proficio.maileon.de
Issued by R3
About this certificate
This digital certificate with serial number 03:3f:31:bc:fc:66:c8:eb:70:eb:44:c6:e5:36:1a:9a:33:7b was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=proficio.maileon.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:3f:31:bc:fc:66:c8:eb:70:eb:44:c6:e5:36:1a:9a:33:7bSerial Number (int): 282840760354213402892883523615095346836347
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 65:c1:5f:d6:79:ab:43:59:25:f6:15:43:11:6b:01:fa:47:21:56:00
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 73:a3:28:28:ef:1f:d4:2f:44:57:19:85:4f:c6:c7:7a:e2:65:04:0a
Fingerprint (sha256): 3c:a5:44:f5:67:b2:c4:6e:c8:a0:97:c7:ea:a1:c0:58:e6:ec:e4:70:26:49:3f:f4:1d:22:b6:fb:99:b4:bc:f8
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate proficio.maileon.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for proficio.maileon.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
proficio.maileon.de
Other certificates including the domain name maileon.de
(limited to 100 certificates)
maileon.de
aok-sachsen-anhalt-sub.maileon.de
dev.maileon.com
maileon.de
aim-akademie.maileon.de
iskb2b.maileon.de
maileon.de
dentalabs.maileon.de
maileon.de
turbozentrum.maileon.de
tourismus-nrw.maileon.de
maileon.de
fcvolendam.maileon.de
vitesse.maileon.de
cdbadajoz.maileon.de
deinangebot.maileon.de
abendakademie-mannheim.maileon.de
ferarpartnerapi.maileon.de
pagrodirekt-live.maileon.de
fortunasittard.maileon.de
megawatt.maileon.de
lkfulda-bildungsbuero.maileon.de
maileon.de
boersenblatt.maileon.de
mwi.maileon.de
marcus.maileon.de
dev.maileon.com
deinangebot.maileon.de
barmenia-berlin.maileon.de
bdoa.maileon.de
landkreis-hof-vhs.maileon.de
electronicpartner.maileon.de
planx.maileon.de
maileon.de
landkreis-hof-vhs.maileon.de
tourismus-nrw.maileon.de
qprcommunitytrust.maileon.de
proficio.maileon.de
cito.maileon.de
landkreis-hof-vhs.maileon.de
barmyarmy.maileon.de
peter-lang.maileon.de
megawatt.maileon.de
heracles.maileon.de
maileon.de
ntesting.maileon.de
maileon.de
testfons2.maileon.de
dev.maileon.com
maileon.de
tourismus-nrw.maileon.de
dev.maileon.com
florea.maileon.de
elv.maileon.de
questico.maileon.de
lkfulda-bildungsbuero.maileon.de
lkfulda-gesundheitsamt.maileon.de
worcesterwarriors.maileon.de
vhs-wuerzburg.maileon.de
buchungtt.maileon.de
www.maileon.de
barmenia-berlin.maileon.de
wt100.maileon.de
plymouthargylesso.maileon.de
middlesbroughsso.maileon.de
boersenblatt.maileon.de
dev.maileon.com
tourismus-nrw.maileon.de
dev.maileon.com
maileon.de
passmachinecz.maileon.de
thalamed.maileon.de
cerclebrugge.maileon.de
trends-villeroy-boch.maileon.de
gloucestershiresso.maileon.de
dev.maileon.com
landkreis-hof-vhs.maileon.de
maileon.de
landkreis-hof-vhs.maileon.de
fcdenbosch.maileon.de
maileon.de
maileon.de
peter-lang.maileon.de
ippen-digital.maileon.de
turbozentrum.maileon.de
dev.maileon.com
lkfulda-bildungsbuero.maileon.de
tysys.maileon.de
wbvs.maileon.de
maileon.de
geze-polska.maileon.de
kvoostende.maileon.de
luka.maileon.de
amp.maileon.de
maileon.de
zertifiziert.maileon.de
lufthansa-aviation-center.maileon.de
brandmr.maileon.de
lkfulda-bildungsbuero.maileon.de
maileon.de
aok-sachsen-anhalt-sub.maileon.de
dev.maileon.com
maileon.de
aim-akademie.maileon.de
iskb2b.maileon.de
maileon.de
dentalabs.maileon.de
maileon.de
turbozentrum.maileon.de
tourismus-nrw.maileon.de
maileon.de
fcvolendam.maileon.de
vitesse.maileon.de
cdbadajoz.maileon.de
deinangebot.maileon.de
abendakademie-mannheim.maileon.de
ferarpartnerapi.maileon.de
pagrodirekt-live.maileon.de
fortunasittard.maileon.de
megawatt.maileon.de
lkfulda-bildungsbuero.maileon.de
maileon.de
boersenblatt.maileon.de
mwi.maileon.de
marcus.maileon.de
dev.maileon.com
deinangebot.maileon.de
barmenia-berlin.maileon.de
bdoa.maileon.de
landkreis-hof-vhs.maileon.de
electronicpartner.maileon.de
planx.maileon.de
maileon.de
landkreis-hof-vhs.maileon.de
tourismus-nrw.maileon.de
qprcommunitytrust.maileon.de
proficio.maileon.de
cito.maileon.de
landkreis-hof-vhs.maileon.de
barmyarmy.maileon.de
peter-lang.maileon.de
megawatt.maileon.de
heracles.maileon.de
maileon.de
ntesting.maileon.de
maileon.de
testfons2.maileon.de
dev.maileon.com
maileon.de
tourismus-nrw.maileon.de
dev.maileon.com
florea.maileon.de
elv.maileon.de
questico.maileon.de
lkfulda-bildungsbuero.maileon.de
lkfulda-gesundheitsamt.maileon.de
worcesterwarriors.maileon.de
vhs-wuerzburg.maileon.de
buchungtt.maileon.de
www.maileon.de
barmenia-berlin.maileon.de
wt100.maileon.de
plymouthargylesso.maileon.de
middlesbroughsso.maileon.de
boersenblatt.maileon.de
dev.maileon.com
tourismus-nrw.maileon.de
dev.maileon.com
maileon.de
passmachinecz.maileon.de
thalamed.maileon.de
cerclebrugge.maileon.de
trends-villeroy-boch.maileon.de
gloucestershiresso.maileon.de
dev.maileon.com
landkreis-hof-vhs.maileon.de
maileon.de
landkreis-hof-vhs.maileon.de
fcdenbosch.maileon.de
maileon.de
maileon.de
peter-lang.maileon.de
ippen-digital.maileon.de
turbozentrum.maileon.de
dev.maileon.com
lkfulda-bildungsbuero.maileon.de
tysys.maileon.de
wbvs.maileon.de
maileon.de
geze-polska.maileon.de
kvoostende.maileon.de
luka.maileon.de
amp.maileon.de
maileon.de
zertifiziert.maileon.de
lufthansa-aviation-center.maileon.de
brandmr.maileon.de
lkfulda-bildungsbuero.maileon.de
maileon.de
Certificate
The complete raw certificate details for proficio.maileon.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAz8xvPxmyOtw60TG5TYamjN7MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDIwNzAwMTZaFw0yNDA3MDEwNzAwMTVaMB4xHDAaBgNVBAMT E3Byb2ZpY2lvLm1haWxlb24uZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQDiEanPmxswNzYE8IRrBPqoWHZodwQOhV9J9FLPm7scNHs6Hq9C/2BMQ0cs Aar1g1zkMpcJF8lRxsq4OEE6OHWgljaV0WpP1hCoX8lEaZjVyL313V92olrZpH88 nxLSEbpBzits1f3giFgOCEK9A3o39g/McwCETAAN8Y4Pi8X7LiC7a9jPuldx/oa1 /MruQ0RxeHUPRpGVck+g3EULIvpKgwK1FBmp5uL9DecGK+zZlgTxm+iRYjUvf6V2 sm3fu8qrNp7MKA+aU8wHjSTBtWRdLwZNDrXdWEFC7Lu3hTs5RiUQ1eX9YUy+9mcn LfcDIB5xK5smZoyYKaBoJKyU37hKZcO9lQ7ARkr9axFd4t/SjZsbjwWSOQhtLGdF O/GjhNkVndYKIMZgSHIel2ivmywiNKspy3/ml75RXsfWBIt0GlKjnOHlHD53rV1v lRcYAcoG4exQL0Tp4gC4sHT3szfdrK4jvPI8fq9xVctxLxK7hU4AwjAX9QqdxA9X YnhHe4TaMGHiZaObqmUU2sCYIOFmpdng6wuHiD4EoxEbq7obiwxYgNDa+BvzPXt6 RZBrR31NCuauS9rVj5b1eSEzFCMbJjMT7E5K4twmxKdAn6QZ/SbkT567ZgPid2uV xjtpLc9hYGjL4RmizdCPtPXS3Jgek0o/GTb0H0vWBZXmQqCnQwIDAQABo4IBIjCC AR4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRlwV/WeatDWSX2FUMRawH6RyFWADAf BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW aHR0cDovL3IzLmkubGVuY3Iub3JnLzAeBgNVHREEFzAVghNwcm9maWNpby5tYWls ZW9uLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMBMGCisGAQQB1nkCBAMBAf8EAgUA MA0GCSqGSIb3DQEBCwUAA4IBAQCfRPEXjPIDT6bnUwCtr2IA5lHqq2CpLX+LMYq5 GExCpuH7KiC3/sM3Q03IqU7Xpyxcj+cq8tEn6U7aNtB1FL3wBIy1Nvlfm+TkWg02 WZjT14dSuwwtLCYGFbNMiyqItt8PbZOUk46jqMIFfzBFmEXeRLqXVAYP35lXoWFV 1D7jVMZQBEoP1WODKAWNtsZR9AsFLl8eAAYbI7e8Mx8GnRM//rLJ0dzCmCNMasHF 6teYAg98VJOD9uQ+7dfVoXANPr4hEa8PEJHUZKy184cHD2SXe8GnAjdOJ2kR+oYr shKy8Acvqp1ikTan2H/KR3JexY50wvtNCR4uHaaVmwOYTO7N -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4hGpz5sbMDc2BPCEawT6 qFh2aHcEDoVfSfRSz5u7HDR7Oh6vQv9gTENHLAGq9YNc5DKXCRfJUcbKuDhBOjh1 oJY2ldFqT9YQqF/JRGmY1ci99d1fdqJa2aR/PJ8S0hG6Qc4rbNX94IhYDghCvQN6 N/YPzHMAhEwADfGOD4vF+y4gu2vYz7pXcf6GtfzK7kNEcXh1D0aRlXJPoNxFCyL6 SoMCtRQZqebi/Q3nBivs2ZYE8ZvokWI1L3+ldrJt37vKqzaezCgPmlPMB40kwbVk XS8GTQ613VhBQuy7t4U7OUYlENXl/WFMvvZnJy33AyAecSubJmaMmCmgaCSslN+4 SmXDvZUOwEZK/WsRXeLf0o2bG48FkjkIbSxnRTvxo4TZFZ3WCiDGYEhyHpdor5ss IjSrKct/5pe+UV7H1gSLdBpSo5zh5Rw+d61db5UXGAHKBuHsUC9E6eIAuLB097M3 3ayuI7zyPH6vcVXLcS8Su4VOAMIwF/UKncQPV2J4R3uE2jBh4mWjm6plFNrAmCDh ZqXZ4OsLh4g+BKMRG6u6G4sMWIDQ2vgb8z17ekWQa0d9TQrmrkva1Y+W9XkhMxQj GyYzE+xOSuLcJsSnQJ+kGf0m5E+eu2YD4ndrlcY7aS3PYWBoy+EZos3Qj7T10tyY HpNKPxk29B9L1gWV5kKgp0MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 282840760354213402892883523615095346836347 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 07:00:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 07:00:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'proficio.maileon.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 922281044041458033816373499193653380486024186177593266581386573873824940235437758551779756702303082922656675445225043168612416590353338736670305353496676579229404690709686435829510965301756553420202862967710542967510101414842162879944803965037395876153315573440840271780351827718764910404944367556886598160401883446752301294312100066222566157925502566302944921752676400946102472681629090085420458676422333966901080338115515300122432098421384324904919396110811762155809513485702589654977868448119474446304039136190227783339828713782236502612580190100882245037019887266238358647761053930345789669569450866298258122338280723987133840034750198267380299500717955911242470747379313736470897280760432724671588732420123108060754608367951356951636265388091061609057355089490240909848817038922450982338466213013648597071898414066671565386392195300649139157813403387479902774750540721374679363731540454484545092873533197911479080686718116200558861286484155880889339627519176347151239703632542092369053202375626679083800921064210758268513686181089025863765274246477986942980200927012743941503740381990614068245889145073067573613215591191336623740835327272711224465121919277913715342504750374178611601681853782983863736998238240436654086274721603 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 65c15fd679ab435925f61543116b01fa47215600 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proficio.maileon.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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