www.over40fitnesstips.com

Issued by R3

About this certificate

This digital certificate with serial number 03:fb:9e:73:91:b7:41:7d:5b:3a:b9:16:82:8a:bf:a6:a5:e5 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.over40fitnesstips.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fb:9e:73:91:b7:41:7d:5b:3a:b9:16:82:8a:bf:a6:a5:e5
Serial Number (int): 346958349985377456824061830093949695862245
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:c3:53:e3:a8:1a:27:82:ca:d2:00:be:9d:3c:99:79:6e:70:90:bd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7a:22:9f:87:57:88:49:d3:33:9d:1a:67:f0:e5:31:d6:c1:73:ed:fa
Fingerprint (sha256): 39:4b:63:01:25:83:8f:b7:77:ba:f8:e1:ba:90:88:d8:13:fb:91:58:17:14:27:2d:60:46:de:e9:98:48:95:81

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.over40fitnesstips.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.over40fitnesstips.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crinkleskirts.com
derkriminalbericht.com
digitalmarketingstudents.com
equalifewellness.com
gayalphaguys.com
keywestpiratefest.com
lensflirt.com
loicdelineau.com
over40fitnesstips.com
portsaintluciedentist.com
qualquest.com
typesofwallets.com
vancouversportsdoctors.com
www.crinkleskirts.com
www.derkriminalbericht.com
www.digitalmarketingstudents.com
www.equalifewellness.com
www.gayalphaguys.com
www.keywestpiratefest.com
www.lensflirt.com
www.loicdelineau.com
www.over40fitnesstips.com
www.portsaintluciedentist.com
www.qualquest.com
www.typesofwallets.com
www.vancouversportsdoctors.com
www.wwwrtfkt.com
www.xn--8dbpahu.com
wwwrtfkt.com
xn--8dbpahu.com

Other certificates including the domain name over40fitnesstips.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.over40fitnesstips.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHmTCCBoGgAwIBAgISA/uec5G3QX1bOrkWgoq/pqXlMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTkxOTI4MzhaFw0yNDAyMTcxOTI4MzdaMCQxIjAgBgNVBAMT
GXd3dy5vdmVyNDBmaXRuZXNzdGlwcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYpyOZChBmPQ5S4Tw8s5ReAld0MmevDnamxOyeY+zfoalI+gkk
BGdY+W1pEr3qfPB91HJTqWV/eW+PfB4e8lwkh+OQELq1x5BXmBaBipUOriTSvWq5
3UjeIaJXh3iG+qJowkN5JAN/2I5eNCR/kecxxZRjWDpjHP1bpvY6EzBwRpVjuFKT
6dysWg4aiL37KF/ec1E6ERJsgemnBt4Lp5JlUPUwA8fuQdfEzEA1LxTJ+AIBCZmW
MIEitoSm2jc/AslBOf6gmgBAaTJZEri7L2XISdzAPbPVaz9RoxfIyoSP7dNc2BB8
GvBj+F8/6hcM55gdkfqZjjSFAgFhIYqz/s/dAgMBAAGjggS1MIIEsTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFKDDU+OoGieCytIAvp08mXlucJC9MB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIICuwYDVR0RBIICsjCCAq6CEWNyaW5rbGVza2lydHMuY29t
ghZkZXJrcmltaW5hbGJlcmljaHQuY29tghxkaWdpdGFsbWFya2V0aW5nc3R1ZGVu
dHMuY29tghRlcXVhbGlmZXdlbGxuZXNzLmNvbYIQZ2F5YWxwaGFndXlzLmNvbYIV
a2V5d2VzdHBpcmF0ZWZlc3QuY29tgg1sZW5zZmxpcnQuY29tghBsb2ljZGVsaW5l
YXUuY29tghVvdmVyNDBmaXRuZXNzdGlwcy5jb22CGXBvcnRzYWludGx1Y2llZGVu
dGlzdC5jb22CDXF1YWxxdWVzdC5jb22CEnR5cGVzb2Z3YWxsZXRzLmNvbYIadmFu
Y291dmVyc3BvcnRzZG9jdG9ycy5jb22CFXd3dy5jcmlua2xlc2tpcnRzLmNvbYIa
d3d3LmRlcmtyaW1pbmFsYmVyaWNodC5jb22CIHd3dy5kaWdpdGFsbWFya2V0aW5n
c3R1ZGVudHMuY29tghh3d3cuZXF1YWxpZmV3ZWxsbmVzcy5jb22CFHd3dy5nYXlh
bHBoYWd1eXMuY29tghl3d3cua2V5d2VzdHBpcmF0ZWZlc3QuY29tghF3d3cubGVu
c2ZsaXJ0LmNvbYIUd3d3LmxvaWNkZWxpbmVhdS5jb22CGXd3dy5vdmVyNDBmaXRu
ZXNzdGlwcy5jb22CHXd3dy5wb3J0c2FpbnRsdWNpZWRlbnRpc3QuY29tghF3d3cu
cXVhbHF1ZXN0LmNvbYIWd3d3LnR5cGVzb2Z3YWxsZXRzLmNvbYIed3d3LnZhbmNv
dXZlcnNwb3J0c2RvY3RvcnMuY29tghB3d3cud3d3cnRma3QuY29tghN3d3cueG4t
LThkYnBhaHUuY29tggx3d3dydGZrdC5jb22CD3huLS04ZGJwYWh1LmNvbTATBgNV
HSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AEiw42va
pkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi+lFWm8AAAQDAEgwRgIhAP9H
kO9J7GJib2iS8XF+czGbL22Uw32rKlKJJ8I51kp2AiEAgObB3lRs3K9g8pyXYDTk
ta9TlUq5t75byq/RyXVIN/MAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv
4frUFwAAAYvpRVp6AAAEAwBHMEUCIQCqh6FPa2a6eMTDAfAD6rjgXA+9S9YErHUu
76+pTj5ckAIgeIp42ii2ouXFIkoFa10CpWeCZie19rK3yt+x2eYbBWkwDQYJKoZI
hvcNAQELBQADggEBACATgWGoEnAXOW25QbwPbZY2w/OXa+nzPFndwo0H4uNZzA4Z
BDCTsI+PXVYcfkX5+9RevLDPDiwKuPF4a9ROeGh0pnBl5Pj1Wl7CnlmAv8tkxRVF
4WwpxrB/EqyEJMQHrtgJgC+4kLRudB+wpRKyccKZ2eBnjK4tYPeZuMWYKQ68xN22
atgYWXCMthncKMQ+LqKOYCq/7Y+TpKAhSAmEl71JB+Pz2oArjG01qcsCkVcvrWXR
QV9b5lB2LYhz7IDkNvZ4UWiFgx25q3BF8JgkYLqb8E7N6X8GyGjk3j6/jWA1e1jJ
ZfM5dwwuV4XI/8tTW3peISsagc73XcG+mLb6dbI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKcjmQoQZj0OUuE8PLOU
XgJXdDJnrw52psTsnmPs36GpSPoJJARnWPltaRK96nzwfdRyU6llf3lvj3weHvJc
JIfjkBC6tceQV5gWgYqVDq4k0r1qud1I3iGiV4d4hvqiaMJDeSQDf9iOXjQkf5Hn
McWUY1g6Yxz9W6b2OhMwcEaVY7hSk+ncrFoOGoi9+yhf3nNROhESbIHppwbeC6eS
ZVD1MAPH7kHXxMxANS8UyfgCAQmZljCBIraEpto3PwLJQTn+oJoAQGkyWRK4uy9l
yEncwD2z1Ws/UaMXyMqEj+3TXNgQfBrwY/hfP+oXDOeYHZH6mY40hQIBYSGKs/7P
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346958349985377456824061830093949695862245
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 19:28:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 19:28:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.over40fitnesstips.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19270641694151831827336447781523732654276264091972156536877371898909188599969705485420813520112304782324643291872215452009011985357294169733198145462599920732502992397766055488272692621170828912523017559052381458212357830057896583613780753139095853964000938354364662370673947136409062549195139786850056325019820887900586720785712408802422310719622173733174659607799304354408232527852001077849899970186983403716012641763696760378571860931284223552043841209638084462283236112023595193315849894711164682320271219129256978860782551187998723539890629518476115171164776506854052070162119220491997256078036849791474809622493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0c353e3a81a2782cad200be9d3c99796e7090bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (690 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crinkleskirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derkriminalbericht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalmarketingstudents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equalifewellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayalphaguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keywestpiratefest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lensflirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loicdelineau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'over40fitnesstips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portsaintluciedentist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'typesofwallets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vancouversportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crinkleskirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derkriminalbericht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalmarketingstudents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalifewellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gayalphaguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keywestpiratefest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lensflirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loicdelineau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.over40fitnesstips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portsaintluciedentist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.typesofwallets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vancouversportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwwrtfkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--8dbpahu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwrtfkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--8dbpahu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018be9455a6f0000040300483046022100ff4790ef49ec62626f6892f1717e73319b2f6d94c37dab2a528927c239d64a7602210080e6c1de546cdcaf60f29c976034e4b5af53954ab9b7be5bcaafd1c9754837f30076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018be9455a7a0000040300473045022100aa87a14f6b66ba78c4c301f003eab8e05c0fbd4bd604ac752eefafa94e3e5c900220788a78da28b6a2e5c5224a056b5d02a567826627b5f6b2b7cadfb1d9e61b0569
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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