returns.fanatics.com
Issued by R3
About this certificate
This digital certificate with serial number 03:a1:28:ca:cb:57:4c:2a:4d:fe:fe:86:95:ff:09:9e:d8:9f was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=returns.fanatics.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a1:28:ca:cb:57:4c:2a:4d:fe:fe:86:95:ff:09:9e:d8:9fSerial Number (int): 316176540957594224911559097905501171538079
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 52:a9:97:ae:fd:06:17:1e:38:a1:36:fd:82:6f:79:fb:8b:10:c5:b4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 5d:5f:aa:f4:f7:1b:6c:20:16:97:35:8e:d8:34:e6:aa:cc:29:be:38
Fingerprint (sha256): 1f:58:9d:22:e8:6b:1f:34:10:43:03:fb:b1:98:37:7c:3d:5a:52:e0:33:f8:2f:c4:b8:c9:93:7f:9d:39:ca:02
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate returns.fanatics.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for returns.fanatics.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
returns.fanatics.com
Other certificates including the domain name fanatics.com
(limited to 100 certificates)
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
jira.fanatics.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
domains.returnly.com
cisco-expc02.fanatics.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
cisco-expe04.fanatics.com
na85-1.cdn.salesforce-communities.com
secure02.fanaticsretailgroup.com
smcq-edge-cluster.fanatics.com
adfs.fanatics.com
secure01.fanaticsretailgroup.com
na85-1.cdn.salesforce-communities.com
image.email-aaanational.com
okta-iwa.fanatics.com
secure02.fanaticsretailgroup.com
www.nflshop.com
gag.fanatics.com
na85-1.cdn.salesforce-communities.com
imp04.fanatics.com
image.email-aaanational.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
na85-1.cdn.salesforce-communities.com
na85-1.cdn.salesforce-communities.com
domains.returnly.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
na85-1.cdn.salesforce-communities.com
secure01.fanaticsretailgroup.com
imp01.fanatics.com
secure01.fanaticsretailgroup.com
domains.returnly.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
plm.fanatics.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
www.nflshop.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
na85-1.cdn.salesforce-communities.com
cucm04.fanatics.com
secure02.teamfanshop.com
secure02.fanaticsretailgroup.com
returns.fanatics.com
san-2-s1.tlsprovisioning.exacttarget.com
cucm03.fanatics.com
image.email-aaanational.com
cisco-expc02.fanatics.com
domains.returnly.com
owa.fanatics.com
domains.returnly.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
cisco-expe02.fanatics.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
returns.fanatics.com
asrfanaticsmgr.fanatics.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
www.nflshop.com
san-2-s1.tlsprovisioning.exacttarget.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
domains.returnly.com
www.footballfanatics.com
www.nflshop.com
plm.fanatics.com
image.email-aaanational.com
cisco-expe03.fanatics.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
cisco-expe04.fanatics.com
cucm03.fanatics.com
secure01.fanaticsretailgroup.com
www.nflshop.com
*.fanatics.com
secure01.fanaticsretailgroup.com
portal.wifi.fanatics.com
secure01.fanaticsretailgroup.com
plm.fanatics.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
jira.fanatics.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
jira.fanatics.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
domains.returnly.com
cisco-expc02.fanatics.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
cisco-expe04.fanatics.com
na85-1.cdn.salesforce-communities.com
secure02.fanaticsretailgroup.com
smcq-edge-cluster.fanatics.com
adfs.fanatics.com
secure01.fanaticsretailgroup.com
na85-1.cdn.salesforce-communities.com
image.email-aaanational.com
okta-iwa.fanatics.com
secure02.fanaticsretailgroup.com
www.nflshop.com
gag.fanatics.com
na85-1.cdn.salesforce-communities.com
imp04.fanatics.com
image.email-aaanational.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
na85-1.cdn.salesforce-communities.com
na85-1.cdn.salesforce-communities.com
domains.returnly.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
na85-1.cdn.salesforce-communities.com
secure01.fanaticsretailgroup.com
imp01.fanatics.com
secure01.fanaticsretailgroup.com
domains.returnly.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
plm.fanatics.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
www.nflshop.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
na85-1.cdn.salesforce-communities.com
cucm04.fanatics.com
secure02.teamfanshop.com
secure02.fanaticsretailgroup.com
returns.fanatics.com
san-2-s1.tlsprovisioning.exacttarget.com
cucm03.fanatics.com
image.email-aaanational.com
cisco-expc02.fanatics.com
domains.returnly.com
owa.fanatics.com
domains.returnly.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
cisco-expe02.fanatics.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
returns.fanatics.com
asrfanaticsmgr.fanatics.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
www.nflshop.com
san-2-s1.tlsprovisioning.exacttarget.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
domains.returnly.com
www.footballfanatics.com
www.nflshop.com
plm.fanatics.com
image.email-aaanational.com
cisco-expe03.fanatics.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
cisco-expe04.fanatics.com
cucm03.fanatics.com
secure01.fanaticsretailgroup.com
www.nflshop.com
*.fanatics.com
secure01.fanaticsretailgroup.com
portal.wifi.fanatics.com
secure01.fanaticsretailgroup.com
plm.fanatics.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
jira.fanatics.com
image.email-aaanational.com
Certificate
The complete raw certificate details for returns.fanatics.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgISA6EoystXTCpN/v6Glf8JntifMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MDgwMjQ2MjNaFw0yMzEyMDcwMjQ2MjJaMB8xHTAbBgNVBAMT FHJldHVybnMuZmFuYXRpY3MuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAuAnfLyMgLbyumDvqICaYGsB30v8VyANy6AYrmkk0pra9FIlNLd+Ils1U x0RMr94sE8SbZZClXOyUOP3KY7WZvR9gpioXTQwwsV5qI0lWcxIF5RpSHgLPROcv 3KfTbURADhEJqnn7+mys5xQZlx0IcbUVneW2AI/t6RVLHkV3A/kVjKcutSPu8sVO utgsze1J53/ysCcyN3IiptiCPukBoW+RDmmHh6EH5G0IrzTWYOQwtVdYBAaCioKV M73LyM5m2QJGqnrPdcanxqcgyjIMn4PJuglBSmTB/llw9DVP2nbgtR6s8ClnTZQ5 Uiw0q4JfTzj5cjN0WyqvArGkGYOyAQIDAQABo4ICFjCCAhIwDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBRSqZeu/QYXHjihNv2Cb3n7ixDFtDAfBgNVHSMEGDAWgBQULrMX t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0 dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu Y3Iub3JnLzAfBgNVHREEGDAWghRyZXR1cm5zLmZhbmF0aWNzLmNvbTATBgNVHSAE DDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AHoyjFTYty22 IOo44FIe6YQWcDIThU070ivBOlejUutSAAABinLl4wAAAAQDAEcwRQIhAJIbN9HF yG9jx7nOvaouqK+pSE6gZ4ogazmzJHaEyY15AiB0qDlU8wDN5CI6vZVfyewqZ8NE JxXNj/QQ3gpud+f3BgB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1u AAABinLl4vgAAAQDAEcwRQIhAJy2f+pXTb++1stRbtdLmfuTvJZjqR2Teb4WvdlD ASxIAiAwZIHJ0Y7cyp1AWneFLHc+3XeFbcCkfwUPwmQ4Uj0LTDANBgkqhkiG9w0B AQsFAAOCAQEAViAKKLl2nzYqqwGZslG+iz1TxNS1Mh6l66Lgg/zsVe8TAZWcNKNZ UDiGkhXLQfQRT0K4rcm1N39Oiq3lzZN391YkT/V9B+tDvbMo9JesoDvUviXtUk48 Y1FHCaFp0UpOtpHeplFB1T4BJ82gamD9Qj9zWYOVNVLXu1iRu1/sZeAlcg4TTn7q cVv+2MebPm9pWnAHEQaaakEBwIS9zeTfrOpl28aws6Hs2pRhP41032HotKbtXumX yXj1NYoy0BiNzDmalks3iNZz7aHWxjBvtDQwe12T4ctWnVTTx940g4EDcywUXLbz brY4tzscybcprxu1lRjqLhtm+Sft4Q07wQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAnfLyMgLbyumDvqICaY GsB30v8VyANy6AYrmkk0pra9FIlNLd+Ils1Ux0RMr94sE8SbZZClXOyUOP3KY7WZ vR9gpioXTQwwsV5qI0lWcxIF5RpSHgLPROcv3KfTbURADhEJqnn7+mys5xQZlx0I cbUVneW2AI/t6RVLHkV3A/kVjKcutSPu8sVOutgsze1J53/ysCcyN3IiptiCPukB oW+RDmmHh6EH5G0IrzTWYOQwtVdYBAaCioKVM73LyM5m2QJGqnrPdcanxqcgyjIM n4PJuglBSmTB/llw9DVP2nbgtR6s8ClnTZQ5Uiw0q4JfTzj5cjN0WyqvArGkGYOy AQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316176540957594224911559097905501171538079 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 02:46:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 02:46:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'returns.fanatics.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23232716086180227256923531421331205106076514436938988929507337515249173939382919663463546179737466283784449955436397399852136114767867472454296275984592743300476826632615682547936625269229203695247945760042604915772946265773260857955928906869853398276029684751239274435417806803521972551805451204288251432563445167029440893732543217831637038159574598444318503122706602365893122874274851759824118710676433780494244646551851156240700385194721667314265379769641481867524693878446860153473866628240718452818173928601369923799836135980970907839349653728517101786644839189583914617064452321150678035635509276395001562247681 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 52a997aefd06171e38a136fd826f79fb8b10c5b4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.fanatics.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a72e5e3000000040300473045022100921b37d1c5c86f63c7b9cebdaa2ea8afa9484ea0678a206b39b3247684c98d79022074a83954f300cde4223abd955fc9ec2a67c3442715cd8ff410de0a6e77e7f706007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a72e5e2f800000403004730450221009cb67fea574dbfbed6cb516ed74b99fb93bc9663a91d9379be16bdd943012c480220306481c9d18edcca9d405a77852c773edd77856dc0a47f050fc26438523d0b4c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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