www.datamoneygroup.com

Issued by R3

About this certificate

This digital certificate with serial number 04:99:8e:6c:b6:fc:08:88:3a:c5:bc:ad:83:a4:1c:91:9e:ef was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.datamoneygroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:99:8e:6c:b6:fc:08:88:3a:c5:bc:ad:83:a4:1c:91:9e:ef
Serial Number (int): 400701660720773436701461663681996100050671
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b9:7a:07:97:89:71:29:ff:af:a8:a1:72:23:c7:68:85:40:64:96:8b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 53:58:d5:d6:08:30:5c:0d:56:76:d3:84:4b:23:df:17:32:50:92:66
Fingerprint (sha256): 32:0e:ec:18:a9:fb:c1:da:b2:e4:e5:58:24:d2:f2:23:f6:5e:85:9d:74:56:f9:ce:a0:47:9f:9f:87:51:c8:f2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.datamoneygroup.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.datamoneygroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dyachts.com
411i.info
allergenfreefoodpantry.com
aufero.fr
automobiletransportservice.com
beyourownmealticket.com
datamoneygroup.com
gautengs.com
issa.top
jaredcummingsmedia.co
jjhandyman.pro
nigga.top
pressureprints.com
varnita.in
www.3dyachts.com
www.411i.info
www.allergenfreefoodpantry.com
www.aufero.fr
www.automobiletransportservice.com
www.beyourownmealticket.com
www.datamoneygroup.com
www.gautengs.com
www.issa.top
www.jaredcummingsmedia.co
www.jjhandyman.pro
www.nigga.top
www.pressureprints.com
www.varnita.in
www.yoursunday.com
yoursunday.com

Other certificates including the domain name datamoneygroup.com

(limited to 100 certificates)
www.datamoneygroup.com
digi-wave.com
digi-wave.com

Certificate

The complete raw certificate details for www.datamoneygroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHazCCBlOgAwIBAgISBJmObLb8CIg6xbytg6QckZ7vMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAzMDkxMTA1NDBaFw0yMzA2MDcxMTA1MzlaMCExHzAdBgNVBAMT
Fnd3dy5kYXRhbW9uZXlncm91cC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDBw3I4TwepzaWwLeGo2W3CSsjUQ25IgZaAaj8Kp7AdqD7bnIULP2ZM
yCZeEGvsVwBRe4xzGNwsGHiIgqmMOeULt07Q3pCuXUQsw3gwD1ClPnFCjQTzS0Fc
CslZab85fFyCJ28tFV9vPaemqTwPRLFaBPMjmkeNFCWUYO7GYI6iWk+5wQt8yfqT
eVd/7gu76DUSQNC0vHJNx9NZJykMlEeOcz1OUTA/BDY/qgcvwHft2OsvjrHN9WKS
SM5gvj/PGftFJawx3+5Upc6f6pOF+z4neT0b6PYWop98qI9YRXNt/hJYigh5jbI5
/+PZKQ1US2/kccaFJT8awRFZ4Nul3CTJAgMBAAGjggSKMIIEhjAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFLl6B5eJcSn/r6ihciPHaIVAZJaLMB8GA1UdIwQYMBaAFBQu
sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV
aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s
ZW5jci5vcmcvMIICVwYDVR0RBIICTjCCAkqCDDNkeWFjaHRzLmNvbYIJNDExaS5p
bmZvghphbGxlcmdlbmZyZWVmb29kcGFudHJ5LmNvbYIJYXVmZXJvLmZygh5hdXRv
bW9iaWxldHJhbnNwb3J0c2VydmljZS5jb22CF2JleW91cm93bm1lYWx0aWNrZXQu
Y29tghJkYXRhbW9uZXlncm91cC5jb22CDGdhdXRlbmdzLmNvbYIIaXNzYS50b3CC
FWphcmVkY3VtbWluZ3NtZWRpYS5jb4IOampoYW5keW1hbi5wcm+CCW5pZ2dhLnRv
cIIScHJlc3N1cmVwcmludHMuY29tggp2YXJuaXRhLmlughB3d3cuM2R5YWNodHMu
Y29tgg13d3cuNDExaS5pbmZvgh53d3cuYWxsZXJnZW5mcmVlZm9vZHBhbnRyeS5j
b22CDXd3dy5hdWZlcm8uZnKCInd3dy5hdXRvbW9iaWxldHJhbnNwb3J0c2Vydmlj
ZS5jb22CG3d3dy5iZXlvdXJvd25tZWFsdGlja2V0LmNvbYIWd3d3LmRhdGFtb25l
eWdyb3VwLmNvbYIQd3d3LmdhdXRlbmdzLmNvbYIMd3d3Lmlzc2EudG9wghl3d3cu
amFyZWRjdW1taW5nc21lZGlhLmNvghJ3d3cuampoYW5keW1hbi5wcm+CDXd3dy5u
aWdnYS50b3CCFnd3dy5wcmVzc3VyZXByaW50cy5jb22CDnd3dy52YXJuaXRhLmlu
ghJ3d3cueW91cnN1bmRheS5jb22CDnlvdXJzdW5kYXkuY29tMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAtz77
JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGGxkM7uQAABAMARzBFAiBn
xOf48ZVjW+yNzEc3Hkjvgx0SdtpiaCT4FXLKAzzjoQIhAPjNjjqFmDGIpV2K1v4e
/bPqPPMSAvFZFePIDp1vyf/ZAHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6
V6NS61IAAAGGxkM7wQAABAMASDBGAiEAsvzAMXc480+UvV9geB/rc+HTC84TcttK
3u+bQzMexSACIQCZJgKYC9rN6cHhnxXeGZxxK9cBqsFaeK9WI9d0m1aPBjANBgkq
hkiG9w0BAQsFAAOCAQEAk90mkrmNUOpZImyyrpmNhxOTYpbippYUrGtBJkRGrUDb
gKkpWJ+G2+/eS+AZlQFSM3S0Cbq/cstLjkM2EjasvO9GIy3niAqyeRDzdPNeTtZh
98jGZkMgLZg3qZ7XE8Ug2+ARkMDIS+1cKS2/FgXD1idpmXrPHV/KinhyY8L0STat
s21wXBA6IrvxfHf0pqd/Qs1V5MV6kGfUSYHRWdf0ZVQBGk9ffNkHbkUKrEw+kHEy
Y0M7c+Z0/ZCkuYLNsW+tTa/d6+JLa5Twwv0w7At5TFHC0cCRoECR7lOrKBaBM8tS
zj285BSEauGylU9YNAQs9pLmPFm++11WoToQ7rwpKg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcNyOE8Hqc2lsC3hqNlt
wkrI1ENuSIGWgGo/CqewHag+25yFCz9mTMgmXhBr7FcAUXuMcxjcLBh4iIKpjDnl
C7dO0N6Qrl1ELMN4MA9QpT5xQo0E80tBXArJWWm/OXxcgidvLRVfbz2npqk8D0Sx
WgTzI5pHjRQllGDuxmCOolpPucELfMn6k3lXf+4Lu+g1EkDQtLxyTcfTWScpDJRH
jnM9TlEwPwQ2P6oHL8B37djrL46xzfVikkjOYL4/zxn7RSWsMd/uVKXOn+qThfs+
J3k9G+j2FqKffKiPWEVzbf4SWIoIeY2yOf/j2SkNVEtv5HHGhSU/GsERWeDbpdwk
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400701660720773436701461663681996100050671
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-09 11:05:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-07 11:05:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.datamoneygroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24460370957776888251559582333634114599015919870652787155860238002101163791117358019459593147178434692601304420992908973797948376880903465362579181128247598320274119729395270641694649245930883302056666541477858241503614332056191647958262847745174537538441537742588913260691720666614319533674235844937752454207041354514053969743441065306293171549949454995591608881513702984872840187793667783232357568744758061839322505213463051933621685922319868949216781729820493205220532254972075178267639894364322700533892550206558706316540545560811029309138214540607809199933419572941385102692413138166478824784651028931820046263497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b97a0797897129ffafa8a17223c768854064968b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (590 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dyachts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '411i.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allergenfreefoodpantry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aufero.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automobiletransportservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyourownmealticket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datamoneygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gautengs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'issa.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaredcummingsmedia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjhandyman.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nigga.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressureprints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varnita.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dyachts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.411i.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allergenfreefoodpantry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aufero.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automobiletransportservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beyourownmealticket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datamoneygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gautengs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.issa.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaredcummingsmedia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jjhandyman.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nigga.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pressureprints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.varnita.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yoursunday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoursunday.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186c6433bb90000040300473045022067c4e7f8f195635bec8dcc47371e48ef831d1276da626824f81572ca033ce3a1022100f8cd8e3a85983188a55d8ad6fe1efdb3ea3cf31202f15915e3c80e9d6fc9ffd90077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186c6433bc10000040300483046022100b2fcc0317738f34f94bd5f60781feb73e1d30bce1372db4adeef9b43331ec520022100992602980bdacde9c1e19f15de199c712bd701aac15a78af5623d7749b568f06
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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