4ff0e958.status.cleafy.cloud

Issued by R3

About this certificate

This digital certificate with serial number 03:a0:52:f5:17:62:63:a7:98:fb:57:b1:b7:da:96:c3:83:5d was issued on by Let's Encrypt.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=4ff0e958.status.cleafy.cloud

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a0:52:f5:17:62:63:a7:98:fb:57:b1:b7:da:96:c3:83:5d
Serial Number (int): 315892305785306220667765408679643370980189
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0b:e4:4e:21:e0:84:a7:24:d9:fb:35:6e:cb:12:a2:e2:c2:08:73:47
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8b:25:d4:4b:54:a4:c9:67:e7:36:98:1e:da:b7:e7:4a:b6:b0:a7:8e
Fingerprint (sha256): 51:49:ab:ed:9d:a7:7d:c3:0c:27:72:04:5a:07:cd:72:d0:e5:2c:bf:3f:0f:69:2e:91:41:4c:3b:7e:9d:3e:7f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 4ff0e958.status.cleafy.cloud

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 4ff0e958.status.cleafy.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4ff0e958.status.cleafy.cloud
alsoaskedstatus.com
apistatus.postnord.com
obs.status.fortisase.com
rootnet.network
status.balena.io
status.bankflip.io
status.beatstars.com
status.bieases.com
status.bluematrix.com
status.casetext.com
status.cgmllc.net
status.cryptofacilities.com
status.cryptowat.ch
status.darwin.cx
status.data.mercedes-benz.com
status.daylight.xyz
status.docusign.com
status.fortigatecnf.com
status.gamewarden.io
status.greenphire.com
status.ikomm.de
status.lupapiste.fi
status.mention-me.com
status.microhost.com
status.nequi.com.co
status.omcomputer.ch
status.redplanetsoftware.ca
status.relymd.app
status.saiva.ai
status.seven.io
status.sharebox.global
status.storiobdr.com
status.unzer.com
status3.securiti.ai
systemstatus.abcfitness.com
trust.lendio.com

Other certificates including the domain name cleafy.cloud

(limited to 100 certificates)
0b22bb10.status.cleafy.cloud
3130e863.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
12a10fad.status.cleafy.cloud
23930d45.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
3130e863.status.cleafy.cloud
12a10fad.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
6bd21a3c.status.cleafy.cloud
23930d45.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
12a10fad.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
au.status.clio.com
0b22bb10.status.cleafy.cloud
23930d45.status.cleafy.cloud
12a10fad.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
12a10fad.status.cleafy.cloud
c4cs1-mng.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
23930d45.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
au.status.clio.com
0b22bb10.status.cleafy.cloud
au.status.clio.com
12a10fad.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
23930d45.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
6bd21a3c.status.cleafy.cloud
23930d45.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
au.status.clio.com
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
23930d45.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
12a10fad.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
au.status.clio.com
4ff0e958.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
12a10fad.status.cleafy.cloud
23930d45.status.cleafy.cloud
12a10fad.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
au.status.clio.com
4ff0e958.status.cleafy.cloud
23930d45.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
12a10fad.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
23930d45.status.cleafy.cloud
au.status.clio.com
23930d45.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
4ff0e958.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
0b22bb10.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud
clf-cleafy4-stg.status.cleafy.cloud

Certificate

The complete raw certificate details for 4ff0e958.status.cleafy.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjpKgp2djGKQljcg8ecs
NWEyf7W0NCMNzKtTrOcQdmodNmmbJEQTiGNizdneDmdUjj8qZHhUbfhoDKs0gdoE
MkSMTxUiso1CjrPpc+aklsyCWBCKlEo/SucxZLfFf+P9VSb5WlLpOFaEKpYLaTer
N9aIqjdxdMnCSx8wVwVCQ/wO4sQudmcp19wI6uIoiOFttO39rHu3QFQ0chs335/4
Aivsj6kZnNhKtidqBJVR3vQyNZtB3+f66oKt2iUrKFEvf+GNEE2qtGryQS4a5bt1
LdFWLfAcnwCyCbBK51yXjNy13bx0sdp821o9O+Z43ggwizSKIMRTU4XzBVjnnMHv
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315892305785306220667765408679643370980189
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-13 21:37:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 21:37:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4ff0e958.status.cleafy.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23004115894626173867282426079690098229636126121643843601968687593326036088390184657768928439168708772194159677471425644053426082008259987275081289131310054763976574799778767475750086155206090778650006105827536263070496782161647455946488081690281073572143400490615305784459211620301200162435622703091149003814464333303666306377210743631298859325883859744235670248507779309079713914094927234808111426425409349549786043125549929599888373648945122639759690205500179523436824600329882197377340522404683524152952094406727073737514215597339617892925283796808445325058920687542950269283217281637142601955284954612356945670139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0be44e21e084a724d9fb356ecb12a2e2c2087347
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (816 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4ff0e958.status.cleafy.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alsoaskedstatus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apistatus.postnord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obs.status.fortisase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rootnet.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.balena.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.bankflip.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.beatstars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.bieases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.bluematrix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.casetext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cgmllc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cryptofacilities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cryptowat.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.darwin.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.data.mercedes-benz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.daylight.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.docusign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.fortigatecnf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gamewarden.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.greenphire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ikomm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.lupapiste.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.mention-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.microhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nequi.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.omcomputer.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.redplanetsoftware.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.relymd.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.saiva.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.seven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sharebox.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.storiobdr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.unzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status3.securiti.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systemstatus.abcfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trust.lendio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a90b145ed0000040300483046022100f0ff5445f73e316bfffe2b62e09bdb2ea4070045b95d5d3f46e370bda937fe930221009795ad3411d3cbf491cf980b266ebd07dc63ea431a6cd2067976ff504d351e6f007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a90b146310000040300473045022100ebaa67e8d697f9e55366910b1e1a1009f9ce707eb4bade2f7666f11a43b5a86002200d3baa0bb41e1c5951f146b6bd8dd08b6e818d19a64d7e0297283c67aff372a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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