test.ajc.org
Issued by R3
About this certificate
This digital certificate with serial number 04:58:a2:95:c7:24:8e:28:e4:ca:33:73:9a:cd:ad:8c:3e:76 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=test.ajc.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:58:a2:95:c7:24:8e:28:e4:ca:33:73:9a:cd:ad:8c:3e:76Serial Number (int): 378610104642728370718052485229936080862838
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 40:15:87:f2:6c:fe:44:32:65:ce:c4:c6:1b:2c:ff:e5:cc:6b:90:04
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): e6:55:f3:95:89:c5:4d:44:77:89:03:0f:38:43:66:d0:82:96:1b:9e
Fingerprint (sha256): 46:af:a1:51:36:14:45:e6:e1:69:96:23:b5:6c:1a:c9:a4:bc:0f:9a:56:1f:34:30:65:e3:c0:06:53:9f:95:c2
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate test.ajc.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for test.ajc.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
test.ajc.org
Other certificates including the domain name ajc.org
(limited to 100 certificates)
it.uahs.arizona.edu
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
hub.meed.com
yakamafish-star.net
5673385510043648-fe4.pantheonsite.io
live.ucdavis.edu
5673385510043648-fe4.pantheonsite.io
actnow.ajc.org
liberalarts.ss.pacific.edu
dev.embody.yale.edu
expeditions.sandiegozoo.org
5673385510043648-fe4.pantheonsite.io
test.ajc.org
host2.openminds.com
m.ajc.org
5673385510043648-fe4.pantheonsite.io
live.bme.cornell.edu
labellelab.asu.edu
5673385510043648-fe4.pantheonsite.io
legacy.hq.philabundance.org
inside.gc.cuny.edu
spamtitan.ajc.org
global.ajc.org
ajc.org
live.ophd.pantheon.berkeley.edu
www.gospringboard.com
global.ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
global.ajc.org
global.ajc.org
global.ajc.org
yakamafish-star.net
5673385510043648-fe4.pantheonsite.io
liberalarts.ss.pacific.edu
live.ucdavis.edu
lp.programs.carey.jhu.edu.help
ajc.org
intranet.olivecrest.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
lp.grad.online.udel.edu.help
laborlabsandbox.aflcio.org
dev.dhsri.yale.edu
industri40.ida.dk
info-dev.calperformances.org
5673385510043648-fe4.pantheonsite.io
internal.gcir.org
lawebmail.ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
international.research.ucsb.edu
ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
csc.arizona.edu
yakamafish-star.net
csc.arizona.edu
international.research.ucsb.edu
dev.dhsri.yale.edu
ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
live.ophd.pantheon.berkeley.edu
m.ajc.org
live.ucdavis.edu
5673385510043648-fe4.pantheonsite.io
libre.estadio.com
dev-lp-jhubsph.edu.help
yakamafish-star.net
ipv6.earthjustice.org
design-engineering.princeton.edu
dev-web-degacc.edu.help
global.ajc.org
dev-web-degacc.edu.help
sslvpnny.ajc.org
gws-uat.earthjustice.org
5673385510043648-fe4.pantheonsite.io
it-chat.web.arizona.edu
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
host2.cenmi.org
5673385510043648-fe4.pantheonsite.io
dcwebmail.ajc.org
5673385510043648-fe4.pantheonsite.io
test.ajc.org
spamtitan.ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
dev.cmsi.gse.upenn.edu
5673385510043648-fe4.pantheonsite.io
info.vcfa.edu
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
global.ajc.org
lambda.usc.edu
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
hub.meed.com
yakamafish-star.net
5673385510043648-fe4.pantheonsite.io
live.ucdavis.edu
5673385510043648-fe4.pantheonsite.io
actnow.ajc.org
liberalarts.ss.pacific.edu
dev.embody.yale.edu
expeditions.sandiegozoo.org
5673385510043648-fe4.pantheonsite.io
test.ajc.org
host2.openminds.com
m.ajc.org
5673385510043648-fe4.pantheonsite.io
live.bme.cornell.edu
labellelab.asu.edu
5673385510043648-fe4.pantheonsite.io
legacy.hq.philabundance.org
inside.gc.cuny.edu
spamtitan.ajc.org
global.ajc.org
ajc.org
live.ophd.pantheon.berkeley.edu
www.gospringboard.com
global.ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
global.ajc.org
global.ajc.org
global.ajc.org
yakamafish-star.net
5673385510043648-fe4.pantheonsite.io
liberalarts.ss.pacific.edu
live.ucdavis.edu
lp.programs.carey.jhu.edu.help
ajc.org
intranet.olivecrest.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
lp.grad.online.udel.edu.help
laborlabsandbox.aflcio.org
dev.dhsri.yale.edu
industri40.ida.dk
info-dev.calperformances.org
5673385510043648-fe4.pantheonsite.io
internal.gcir.org
lawebmail.ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
international.research.ucsb.edu
ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
csc.arizona.edu
yakamafish-star.net
csc.arizona.edu
international.research.ucsb.edu
dev.dhsri.yale.edu
ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
live.ophd.pantheon.berkeley.edu
m.ajc.org
live.ucdavis.edu
5673385510043648-fe4.pantheonsite.io
libre.estadio.com
dev-lp-jhubsph.edu.help
yakamafish-star.net
ipv6.earthjustice.org
design-engineering.princeton.edu
dev-web-degacc.edu.help
global.ajc.org
dev-web-degacc.edu.help
sslvpnny.ajc.org
gws-uat.earthjustice.org
5673385510043648-fe4.pantheonsite.io
it-chat.web.arizona.edu
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
host2.cenmi.org
5673385510043648-fe4.pantheonsite.io
dcwebmail.ajc.org
5673385510043648-fe4.pantheonsite.io
test.ajc.org
spamtitan.ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
dev.cmsi.gse.upenn.edu
5673385510043648-fe4.pantheonsite.io
info.vcfa.edu
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
global.ajc.org
lambda.usc.edu
5673385510043648-fe4.pantheonsite.io
Certificate
The complete raw certificate details for test.ajc.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgISBFiilcckjijkyjNzms2tjD52MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MzAwODIyMzhaFw0yNDA3MjkwODIyMzdaMBcxFTATBgNVBAMT DHRlc3QuYWpjLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJjd eaHmmrO1IxxtezKzIUNFofgj12UHu1kT+OzwFqHnY1CvbRjmOjD+xulBuTTFj3e9 0hg59iwZ3P1PxnFi95hrQuTOOyoZGbNh2xiJkwO0iYsOSbniMPHp854cIMA85gZX gBtEIPbP0UhZsNHu8uAqsTmun5WpndMHjbqeJLa7+SABZMG+UjQjJRTVl8ruHCQl LVHZxF9JaUz0iCv7k+r6Ag4hHV8Z5deU00tgPDmJIRsobxsS/YWA0trr0edyXu4W 7gqhpFGWknndv6+NjCKh8NZzeBgtJRhiEodgkLx/YLTm+i2B08AA9srctbeIEzKZ cSxxQ3cD6WtnfkRZJ/8CAwEAAaOCAg8wggILMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUQBWH8mz+RDJlzsTGGyz/5cxrkAQwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w FwYDVR0RBBAwDoIMdGVzdC5hamMub3JnMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB BQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB 2bu/qznYhHMAAAGPLlAwswAABAMARzBFAiAd+6mxplC2ifaCJYzWopPmYJjY/yJR 3Vz1ED8D8VhS0AIhAKm9Cf+EFvleR0UwJMRUWU4f7l+5IVYOGa1kIiV1xj+CAHcA dv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGPLlAw3gAABAMASDBG AiEA5dsNIrB4wlbiqOtl8HYFDaH5ZX0Ux6BrsR3EHwceR2ICIQCuPT7gzx1weWj3 wWvpJuYpYZbaqFui0T+zs1yz08V0NjANBgkqhkiG9w0BAQsFAAOCAQEAsoLuyhnp j6zMZ53uFeUhD4a4FIbO20/yk318dWXxtefd4YVDZ+4+0OvVpqGBVWrcMcNxKK00 U0Ac0d7B4YR2586+VFtyJ0FrdABtEMpCN4gZV4I+FeOcFekaQDjsIkjpPfa6JwAK ONoVRjFijR64/boYADtig/xMpiajPpM8NS8io19vKEPcxbTQNErVRNjdLLxmnjnQ 9XcSq+QueqWkipY2oFlATp5/lw1oFb9CuTRF+5HXCWAslfxq7PWZPsdxRLGmr3Jo RNlHPMp8fDofqNe/pDRQFtwzwfIQonmKvCDghrA1jF6Vkj+yV/YKfmdCAxKRUYQ2 Hhy2puyXgmQouw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN15oeaas7UjHG17MrMh Q0Wh+CPXZQe7WRP47PAWoedjUK9tGOY6MP7G6UG5NMWPd73SGDn2LBnc/U/GcWL3 mGtC5M47KhkZs2HbGImTA7SJiw5JueIw8enznhwgwDzmBleAG0Qg9s/RSFmw0e7y 4CqxOa6flamd0weNup4ktrv5IAFkwb5SNCMlFNWXyu4cJCUtUdnEX0lpTPSIK/uT 6voCDiEdXxnl15TTS2A8OYkhGyhvGxL9hYDS2uvR53Je7hbuCqGkUZaSed2/r42M IqHw1nN4GC0lGGISh2CQvH9gtOb6LYHTwAD2yty1t4gTMplxLHFDdwPpa2d+RFkn /wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 378610104642728370718052485229936080862838 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 08:22:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-29 08:22:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test.ajc.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19297435810238244716322818920723853065064000181636968677920963740423679467601771166356730853590795188821373840577059371332747157619118677845787444284776264710750238633761123429788490529324370144620058406544174541958557396000558843607264593798701877777042297312401561008527069122385489941178730955074494395103590191520659337941993973632303456617273170090303164783362414637609442992705096806592110449151380255208978491086244425284950374539928179459907084901982405264983978155263287133961632659384813749624645833985516414570607834761519187920636763888682777225455843864929898099360676518408971116553929404277897094047743 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 401587f26cfe443265cec4c61b2cffe5cc6b9004 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ajc.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f2e5030b3000004030047304502201dfba9b1a650b689f682258cd6a293e66098d8ff2251dd5cf5103f03f15852d0022100a9bd09ff8416f95e47453024c454594e1fee5fb921560e19ad64222575c63f8200770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f2e5030de0000040300483046022100e5db0d22b078c256e2a8eb65f076050da1f9657d14c7a06bb11dc41f071e4762022100ae3d3ee0cf1d707968f7c16be926e6296196daa85ba2d13fb3b35cb3d3c57436 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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