHyqrgKFz1MjJUTgUDUHps4Ays
Nx8mRPAPzYyQQqgfr/QAyXUCAwEAAaOCBHUwggRxMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUrRGY7SJAYHocrGaIWIrcSGw9MLwwHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wggJ9BgNVHREEggJ0MIICcIIPY2NwcmVwb3J0ZXIuY29tghBleHBsb3Jlbm9z
dHIuY29tgiFmcmVzY29zdGVtY2VsbHRyZWF0bWVudGNlbnRlci5jb22CGWdsb2Jh
bHRhbGVudGNvbm5lY3Rvci5jb22CEWdvb2RieWVjYW5jZXIuY29tghZrYXNrb2th
cnNpbGFzdGlybWEuY29tggprcG9wb2suY29tggttYWc0dmlwLmNvbYIQbWFuYW1h
Zm9ydmlwLmNvbYIMbWVsb3N5bmMuY29tgg1vZmZlcnNlYXMuY29tghJzdGF0ZXNy
ZXB1YmxpYy5jb22CE3N1Ym9yZGluYXRld29yay5jb22CCnZycmFtYS5jb22CE3d3
dy5jY3ByZXBvcnRlci5jb22CFHd3dy5leHBsb3Jlbm9zdHIuY29tgiV3d3cuZnJl
c2Nvc3RlbWNlbGx0cmVhdG1lbnRjZW50ZXIuY29tgh13d3cuZ2xvYmFsdGFsZW50
Y29ubmVjdG9yLmNvbYIVd3d3Lmdvb2RieWVjYW5jZXIuY29tghp3d3cua2Fza29r
YXJzaWxhc3Rpcm1hLmNvbYIOd3d3Lmtwb3Bvay5jb22CD3d3dy5tYWc0dmlwLmNv
bYIUd3d3Lm1hbmFtYWZvcnZpcC5jb22CEHd3dy5tZWxvc3luYy5jb22CEXd3dy5v
ZmZlcnNlYXMuY29tghZ3d3cuc3RhdGVzcmVwdWJsaWMuY29tghd3d3cuc3Vib3Jk
aW5hdGV3b3JrLmNvbYIOd3d3LnZycmFtYS5jb22CE3d3dy54bi0tNWRiaHI0YS5j
b22CD3huLS01ZGJocjRhLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisG
AQQB1nkCBAIEgfQEgfEA7wB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5
2IRzAAABj1wBcKoAAAQDAEYwRAIgYbF4gLQsxRlOgfgJ8M422dqhX+/dhgf02eBA
x5FiQNsCIBzS2HD9tmyF+wbQ0eQke/tf7GX2d/fL4+n/iB01gKFEAHYAPxdLT9ci
R1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGPXAFwogAABAMARzBFAiEAqT6G
RNlzgzOR9700D8ed0Qee+EUDi0e/VwlSNHDLD8wCIDc51lraXuuPa00MXW9nBqwe
UPWb9e3bdUEg4JJcPUAHMA0GCSqGSIb3DQEBCwUAA4IBAQBrCsWSWa7TFu5fTG0A
41iS2RUoWDFEWdzptaH/9Uh22tOXIck86oxtfpo7l89RvfBcSLTuaWG6yptP88x1
DJMkhQCeUmS8bHV+EaD4h/QE6f2GWgr7hJ23E0fG1Y2qv9lsMGwp4VD22HpG4dnM
4a4nTBjVM8RkAc1DaMaAt207BSyF3dvbvYZWfq2oNkpf5TrqOsYgP42tn8+lYx1j
cdo6aIK1LtzLBzmlZR4V57XPm2McYLR79i1rd1H2CsgDeCaLoxxBYSmxe9kb5gec
U5MMp3UtzRW/tCFYe8XPXrHdpTMjiRgOgzk7lL4tObnNr24/MN6BCbrBvHKX/cpu
OfcF
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xibAymww3HKmG/ubpgH
8VJELaUvvCbLpWy8cfCC76m/LDd156glLVy8KroPSIxkGRwwShG2hmEoVHuhH/Tg
PtZOkQzqjntzmtiG1nJpegbL6WIfprfH6CtQntkSDqFR4lkP/ND18ggMVrXoOq7+
af07jLALsNZjQbUjrk6eX1lttgvSsnnGI6fx9C/+x4R9SRwqZ0S9L8B26xhTc2+P
qkZH20imyLuR/GA2stlcPnzU6FnAlmwdyJpkMKW55MiHANaS/ijPKGK1wJyTJORH
6I032AFPo27xxUCVjAfKquAoXPUyMlROBQNQemzgDKw3HyZE8A/NjJBCqB+v9ADJ
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386225060196977379169829225124990620600257
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 05:19:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-07 05:19:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mag4vip.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29173181879817048564491322470565102503444324127199493180221236579025744245307801199776072359959665899474634235810079772377871864110029326687233478152187286565932268391504868457616028247238626057364154479530250757625381284459999605002568254329245144944047267070354027134517906510030897038407697293955139835004144909363517986261054384533291609653273734931033726167980162526644928090381975623277047587391471910710347193911029549735984550472625482398898598600027422909088926444469399069136209236666782471158953357267351267268538405398124681078019754589510422573719432438642340344188959782246866802382764682235100201535861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad1198ed2240607a1cac6688588adc486c3d30bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (628 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccpreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explorenostr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frescostemcelltreatmentcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaltalentconnector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodbyecancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaskokarsilastirma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpopok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manamaforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melosync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offerseas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statesrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subordinatework.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccpreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorenostr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frescostemcelltreatmentcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globaltalentconnector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodbyecancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaskokarsilastirma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kpopok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mag4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manamaforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melosync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offerseas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statesrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subordinatework.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vrrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--5dbhr4a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--5dbhr4a.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f5c0170aa0000040300463044022061b17880b42cc5194e81f809f0ce36d9daa15fefdd8607f4d9e040c7916240db02201cd2d870fdb66c85fb06d0d1e4247bfb5fec65f677f7cbe3e9ff881d3580a1440076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f5c0170a20000040300473045022100a93e8644d973833391f7bd340fc79dd1079ef845038b47bf5709523470cb0fcc02203739d65ada5eeb8f6b4d0c5d6f6706ac1e50f59bf5eddb754120e0925c3d4007
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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