id.exchange.gunthy.org

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 23:c6:3f:f5:0a:6e:dc:99:0e:a1:a1:26:00:b0:8c:d8 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=id.exchange.gunthy.org,OU=Domain Control Validated+OU=GGSSL Domain SSL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 23:c6:3f:f5:0a:6e:dc:99:0e:a1:a1:26:00:b0:8c:d8
Serial Number (int): 47552351836395671154485139946444197080
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: b7:96:d7:59:34:5d:05:5d:cd:3d:bd:ec:d7:e3:1f:17:13:cc:08:e1
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): a1:30:3f:dd:3b:a5:31:e0:4b:5e:28:e3:67:c4:06:d2:ab:a8:55:a6
Fingerprint (sha256): 3c:0d:a1:30:84:e7:44:ed:20:e4:9e:4a:4d:0f:dc:ad:99:67:fb:06:3c:5f:e6:46:68:b2:42:f4:4b:95:50:1d

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate id.exchange.gunthy.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for id.exchange.gunthy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

id.exchange.gunthy.org
www.id.exchange.gunthy.org

Other certificates including the domain name gunthy.org

(limited to 100 certificates)
shop.gunthy.org
shop.gunthy.org
shop.gunthy.org
gunthy.org
okex.gunthy.org
forum.gunthy.org
gunthy.org
exchange.gunthy.org
gunthy.org
betawiki.gunthy.org
exchange.gunthy.org
gunthy.org
shop.gunthy.org
wiki.gunthy.org
otc.gunthy.org
shop.gunthy.org
developer.iko.travel
betawiki.gunthy.org
app.gunthy.org
demo.gunthy.org
shop.gunthy.org
tournament.gunthy.org
id.exchange.gunthy.org
betawiki.gunthy.org
gunthy.org
johnwalkermoosbrugger.com
gunthy.org
shop.gunthy.org
gunthy.org
howardablat.com
exchange.gunthy.org
www.gunthy.org
gunthy.org
shop.gunthy.org
fptkd.sibrafe.com.br
otc.gunthy.org
gunthy.org
shop.gunthy.org
exchange.gunthy.org
developer.iko.travel
gunthy.org
demo.gunthy.org
shop.gunthy.org
gunthy.org
gunthy.org
otc.gunthy.org
gunthy.org
wiki.gunthy.org
abctowing.ca
betawiki.gunthy.org
gunthy.org
shop.gunthy.org
wiki.gunthy.org
betawiki.gunthy.org
wiki.gunthy.org
shop.gunthy.org
www.slpdbuildcon.com
wiki.gunthy.org
wiki.gunthy.org
ferdiklomp.nl
gunthy.org
gunthy.org
gunthy.org
demo.gunthy.org
exchange.gunthy.org
ataviar.app
wiki.gunthy.org
gunthy.org
betawiki.gunthy.org
lianchienergiavital.com
betawiki.gunthy.org
demo.gunthy.org
betawiki.gunthy.org
gunthy.org
otc.gunthy.org
pointdobaixinho.lupi.delivery
wiki.gunthy.org
betawiki.gunthy.org
wiki.gunthy.org
johnwalkermoosbrugger.com
gunthy.org
qubecloud.io
betawiki.gunthy.org
kraken.gunthy.org
wiki.gunthy.org
betawiki.gunthy.org
wiki.gunthy.org
demo.gunthy.org

Certificate

The complete raw certificate details for id.exchange.gunthy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGjjCCBXagAwIBAgIQI8Y/9Qpu3JkOoaEmALCM2DANBgkqhkiG9w0BAQsFADCB
jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD
Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB
MB4XDTE5MDgxOTAwMDAwMFoXDTIwMTExNDIzNTk1OVowXzEhMB8GA1UECxMYRG9t
YWluIENvbnRyb2wgVmFsaWRhdGVkMRkwFwYDVQQLExBHR1NTTCBEb21haW4gU1NM
MR8wHQYDVQQDExZpZC5leGNoYW5nZS5ndW50aHkub3JnMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAp6p0GfS82sIS/pK97FDkCMPx/YBw1VXYw5aUhi9X
T9E0b8uz0DR3uurx2dJ/KGagtC6fEjtpR4eXqo6bBh/3lQkGgWV1ijKtMfik8Ofh
4rRAQKUvEBbdOSRP5X3+VRfhkEpSlw+kPbKl4PAFG6hX1SQd2UeLkRlbYhoawU09
hC2866DurU1be//I8vZeLwW2Fm80Z4TFGQCkujUudCeCX2GHgu5NSw8QqeYVd8TT
iuaywSuEl+PnjlaWC3Z8oKagSSTgHfJj9AhReg64ssNHKEmlVJqz5cO1oGbRcVyC
PxG7VeHTIeWnaO/4xXH6eVmb7YPHE1PUnoSaW4X11Kho8wIDAQABo4IDEzCCAw8w
HwYDVR0jBBgwFoAUjYxexFStiuF36Zv5mwXhuAGNYeEwHQYDVR0OBBYEFLeW11k0
XQVdzT297NfjHxcTzAjhMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQB
sjEBAgIHMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgG
BmeBDAECATCBhAYIKwYBBQUHAQEEeDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0
LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2Vy
dmVyQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTA9
BgNVHREENjA0ghZpZC5leGNoYW5nZS5ndW50aHkub3Jnghp3d3cuaWQuZXhjaGFu
Z2UuZ3VudGh5Lm9yZzCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYAsh4FzIui
zYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFsqOIw+AAABAMARzBFAiEAwp60
c6NYGZ2FspAvgnfyOfTyN12gZI3OzAIB7FnRnCcCIDU9frVzJ9RNtEIx2m2LwCsN
wbcRdr+Bh60DQ/GBICdHAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFx
RVgAAAFsqOIxEgAABAMARzBFAiAvA+OUr8znjT3feSCNupryZ2E0NmpKiCdsWOaS
4JVsKgIhAMEGAlJK7Cvp+7i/s3C7nc9V0sf4I13BFMej8Xmi1DRGAHUAVYHUwhaQ
NgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFsqOIw6gAABAMARjBEAiBquuFU
WBvOiwH/rC8sw6Vue4Y8Wsja+Er4MYYgpjIT9gIgextm+/5anEe055wYHiCWYVFC
lBoWoqG04OFFK2yh8bIwDQYJKoZIhvcNAQELBQADggEBAH9Gj7Cge2FTtWawZQa4
ntmJNin3fRYLZO1030ya72zqGSIRwF5a1AtU+rAHffGG0cyIwx+qjw0SXcfOwUXS
QkK47j8Bw/WtbnncFIPzXFd/FaHm7d6sDHrtIUmFR7Z1lSXLwKwkT0ABBXg+hnZj
bM0UaCRsNxPQZCg3CG+T4SqdLj0zvWc1T2UCIaVBU4jZyrq/6YL2tzQ2nocoQ1ns
QNqufeYIlVfc4aE5ep3F97ef18SjOYFRP8E/QvgFTB7ROwI9rRVMfUuJ9sMre2f6
OFqHMbXTNEN/YcHioWWVhog6O50JYoZKIFErLQ4xy5DaVuWI+F747iiUPkMX4K9C
LvI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6p0GfS82sIS/pK97FDk
CMPx/YBw1VXYw5aUhi9XT9E0b8uz0DR3uurx2dJ/KGagtC6fEjtpR4eXqo6bBh/3
lQkGgWV1ijKtMfik8Ofh4rRAQKUvEBbdOSRP5X3+VRfhkEpSlw+kPbKl4PAFG6hX
1SQd2UeLkRlbYhoawU09hC2866DurU1be//I8vZeLwW2Fm80Z4TFGQCkujUudCeC
X2GHgu5NSw8QqeYVd8TTiuaywSuEl+PnjlaWC3Z8oKagSSTgHfJj9AhReg64ssNH
KEmlVJqz5cO1oGbRcVyCPxG7VeHTIeWnaO/4xXH6eVmb7YPHE1PUnoSaW4X11Kho
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 47552351836395671154485139946444197080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GGSSL Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'id.exchange.gunthy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21165850693291794696576446797814216335656793895736916672594073259543025487582435727616643828039177945847714399554572092720474954281779784402731236477481929494879617838871191258298045706685381689558472448327395017226387862080688091728716423706618837441948065973688317424675980207242393893718142207760784286059170925094633853491782207174290758118988474343067136803510507662410749810258905123208754653227043556972460883888774304052468305770746156652577641186405340634117743556682071472968638603978037451857818228209905974343626496332961609480271684955602864764712992298585161232995341210279021912106463729094129967720691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b796d759345d055dcd3dbdecd7e31f1713cc08e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.exchange.gunthy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.id.exchange.gunthy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007f468fb0a07b6153b566b06506b89ed9893629f77d160b64ed74df4c9aef6cea192211c05e5ad40b54fab0077df186d1cc88c31faa8f0d125dc7cec145d24242b8ee3f01c3f5ad6e79dc1483f35c577f15a1e6eddeac0c7aed21498547b6759525cbc0ac244f400105783e8676636ccd1468246c3713d0642837086f93e12a9d2e3d33bd67354f650221a5415388d9cababfe982f6b734369e87284359ec40daae7de6089557dce1a1397a9dc5f7b79fd7c4a33981513fc13f42f8054c1ed13b023dad154c7d4b89f6c32b7b67fa385a8731b5d334437f61c1e2a1659586883a3b9d0962864a20512b2d0e31cb90da56e588f85ef8ee28943e4317e0af422ef2