www-npe.yves-rocher.com

Issued by R3

About this certificate

This digital certificate with serial number 03:de:3a:95:8f:ee:97:15:b7:0d:08:03:c2:59:0a:c3:cc:6e was issued on by Let's Encrypt.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www-npe.yves-rocher.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:de:3a:95:8f:ee:97:15:b7:0d:08:03:c2:59:0a:c3:cc:6e
Serial Number (int): 336957415047004160127628402752178568285294
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:3a:e8:1c:b7:60:fe:7f:68:61:a0:e7:5b:0a:34:ee:eb:3b:9d:24
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:e5:4c:80:4f:2e:1c:c7:d9:a5:88:15:dc:4e:85:ab:cc:5b:06:4f
Fingerprint (sha256): 28:4c:35:17:14:c2:15:b6:ad:b9:e5:41:50:87:42:90:aa:74:63:23:3e:49:3c:81:50:6f:1e:80:0e:5d:8d:7f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www-npe.yves-rocher.com

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-npe.yves-rocher.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-dev.groupe-rocher.com
api-integ.groupe-rocher.com
api-stg.groupe-rocher.com
b2s-stg.yves-rocher.com.mx
contrib-bo.ricaud.com
eimv3-npe.yves-rocher.com
eimv3-statics-npe.yves-rocher.com
media-stg.aod-care.com
myreport-dev.yves-rocher.com
myreport-rec.yves-rocher.com
pim-npe.yves-rocher.com
portailmag-rec.yves-rocher.com
preprod-gcp-vpci.yves-rocher.com
preprod-vpci.yves-rocher.com
samy-it-int.yves-rocher.com
samy-yrbe-npe.yves-rocher.com
samy-yrca-npe.yves-rocher.com
samy-yrce-npe.yves-rocher.com
samy-yres-npe.yves-rocher.com
samy-yrfr-npe.yves-rocher.com
samy-yrit-npe.yves-rocher.com
storelocator-npe.yves-rocher.com
test01.stanhomeperte.it
tilkal-npe.petit-bateau.com
univert-int.groupe-rocher.com
workbench-www.ricaud.com
www-npe.extracteur-donnees-mag-yr.com
www-npe.fondation-danieljouvance.org
www-npe.yves-rocher.com
www.b2s-stg.yves-rocher.com.mx
www.cosmetovigilance-uat.groupe-rocher.com

Other certificates including the domain name yves-rocher.com

(limited to 100 certificates)
services.yves-rocher.com
medianet.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
abspace-re7.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
incapsula.com
www.yves-rocher.fr
www.yves-rocher.com
eimv3-statics.yves-rocher.com
www.yves-rocher.com
birdplan.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
admin-rec.easy-ext.yves-rocher.com
sec.yr-fr-rec1.easy-ext.yves-rocher.com
*.yves-rocher.com
www.yves-rocher.fr
www.yves-rocher.com
dyrectperso.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
imperva.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
pim.yves-rocher.com
secure-vpci.yves-rocher.com
secure-vpci.yves-rocher.com
incapsula.com
dyrectperso.yves-rocher.com
incapsula.com
specif-ac.yves-rocher.com
www-npe.yves-rocher.com
incapsula.com
incapsula.com
incapsula.com
dyrectperso.yves-rocher.com
san-16-s50.tlsprovisioning.exacttarget.com
www-npe.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
sec.yr-fr-rec1.easy-ext.yves-rocher.com
secure-vpci.yves-rocher.com
myreport.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
incapsula.com
san-11-s50.tlsprovisioning.exacttarget.com
services.yves-rocher.com
imperva.com
san-16-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
*.statics-easy-ext.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-16-s50.tlsprovisioning.exacttarget.com
*.yves-rocher.com
dyrectperso.yves-rocher.com
pim.yves-rocher.com
dyrectperso.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
medianet.yves-rocher.com
admin-rec.easy-ext.yves-rocher.com
*.yves-rocher.com
ftp-pao.yves-rocher.com
*.yves-rocher.com
services.yves-rocher.com
incapsula.com
samy.yves-rocher.com
newsroom.yves-rocher.com
www.yves-rocher.fr
dyrectperso.yves-rocher.com
services.yves-rocher.com
specif-ac.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.com
dyrectperso.yves-rocher.com
newsroom.yves-rocher.com
www-npe.yves-rocher.com
dkb.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
pim.yves-rocher.com
specif-ac.yves-rocher.com
*.yves-rocher.com
flow.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
*.yves-rocher.com
portailmag-rec.yves-rocher.com
*.dev-spark-ext.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
services.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
specif-ac.yves-rocher.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for www-npe.yves-rocher.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunGW8KVjIOyby4rnBqrL
P4ErIc1BmPikJDi1a1w3/V0fXH/AzDxMYScoH7m6Lo2h7yN/z6SPZQru6fNOvOTX
b9ggp0yJwtUzpwa5FDmxdu+WPK9Ki0VWYyCJgZrboSl8d3PYV1049h1+ljdlSF9j
NsrQK4XBZfZ2YwcXXU1ilsfzKjF/C0L2P8ox40KKq4A6xpIjK7t9e8UOwB7fb5CX
a6BQnTEkWjx9pjb0at971Q3GJP9QRCiJps9kX0yPagiDZlxE5R4SPGht45k3874Z
2/0AcltcNKYIvleqx0FKxqyKhFaV6onXYCpSD3C0ozB3T+PM8+eZLz0rPFkXtwyQ
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336957415047004160127628402752178568285294
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 15:21:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 15:21:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-npe.yves-rocher.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23536337847752913959589178430179603144664140906539607661354111293543358061247354592479693057257442969619002148604374506276533231012678558335342879239542229745638685190488354464065315137934432972627475435226845712748484129041454701912933451051412767301358039332717150699716663500741003274299665898200592918098235195195904185438259229767150545362240876060521854703847017725390104299782194592400717791763429993761271365773289205360078936204245909671719516842143416596879901654603970011604696707353782697703022451606266790230018490383706231554951003466816885714598698002612754521885854679636991798943587089686514390306999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d33ae81cb760fe7f6861a0e75b0a34eeeb3b9d24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (943 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dev.groupe-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-integ.groupe-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stg.groupe-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2s-stg.yves-rocher.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contrib-bo.ricaud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eimv3-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eimv3-statics-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-stg.aod-care.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myreport-dev.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myreport-rec.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pim-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portailmag-rec.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-gcp-vpci.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-vpci.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-it-int.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrbe-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrca-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrce-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yres-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrfr-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samy-yrit-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storelocator-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test01.stanhomeperte.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilkal-npe.petit-bateau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univert-int.groupe-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workbench-www.ricaud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-npe.extracteur-donnees-mag-yr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-npe.fondation-danieljouvance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-npe.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b2s-stg.yves-rocher.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosmetovigilance-uat.groupe-rocher.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c4515f42d0000040300473045022065ca042305d0f20de4371eb18fc464525cefa78642000b727770c9cd21591a610221009b4ae79e7a20e3a719347e3f2b45981d045a720b6ec053b6424439c9effa6dc1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c4515f45d0000040300473045022004e3c5da794e8d6a953bab006bd789676e3c0a785f00e37bf4b3bc43bd146e42022100bafcd36e03a0a6e86aa76adbc89d04d0937d1a444d752f8da3d7a14c2de4a7f2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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