www.sportsground.com

Issued by R3

About this certificate

This digital certificate with serial number 04:87:59:78:ff:23:41:53:7a:f4:55:36:94:ef:78:d6:45:f1 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sportsground.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:87:59:78:ff:23:41:53:7a:f4:55:36:94:ef:78:d6:45:f1
Serial Number (int): 394506192803423212912347514590335600051697
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f2:fa:33:0c:0e:38:e5:e2:5d:83:2a:c7:72:e1:cf:ab:c5:9b:1b:43
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e3:3c:1b:3b:df:81:1d:8b:ed:74:a9:c7:6b:b0:56:bb:09:d9:99:46
Fingerprint (sha256): 31:66:63:9a:42:29:22:a1:77:18:3e:a8:3b:7b:7c:5d:47:f2:d9:22:b2:4c:e9:a5:46:e8:23:bb:97:7a:e0:0e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sportsground.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sportsground.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aucklandsoftball.org.nz
www.basketballhawkesbay.co.nz
www.bowlswaikato.co.nz
www.cashmere.school.nz
www.cfc.co.nz
www.christchurchfootballclub.co.nz
www.countiesmanukaurugbyleague.co.nz
www.cra.kiwi
www.cyclingsc.co.nz
www.ellerslieeagles.co.nz
www.feildingfarmersmarket.net.nz
www.fenciblefoundation.co.nz
www.golfnorthland.co.nz
www.greenacrescountry.org.nz
www.harbourgolf.co.nz
www.hastingsboys.school.nz
www.havelocknorth.rugby
www.hawkesbay.basketball
www.hawkesbaynetball.co.nz
www.hbnetball.co.nz
www.hbrugby.co.nz
www.healthyfamilieswaitakere.org.nz
www.hokowhitubridge.org.nz
www.huianetball.co.nz
www.kirweerugby.co.nz
www.maniapoto.school.nz
www.maoribasketball.com
www.maristalbion.co.nz
www.marlboroughnetball.org.nz
www.marlboroughtrampingclub.co.nz
www.membermanager.co.nz
www.metrofootball.org.nz
www.mff.nz
www.mountsports.co.nz
www.naenaeswimclub.co.nz
www.northgolf.nz
www.nzteachersgames.co.nz
www.patoka.school.nz
www.pioneerfishingclub.co.nz
www.ponsonbyrugby.co.nz
www.referees.co.nz
www.soulutionzsports.nz
www.southcanterbury.basketball
www.sportsground.com
www.sporty.org.nz
www.stmw.school.nz
www.taradaleint.school.nz
www.tepukeunitedfc.co.nz
www.volleysouth.org.nz
www.waimakunited.org.nz
www.westshore.school.nz

Other certificates including the domain name sportsground.com

(limited to 100 certificates)
www.nelsoncarclub.co.nz
www.blenheimgolfclub.co.nz
www.sportsground.com
sporty.co.nz
support.sportsground.com
www.tabletennis.org.nz
sporty.co.nz
www.sportsground.com
support.sportsground.com
www.sportsground.com
support.sportsground.com
northcanterburyrugby.co.nz
support.sportsground.com
www.nztua.com
www.sportsground.com
www.schoolground.com
support.sportsground.com
support.sportsground.com
hastings-central.school.nz
ultrarunner.org.nz
www.sportsground.com
www.oacnz.org
www.sportsground.com
sporty.co.nz
aafl.co.nz
support.sportsground.com
sporty.co.nz
support.sportsground.com
sporty.co.nz
northharbourtag.co.nz
trenthamrifleclub.co.nz
www.sportsground.com
support.sportsground.com
support.sportsground.com
sporty.co.nz
aucklandmarist.co.nz
support.sportsground.com
www.wmsc.org.nz
support.sportsground.com
www.sportsground.com
support.sportsground.com
support.sportsground.com
lucknow.school.nz
www.badmintonhb.co.nz
pioneerbasketballclub.co.nz
www.melrosetargetshooting.co.nz
www.sportsground.com
basketballtaranaki.co.nz
sporty.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for www.sportsground.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mhiEle9HsHXDPKSXOlh
fW6X3h2XC2EfAKDvZYm1cCbWbYRYRKDkHI0OMu+iB/KgFwqqmtG62HeKzij3jsU0
V5Tl+O3PGTw0TbXLj7PmnctFFawciRAK0xBt6v6eJ7tZIvImDRpFbEfCyMBkRm47
HhmIfkiIEkbomEQ2k2pFo+2Cg5xP1gWBR0EM/j74cmZWe/VDCqax2impKfi2WsS/
VYEtyx8dkvj5pR6cLKX9sqyrSC+OIYjstGgCHMkfMNQXF/Y+/MH3WqHEqDdKk5Ij
atIVxisYfoOZiW2jmnTp9HuyBm/1Uu1/ZYWqupPMTmESng85GON4sHXbOnjPhbhj
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394506192803423212912347514590335600051697
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 00:15:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-08 00:15:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sportsground.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28581330143618922232953805504376085668401087873410394578471877910663403318582944706918262123519396660539344044331176025026460566929495338994458397930186187869923085206212890211215210440842941985034610315720004096316939802787278084295110271465941636928258765372217505305368647995192017759286232958811880528295083775613367989342896387490041047819947598990748008157554197034946970676166346307580773168436760045913139205708196287880358230218701570160696483203059973810431659763516639515150669904081553228599850600869194288357325531776145474830430884059005039678704457046678724595129993388193964757204010219730546716074909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2fa330c0e38e5e25d832ac772e1cfabc59b1b43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1302 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchfootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cra.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellerslieeagles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fenciblefoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golfnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsboys.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyfamilieswaitakere.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huianetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirweerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maniapoto.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maoribasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristalbion.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughtrampingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metrofootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mff.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naenaeswimclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northgolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patoka.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pioneerfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soulutionzsports.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmw.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tepukeunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleysouth.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westshore.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cebca2c66000004030047304502200473f0d26f37e9247e2007c525ec3a39600c349b8f14ad1feeb864b40f206179022100a72721d1b1c25089e6f7c9ba41c560f47b5b5555d7e92216ccfd6b529b147d9000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cebca2cc30000040300473045022100bb80c763c7f25e1d9fcae94a5bb62cb2cadd0989307f08e50b4f9628210d8509022048db8ae563756d1d7d6edd101f87420ef19de66e9cb9bf6b6ba2519867c8c1e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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