webmail.digimind.vn

Issued by R3

About this certificate

This digital certificate with serial number 04:2b:5a:5e:06:db:6f:63:b9:8f:3f:21:6e:66:08:55:4c:c0 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webmail.digimind.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2b:5a:5e:06:db:6f:63:b9:8f:3f:21:6e:66:08:55:4c:c0
Serial Number (int): 363201404239246583826339587031271195626688
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a5:19:ce:bb:e1:b7:bc:42:58:a2:e3:40:c9:34:ae:c1:9f:f7:7d:f3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 84:cd:32:88:5c:b9:be:49:23:ea:6d:4d:d5:b3:14:75:98:96:70:a2
Fingerprint (sha256): 38:b0:f5:b7:29:66:34:38:5d:79:49:cf:4e:74:8f:2c:8c:64:7f:34:9d:8f:b8:10:9d:11:a5:bd:64:41:ac:1e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate webmail.digimind.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.digimind.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

anhuyvina.duy3.name.vn
bachkhoaxuanvinh.duy3.name.vn
bachkhoaxuanvinh.edu.vn
cpanel.bachkhoaxuanvinh.edu.vn
cpanel.digimind.vn
cpcalendars.bachkhoaxuanvinh.edu.vn
cpcalendars.digimind.vn
cpcontacts.bachkhoaxuanvinh.edu.vn
cpcontacts.digimind.vn
digimind.duy3.name.vn
digimind.vn
sydneygroup.duy3.name.vn
sydneygroup.edu.vn
webdisk.bachkhoaxuanvinh.edu.vn
webdisk.digimind.vn
webmail.bachkhoaxuanvinh.edu.vn
webmail.digimind.vn
www.anhuyvina.duy3.name.vn
www.bachkhoaxuanvinh.duy3.name.vn
www.bachkhoaxuanvinh.edu.vn
www.digimind.duy3.name.vn
www.digimind.vn
www.sydneygroup.duy3.name.vn
www.sydneygroup.edu.vn

Other certificates including the domain name digimind.vn

(limited to 100 certificates)
digimind.vn
webmail.digimind.vn
digimind.vn
digimind.vn
digimind.vn
sanvang.ihappy.info
digimind.vn
parami.ihappy.info
sanvang.ihappy.info
ecocity.ihappy.info
digimind.vn
www.thienhouse.duy6.name.vn
digimind.vn
webdisk.bachkhoaxuanvinh.edu.vn
digimind.vn

Certificate

The complete raw certificate details for webmail.digimind.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHXDCCBkSgAwIBAgISBCtaXgbbb2O5jz8hbmYIVUzAMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MTgxNTQ4MTFaFw0yMzEwMTYxNTQ4MTBaMB4xHDAaBgNVBAMT
E3dlYm1haWwuZGlnaW1pbmQudm4wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAVLVETOTEgXmstVJslS4yG9jccTQmFPWf71jGg0BX5bl4bMp/kg54l1/e
RHfzKX8D0/gla9ykog4l+aGUQS1OVABWopPW2B2HtpnHKCdAmWLVdhy8eITLM4pe
aAkPUv4/clXf2s3P2cbbngUxs0HdzMTo8ZK5ButFMgHgzC6QqCaZp6bpBALJ95/M
eA+y1koFvNMSihBwYKhNOrIlIQEy5rg5u2ZPtqDWSYgNn3NlD7XuCOFhb1T2WbFF
V6i42GoYfUriwe2sMcqXRdyid/7Q9AsQu2B8sXoDGHk8Z315FSHDLsFvqLRRJqzF
Q/XM29GfU2dA+ggEvtMtukU6vYB/AgMBAAGjggR+MIIEejAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFKUZzrvht7xCWKLjQMk0rsGf933zMB8GA1UdIwQYMBaAFBQusxe3
WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0
cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j
ci5vcmcvMIIChwYDVR0RBIICfjCCAnqCFmFuaHV5dmluYS5kdXkzLm5hbWUudm6C
HWJhY2hraG9heHVhbnZpbmguZHV5My5uYW1lLnZughdiYWNoa2hvYXh1YW52aW5o
LmVkdS52boIeY3BhbmVsLmJhY2hraG9heHVhbnZpbmguZWR1LnZughJjcGFuZWwu
ZGlnaW1pbmQudm6CI2NwY2FsZW5kYXJzLmJhY2hraG9heHVhbnZpbmguZWR1LnZu
ghdjcGNhbGVuZGFycy5kaWdpbWluZC52boIiY3Bjb250YWN0cy5iYWNoa2hvYXh1
YW52aW5oLmVkdS52boIWY3Bjb250YWN0cy5kaWdpbWluZC52boIVZGlnaW1pbmQu
ZHV5My5uYW1lLnZuggtkaWdpbWluZC52boIYc3lkbmV5Z3JvdXAuZHV5My5uYW1l
LnZughJzeWRuZXlncm91cC5lZHUudm6CH3dlYmRpc2suYmFjaGtob2F4dWFudmlu
aC5lZHUudm6CE3dlYmRpc2suZGlnaW1pbmQudm6CH3dlYm1haWwuYmFjaGtob2F4
dWFudmluaC5lZHUudm6CE3dlYm1haWwuZGlnaW1pbmQudm6CGnd3dy5hbmh1eXZp
bmEuZHV5My5uYW1lLnZugiF3d3cuYmFjaGtob2F4dWFudmluaC5kdXkzLm5hbWUu
dm6CG3d3dy5iYWNoa2hvYXh1YW52aW5oLmVkdS52boIZd3d3LmRpZ2ltaW5kLmR1
eTMubmFtZS52boIPd3d3LmRpZ2ltaW5kLnZughx3d3cuc3lkbmV5Z3JvdXAuZHV5
My5uYW1lLnZughZ3d3cuc3lkbmV5Z3JvdXAuZWR1LnZuMBMGA1UdIAQMMAowCAYG
Z4EMAQIBMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUAejKMVNi3LbYg6jjgUh7p
hBZwMhOFTTvSK8E6V6NS61IAAAGJaeb2bgAABAMARjBEAiB5KsqWNUkAy4sxHlkU
3jbt+xHypnivyfE2pHRnePbB5QIgVsZFdZM9i5/61bocRV5hentaFMIKIxAEorIl
3dLt2/8AdQCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAYlp5vaX
AAAEAwBGMEQCIEoChhBqj5SfhHleruG5twrj7u2ytXJTYtmK9U4NMj3oAiBNKuiv
jO2mJ8bXFaoqPhJdSPU7slkdYHIzF94x7y5cdjANBgkqhkiG9w0BAQsFAAOCAQEA
cvZOkXMq4eeDyugCpidY44JcWSWmujcE3Y7t+mMBZrx1rfyJpcfwIQRYKnol4ayE
XYU2I1al3GPsVBXy2+e+pFsiaX582gJJ2OHZippIeUoyM/yL3jb3PzetTvnaAj/h
ttajFM0hRxK5chx2Kjjtz0UD6dHoPTufqBaRaNGB6DKh9VaSYATzW6Shee4bOOIL
NBF95r92HDx8fDAqw32L8MNlipg8IVHun+W0TvSaE0AubWXGtehRYFRMgzoxpKov
H/9pmspW2uY8GaSYulUBMYAdc3PzvY99TsdXJGIXef8CL+c1NmQmuKQ3dUuR4asg
TmyTw15rFHefCpo/NuzK3Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFS1REzkxIF5rLVSbJUu
MhvY3HE0JhT1n+9YxoNAV+W5eGzKf5IOeJdf3kR38yl/A9P4JWvcpKIOJfmhlEEt
TlQAVqKT1tgdh7aZxygnQJli1XYcvHiEyzOKXmgJD1L+P3JV39rNz9nG254FMbNB
3czE6PGSuQbrRTIB4MwukKgmmaem6QQCyfefzHgPstZKBbzTEooQcGCoTTqyJSEB
Mua4ObtmT7ag1kmIDZ9zZQ+17gjhYW9U9lmxRVeouNhqGH1K4sHtrDHKl0Xconf+
0PQLELtgfLF6Axh5PGd9eRUhwy7Bb6i0USasxUP1zNvRn1NnQPoIBL7TLbpFOr2A
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 363201404239246583826339587031271195626688
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 15:48:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 15:48:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.digimind.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24279525661322528440374932043242667582554891148441045761309201034754997850036780393773766014935055879852666880495632397429214704974374700477806260263301021088012998458106112860220129214651333973603781224742601952334023300076281996517638231421815399200090896119853793699546319780466347388026434608677414764061454799704006180998788417241252284090159238718551092996576982483018396240316065320328239424552779129275519339587901764382024501766096731492595026908950388412532010504406973258189970848814435408557875295876031939729434895106589447264187718448369429838448858937828910523181246328998733111936327438049838504968319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a519cebbe1b7bc4258a2e340c934aec19ff77df3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (638 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anhuyvina.duy3.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bachkhoaxuanvinh.duy3.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bachkhoaxuanvinh.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.bachkhoaxuanvinh.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.digimind.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.bachkhoaxuanvinh.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.digimind.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.bachkhoaxuanvinh.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.digimind.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digimind.duy3.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digimind.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydneygroup.duy3.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydneygroup.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.bachkhoaxuanvinh.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.digimind.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bachkhoaxuanvinh.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.digimind.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anhuyvina.duy3.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bachkhoaxuanvinh.duy3.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bachkhoaxuanvinh.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digimind.duy3.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digimind.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydneygroup.duy3.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydneygroup.edu.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018969e6f66e00000403004630440220792aca96354900cb8b311e5914de36edfb11f2a678afc9f136a4746778f6c1e5022056c64575933d8b9ffad5ba1c455e617a7b5a14c20a231004a2b225ddd2eddbff007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018969e6f697000004030046304402204a0286106a8f949f84795eaee1b9b70ae3eeedb2b5725362d98af54e0d323de802204d2ae8af8ceda627c6d715aa2a3e125d48f53bb2591d60723317de31ef2e5c76
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0072f64e91732ae1e783cae802a62758e3825c5925a6ba3704dd8eedfa630166bc75adfc89a5c7f02104582a7a25e1ac845d85362356a5dc63ec5415f2dbe7bea45b22697e7cda0249d8e1d98a9a48794a3233fc8bde36f73f37ad4ef9da023fe1b6d6a314cd214712b9721c762a38edcf4503e9d1e83d3b9fa8169168d181e832a1f556926004f35ba4a179ee1b38e20b34117de6bf761c3c7c7c302ac37d8bf0c3658a983c2151ee9fe5b44ef49a13402e6d65c6b5e85160544c833a31a4aa2f1fff699aca56dae63c19a498ba550131801d7373f3bd8f7d4ec75724621779ff022fe735366426b8a437754b91e1ab204e6c93c35e6b14779f0a9a3f36eccadd