status-coretech.digital.ge.com

Issued by R3

About this certificate

This digital certificate with serial number 04:3a:33:79:78:62:a5:51:60:23:8f:c7:fa:ba:7e:57:79:00 was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=status-coretech.digital.ge.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3a:33:79:78:62:a5:51:60:23:8f:c7:fa:ba:7e:57:79:00
Serial Number (int): 368253942345865006659245917193655993989376
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 66:b4:30:48:3e:fc:7a:0e:93:cc:9c:e3:d9:12:db:67:d8:a5:c1:6f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:4d:7c:a2:61:d7:2c:f0:33:20:15:c9:88:95:b7:1e:7f:5b:5f:b0
Fingerprint (sha256): 23:d1:51:5a:44:57:93:13:6f:5d:8f:07:bd:80:11:d8:43:8f:1c:45:16:57:84:77:80:3c:42:02:c0:fd:c1:51

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate status-coretech.digital.ge.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for status-coretech.digital.ge.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

status-coretech.digital.ge.com
status.accela.com
status.acuityscheduling.com
status.amplience.com
status.avaamo.com
status.bigcartel.com
status.boldcommerce.com
status.codium.ai
status.datto.com
status.dmrz.online
status.dmsengage.com
status.drmtoday.com
status.edgeless.io
status.emailfraudprotect.com
status.enigma-x.app
status.entur.org
status.g-portal.com
status.glofox.com
status.ifeelgoods.com
status.inspiredelearning.com
status.itscope.com
status.joinego.com
status.leaddyno.com
status.madcloud.io
status.mmd.net
status.modeanalytics.com
status.neoassist.com
status.patchman.co
status.playable.com
status.proposify.biz
status.proposify.com
status.quenchtec.com
status.snapdesk.app
status.springbrooksoftware.com
status.squadle.com
status.strigo.io
status.swotly.io
status.zenegy.com
status.ziphq.com

Other certificates including the domain name ge.com

(limited to 100 certificates)
multisan.gepower.com
skywatch.power.ge.com
techregulations.power.ge.com
bng1vmsfe.jfwtc.ge.com
mcrew.nonprod.torq.trans.apps.ge.com
alertweb.av.ge.com
vdcalq05504.ics.cloud.ge.com
webmail.ge.com
tower.torq.trans.apps.ge.com
supportcentral.ge.com
gam-svn.cloud.health.ge.com
zeutcpdblepm01.corporate.ge.com
vro01.ctsddc.ge.com
api.stage-yield.power.ge.com
webapps.energy.ge.com
toolsportal.infra.ge.com
indsysck-test.registrar.ge.com
tnwp08332.logon.ds.ge.com
g11892-2.cloud.health.ge.com
ssousilogin.corporate.ge.com
dev-vault.ae.ge.com
*.travel.ge.com
appisolation.status.symantec.com
gehcmdev.corporate.ge.com
api.ge.com
vdcgwp07737.logon.ds.ge.com
vdcglp00840.ics.cloud.ge.com
prd-fiori.pw.ge.com
qal-cmms.gs.ec.ge.com
wmbpmsprod.cloud.ge.com
rsousflogin.corporate.ge.com
st2-int-store.power.ge.com
stage.experience.corporate.ge.com
fds.digital.ge.com
qa-sqm.gs.ec.ge.com
www.ge.com
leanmanufacture-smp.gs.ec.ge.com
tempus.gs.ec.ge.com
appliances.plm.ge.com
emsappo-qas.cloud.ge.com
gocitrixolc1-na.corporate.ge.com
dwb.ae.ge.com
avnlp0387v01.av.ae.ge.com
selectconnect.apps.ge.com
san-ucc.og.ge.com
avionics03.eu.ae.ge.com
ssoapi.corporate.ge.com
gcomces.emea.gcom.ge.com
sherlockapi.digital.ge.com
dev-digitalthread.aviation.ge.com
bucav70-131.em.health.ge.com
hub-muc.em.health.ge.com
vdcgwp07737.logon.ds.ge.com
api.internet.ge.com
na.private.o365.ge.com
ocicrmintl.health.ge.com
fi.finance.ge.com
pitwareportal.ec.ge.com
customerportal-qa.de.ge.com
st-obiee-gps.power.ge.com
dev-productlife.pw.ge.com
vanity21.jiveon.com
www.ge.com
apigw.sc.ge.com
smp.gs.ec.ge.com
enterpriseoltptest.og.ge.com
qa-icam-e.energy.ge.com
nonprod.torq.trans.apps.ge.com
v9staging.sapm.ge.com
mobilebuild.corporate.ge.com
trax-qa-red.treasury.ge.com
atlengsecu10sce.nms.dev.ps.ge.com
namgr01.myvideo.ge.com
stage-coolidgeanalytical.corporate.ge.com
qa1-pplm-steam.power.ge.com
utrack.digital.corporate.ge.com
incapsula.com
g2428inuwgcor1v.r5.money.ge.com
qa-cabs.power.ge.com
vdcagwq725.logon.ds.ge.com
fds-qa-digital.ge.com
studio.de.ge.com
verpa.corporate.ge.com
*.cicada.digital.ge.com
stage.bdpipeline.corporate.ge.com
mnl.status.cloudsigma.com
dev.engineabm.trans.ge.com
cbftaqa70.am.health.ge.com
crln-cboe-stg.em.health.ge.com
vfton.trans.ge.com
asxp850a.tsg.ge.com
tipqasoap.aviation.ge.com
*.setpac.ge.com
mictnmbat.am.health.ge.com
ecgsvdcsap05p.pw.ge.com
oneidm.ge.com
smetrics.apps.ge.com
bainventory.psamer.ps.ge.com
cit.power.ge.com
openldap.userportal.nonprod.torq.trans.apps.ge.com

Certificate

The complete raw certificate details for status-coretech.digital.ge.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquKOC012/pJ8leffjIbn
AHFbET1kep0WPCAJMeho3Xp+b57CkhQBT8rhVOMt7ZxTRPnERp63AaLpfT8PodJN
iFqd98gujCUQePVWBSONQAhV6J7tzMDtr0dmn5og14leAeW2LizUonD6Yb7gii1a
ysnehz+Wc/qj/KZqG/RGg+QJXTZ+uT3qMUcX7Rgs1XFr74JADqqCxMpOq0i73YVy
/ZDYfBKnyiffGJ5QJDScBxNuMyMcPfqDfq1fW89Iqtaf22VcHWMCGTUIsKYH/pBv
VCxFZcpRUl4S5Bpd4T7dPSN1p540asrJIEi6FTD66cqr6SLtMSMjiw/hrAdqm3hB
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368253942345865006659245917193655993989376
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 05:37:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 05:37:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'status-coretech.digital.ge.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21572230209478680342730660084032334143126606855481259568841096606446191809191205801682468692680748148361406167259599191990710964775033159812002917529262372074894599155505285519116663474332898222368886995408121729081872415032566548736474754438474258343854256752659179268849088985341001731042128428110006314591736375307973106872850325965321645711036387210304031163840508930553130340771595432926819826687747310837759777983112406981546203350125218964218955089062558519538585310581958433829943593478642248278070390361244817073505502734873514696907964754874416496541316799109449196345026984553274089464297144347152237478399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66b430483efc7a0e93cc9ce3d912db67d8a5c16f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (851 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-coretech.digital.ge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.accela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.acuityscheduling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.amplience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.avaamo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.bigcartel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.boldcommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.codium.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.datto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.dmrz.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.dmsengage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.drmtoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.edgeless.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.emailfraudprotect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.enigma-x.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.entur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.g-portal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.glofox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ifeelgoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.inspiredelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.itscope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.joinego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.leaddyno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.madcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.mmd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.modeanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.neoassist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.patchman.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.playable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.proposify.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.proposify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.quenchtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.snapdesk.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.springbrooksoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.squadle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.strigo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.swotly.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.zenegy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ziphq.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ada81c0b30000040300483046022100e83ffb3fe10b58ab94d9f288bf93c1aed7675b30423d840705e803f4d3fe3588022100ea25c015b323af3cb7a9c2b476dbe60f642f974939ae1f9b73a9022c812c3944007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ada81c0a30000040300473045022100d21202427691551c925fcde92d83c54369c58bf1c5dcf5ccc8ad1afe55631067022001bdf034eeb9e979b4ad869c5664ef36e807401241d6fded7a7c5373387a822f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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