sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:ba:06:5e:37:df:c8:45:6a:68:04:12:9e:45:20:cb:b0:54 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ba:06:5e:37:df:c8:45:6a:68:04:12:9e:45:20:cb:b0:54
Serial Number (int): 411750128551477341921576024763866955886676
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: db:24:e3:11:21:39:1a:f0:eb:d0:ad:13:4a:bc:8c:63:4a:8a:c4:4e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d5:52:ca:31:91:48:f6:1a:0b:14:47:de:1e:18:a6:22:d4:8a:8d:dd
Fingerprint (sha256): 2c:49:76:f5:c5:5b:ba:2b:e9:a6:38:da:cf:a4:c9:15:56:c7:3d:66:02:e0:ab:e9:e4:d8:65:ce:05:4a:75:4f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akaranacityrifleclub.co.nz
bowlswaikato.co.nz
canterburywaterpolo.org.nz
crossrecreationcentre.co.nz
cyclingsc.co.nz
eden.rugby
edenrugby.co.nz
feildingfarmersmarket.co.nz
feildingfarmersmarket.net.nz
feildingfarmersmarket.org.nz
glenfieldrugbyleague.co.nz
goodmanrural.co.nz
greenacrescountry.org.nz
hampsteadclub.co.nz
havelocknorthbridgeclub.co.nz
hawkesbay.basketball
hawkesbayrugbyreferees.co.nz
hawkfootball.org.nz
hbmagpies.co.nz
hbrfu.co.nz
hbru.co.nz
healthyfamiliesinvercargill.org.nz
highlightcam.co.nz
hockeymarlborough.org.nz
hokowhitubridge.org.nz
hpnc.org.nz
huttaikido.org.nz
invercargillnetball.co.nz
karakarugbyclub.co.nz
kjcc.org.nz
maristrugby.org.nz
marsdensport.school.nz
merivalepap.co.nz
mtsquashclub.co.nz
nzblackpowder.nz
nzssfootball.co.nz
papakurarugbyleague.co.nz
photocard.co.nz
rangatiragolf.co.nz
schoolsport.nz
schoolsportnz.co.nz
schoolsportnz.org.nz
southcanterbury.basketball
sportauckland.co.nz
sportauckland.nz
sportauckland.org.nz
sporty.org.nz
totaltouch.org.nz
turbotouch.co.nz
turbotouch.org.nz
wellingtonsoftball.org.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)
sporty.org.nz
www.sportycrm.com
sporty.org.nz
sporty.org.nz
www.giafc.co.nz
sportycrm.com
sporty.org.nz
fdmc.school.nz
arrowtownrugby.co.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
sporty.org.nz
sporty.org.nz

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lOZGzSvACh2U+zQ2eU/
Q6zhJNDrL8krjoUrGQl+typYSDrOh1OBFWXfijlwiz4fWeF8TGXcAZrjJZecBlHz
SGwZHt0V3P625NBFbybumXrFJBaFlueZk5QvT5G0ezGwpKW82JlnniB8rkyVHYH8
A6PtLitI6JgWVnMyHY+5j7oizRZsjhHqf2Amxkch3sGAzieeI5usUpnayQhRfiXz
EQKELzftLWEW1UMerpIMAuFvzuRfWQ9uy2getyjRrQ+RlwSq0QHeBZZ0yjGEKhg3
1nw+HqeSh6W2Af4YDuszi0PVtSYwsqSoimdmjcSWgzlgJYdvYlEbJ/TQocgahvAg
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411750128551477341921576024763866955886676
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-11 20:12:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 20:12:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28066127447891288114077426068184289235368661125703769128081718187944529262820124226339426016741839332459036913470007958181752285388504294612714559275067792825508473240763188047055331548041634796887729181334033487120076363319528822753078203231500413373071423248168791833288752727795529946206574795029427655354181095185375971413739787034591705225701333389732003522639920637525814942539923950621494951799590889342707168049126207950808249434584964621557973465651669142975023828126471387828061887195067708841700844360682424909546433097538716986016753889424483743104992262305324662884921961822649931955840853134830088495149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db24e31121391af0ebd0ad134abc8c634a8ac44e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a86165f1d0000040300483046022100ccb869c51a61b18140b129230b007c8bd485253cd0e9255f373d90de2c0d967f022100d71bb715c1b0854ac542257395a5b8fbe0bd944c4e7f87e4956709a1f9be1f460077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a86165f350000040300483046022100d0ae207d3f86994c592cf880461e069029e7a394a0fd820ec0b3e07e7f77a875022100863266f97f5b4ca6a142506bd937b313cbafa449c315372d612ade110b1d7c77
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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