www.knowyournarrative.net

Issued by R3

About this certificate

This digital certificate with serial number 03:40:77:d7:47:8c:07:35:a4:25:a8:67:91:fd:81:e6:b5:74 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.knowyournarrative.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:40:77:d7:47:8c:07:35:a4:25:a8:67:91:fd:81:e6:b5:74
Serial Number (int): 283274225204689047432908924383881656186228
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:a9:b3:18:6f:44:77:8b:08:04:d4:68:7e:a7:86:50:3d:75:24:dc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 10:20:eb:4a:54:e3:0c:6b:a1:f4:e3:bc:cf:e6:b7:d7:5c:2b:30:3f
Fingerprint (sha256): 3f:14:4c:ca:4f:67:26:f6:eb:b2:ff:69:d3:2b:5b:0f:bc:d3:77:1c:76:58:1b:16:5a:5c:7e:fe:2e:6c:4d:15

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.knowyournarrative.net

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.knowyournarrative.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aition.io
alfredosalazar.net
allyart.us
anonymousbitcoin.net
anytime.coffee
atlantacommercialrealestate.us
bitstammp.net
cardtransfer.net
cold.business
knowyournarrative.net
l3k.net
ruffshoecover.net
ryandieselorme.com
scoop.reviews
www.aition.io
www.alfredosalazar.net
www.allyart.us
www.anonymousbitcoin.net
www.anytime.coffee
www.atlantacommercialrealestate.us
www.bitstammp.net
www.cardtransfer.net
www.cold.business
www.knowyournarrative.net
www.l3k.net
www.ruffshoecover.net
www.ryandieselorme.com
www.scoop.reviews
www.zerodesign.net
zerodesign.net

Other certificates including the domain name knowyournarrative.net

(limited to 100 certificates)
www.knowyournarrative.net

Certificate

The complete raw certificate details for www.knowyournarrative.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHNDCCBhygAwIBAgISA0B310eMBzWkJahnkf2B5rV0MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MTUxOTA5MjVaFw0yMzEwMTMxOTA5MjRaMCQxIjAgBgNVBAMT
GXd3dy5rbm93eW91cm5hcnJhdGl2ZS5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfE7UXEABmA8lFaiLAbV7E3yTuvV7fk/tCymHApkGSQtHu/Lnb
vO9O8DxDyurAyOZuMXwKavWMrYgTmJv7sEpRwa1ETyDAWflzbRvETftAcF95XaOe
Er+7yTBsmgN3O71qF1Xbx0gmJNdoG4KVSLKaLm86oCuOFExJT4WthAGi4cO8k8MN
wxBfW0yG8H2LlSzGuuwffh684Nx/cgbZNphqePIMvLbXbedPQ6VvO79SEZvpHBT7
lqJCkiIoX042QAGx3a4MC7SVZjE2Vd7rtMApYwQj9La6Nzq4ylMo1uGPcj96Hcoo
2ShQ2gCin/XLfLCsXkfnV/hft0I8uoeLniqVAgMBAAGjggRQMIIETDAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFIipsxhvRHeLCATUaH6nhlA9dSTcMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIICVwYDVR0RBIICTjCCAkqCCWFpdGlvbi5pb4ISYWxmcmVk
b3NhbGF6YXIubmV0ggphbGx5YXJ0LnVzghRhbm9ueW1vdXNiaXRjb2luLm5ldIIO
YW55dGltZS5jb2ZmZWWCHmF0bGFudGFjb21tZXJjaWFscmVhbGVzdGF0ZS51c4IN
Yml0c3RhbW1wLm5ldIIQY2FyZHRyYW5zZmVyLm5ldIINY29sZC5idXNpbmVzc4IV
a25vd3lvdXJuYXJyYXRpdmUubmV0ggdsM2submV0ghFydWZmc2hvZWNvdmVyLm5l
dIIScnlhbmRpZXNlbG9ybWUuY29tgg1zY29vcC5yZXZpZXdzgg13d3cuYWl0aW9u
LmlvghZ3d3cuYWxmcmVkb3NhbGF6YXIubmV0gg53d3cuYWxseWFydC51c4IYd3d3
LmFub255bW91c2JpdGNvaW4ubmV0ghJ3d3cuYW55dGltZS5jb2ZmZWWCInd3dy5h
dGxhbnRhY29tbWVyY2lhbHJlYWxlc3RhdGUudXOCEXd3dy5iaXRzdGFtbXAubmV0
ghR3d3cuY2FyZHRyYW5zZmVyLm5ldIIRd3d3LmNvbGQuYnVzaW5lc3OCGXd3dy5r
bm93eW91cm5hcnJhdGl2ZS5uZXSCC3d3dy5sM2submV0ghV3d3cucnVmZnNob2Vj
b3Zlci5uZXSCFnd3dy5yeWFuZGllc2Vsb3JtZS5jb22CEXd3dy5zY29vcC5yZXZp
ZXdzghJ3d3cuemVyb2Rlc2lnbi5uZXSCDnplcm9kZXNpZ24ubmV0MBMGA1UdIAQM
MAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcAejKMVNi3LbYg
6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGJWywfFgAABAMASDBGAiEA6DO6maWe
SgJJPJCnkVgxnQL4ytsQXv0kjTr/zabmL60CIQCye7GWhhq8v8/xQWDa7sW8hLyJ
5V8IbO6xBS1t8ZXrhAB1AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1u
AAABiVssHw4AAAQDAEYwRAIgYysdYHI1Dh1PSvk9moegyPjJQLWuqWwJHAnAd4z0
7W8CIA6l7gwTVRXhhqWiPzeN/xtsW8A8OEx1At4qEVvt07PjMA0GCSqGSIb3DQEB
CwUAA4IBAQCFUIh7ryEqZjMB+/rL+Le4h/0izsrgytF8zInrXtUY4xXWoIm3OU3k
GgDEz1JGRJkGA3CRc+sE+qKTAy84aogp0jGTrqQeAmHqUj3b/GNbWThL+hXKldmB
45UfLbQ5mDrcpQRU5f4xSuaaQYRBHr0pB6sEIBTIJTiadf3GYJ4nje8b8GMTVdr0
kuz1Npf/RWDswLU+BU36miEDq5Fw6sPIkOGpxIKZGiInIKHH+Qyw4Y1pUCeQLhSw
xSKUh3JMB90B/4vLU8Xh3UY5FVYHj1F+Idivk8VbS7pX/AFzH7nNFaBz/eDbvMdB
cjHizEXiqDkL9US1UYGSokoUS95BkFG+
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xO1FxAAZgPJRWoiwG1e
xN8k7r1e35P7QsphwKZBkkLR7vy527zvTvA8Q8rqwMjmbjF8Cmr1jK2IE5ib+7BK
UcGtRE8gwFn5c20bxE37QHBfeV2jnhK/u8kwbJoDdzu9ahdV28dIJiTXaBuClUiy
mi5vOqArjhRMSU+FrYQBouHDvJPDDcMQX1tMhvB9i5UsxrrsH34evODcf3IG2TaY
anjyDLy2123nT0Olbzu/UhGb6RwU+5aiQpIiKF9ONkABsd2uDAu0lWYxNlXe67TA
KWMEI/S2ujc6uMpTKNbhj3I/eh3KKNkoUNoAop/1y3ywrF5H51f4X7dCPLqHi54q
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283274225204689047432908924383881656186228
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 19:09:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 19:09:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.knowyournarrative.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28160860080262789298001358989350370822087622570806875456340274017148434447992897063640347523202225046509306293743724422743002215617258015417640529622184753393114170243372352990375410981725146939263494177130922657283645583448308412113469857931968783357231672656772651670372084614814208955533917330747778544403883098991737727085125466965049705096151823742123009537858756271638183760033226954293503747633574815943998856486256437920716227653072962839812450512914972854302210041422578473714490335634974929650179734522325546710861668568998922788177229464118074562440041156579194732485554304807478340031264241864564371499669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88a9b3186f44778b0804d4687ea786503d7524dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (590 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aition.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfredosalazar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allyart.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anonymousbitcoin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytime.coffee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantacommercialrealestate.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitstammp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardtransfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cold.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowyournarrative.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l3k.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruffshoecover.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryandieselorme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scoop.reviews'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aition.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfredosalazar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allyart.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anonymousbitcoin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anytime.coffee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantacommercialrealestate.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitstammp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardtransfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cold.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knowyournarrative.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.l3k.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruffshoecover.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryandieselorme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scoop.reviews'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zerodesign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zerodesign.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001895b2c1f160000040300483046022100e833ba99a59e4a02493c90a79158319d02f8cadb105efd248d3affcda6e62fad022100b27bb196861abcbfcff14160daeec5bc84bc89e55f086ceeb1052d6df195eb84007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001895b2c1f0e00000403004630440220632b1d6072350e1d4f4af93d9a87a0c8f8c940b5aea96c091c09c0778cf4ed6f02200ea5ee0c135515e186a5a23f378dff1b6c5bc03c384c7502de2a115bedd3b3e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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