sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:6c:84:0d:f7:98:00:2c:4f:f2:2e:ed:26:70:5a:d2:5e:d9 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6c:84:0d:f7:98:00:2c:4f:f2:2e:ed:26:70:5a:d2:5e:d9
Serial Number (int): 385375169971603016862923811727743246294745
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 13:48:3e:b8:09:86:45:14:89:60:5e:9a:45:37:8e:11:aa:32:6b:ee
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 47:d8:7d:94:67:d9:df:a0:ef:f9:4a:27:ec:d0:27:e5:da:e6:20:ec
Fingerprint (sha256): 52:6e:58:20:6e:40:2c:be:08:d6:32:76:9d:8f:fb:97:48:40:eb:76:75:e8:f2:d1:08:12:1b:52:77:ab:68:92

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amctc.co.nz
athleticstauranga.co.nz
autocc.co.nz
autocc.nz
automobile.cc
bbafc.org.nz
bopblokartclub.nz
bowlswaikanae.com
cambridgenetball.co.nz
cambridgerowing.org.nz
christchurchbaseball.co.nz
clubsmart.co.nz
communityconnect.nz
curling.nz
curling.org.nz
cyclingchb.co.nz
dunedinnetball.co.nz
edit.co.nz
gisbornethistle.co.nz
globalgames.co.nz
harbourrugby.co.nz
hbfutsal.co.nz
hbpbswimming.org.nz
hcmc.org.nz
kaierau.co.nz
kapimananetball.org.nz
keithst.school.nz
kokkino.co.nz
ladiessocialcycling.co.nz
mytouch.co.nz
nrf.org.nz
nzfpandp.co.nz
oacnz.org
otakarofc.co.nz
ourfc.co.nz
pukekohenetball.co.nz
raglansportfishing.co.nz
schoolboss.co.nz
schoolsportaoraki.co.nz
southernfootball.co.nz
sporty.org.nz
supercrm.nz
swimotago.org
taranakirefs.co.nz
trolleyads.co.nz
vknz.co.nz
waipukuraugolfclub.co.nz
waiukunetball.org.nz
weirrosebowl.co.nz
whakatanehockey.co.nz
wpkgolf.co.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)
sporty.org.nz
www.sportycrm.com
sporty.org.nz
sporty.org.nz
www.giafc.co.nz
sportycrm.com
sporty.org.nz
fdmc.school.nz
arrowtownrugby.co.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycQ9UHFEFT8eGRMMF4vD
FPZ00bF+eWV3zRBbz+M/ui4eTrO1tuOI3c3OUxmmDBF3mNK3r75ChEprzZdoXk0z
Xgh0TSWUnFVXSUAFdMC3KFt7UVsJm5LJOnLUahOQM2aBa2TxZ0JStmMR0HtkJQIy
idjQvOcLfbgeG2kilt1WMEgB5AkDbA2ls16Ev8mC3rd6KObt0gLUtNb6yigWHjX0
oLWYAMkScJPFRag//TidOowd+02oinES99GMDCOVgVzgsqc+LEP5fZlJX1uk4wTH
THbh/KeRs1yj7BseY5PXzqbbOayTMKKE5L4dgxWR1DcpD2wOLUNnoBXtkvenoSPw
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385375169971603016862923811727743246294745
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 22:36:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 22:36:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25470668606561389128146659378252058185889186325732119730747864679191181677660603716876514081374791692887028102349438664390547563108435152630632781488998157407267228523042427616828922756582100726450936007552343882805134754776963359150270324265782761490189881463589503115871962678167227457401330337645548867118455322122845813497919522236892341474240997024259366316463707811095508925111777719401952033004964695970891147475485705864133717096700791731575539908790998512059500014375667836501743931376756138860769355143256255009843886768574287004413066554490078304874212894729950685893595962842726405163029144358097567084797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13483eb80986451489605e9a45378e11aa326bee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (939 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amctc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticstauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autocc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autocc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automobile.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bopblokartclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswaikanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgerowing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubsmart.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communityconnect.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curling.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingchb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunedinnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisbornethistle.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbfutsal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbpbswimming.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcmc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaierau.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapimananetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keithst.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kokkino.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladiessocialcycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrf.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzfpandp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oacnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otakarofc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pukekohenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raglansportfishing.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolboss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercrm.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swimotago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taranakirefs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trolleyads.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vknz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waipukuraugolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiukunetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weirrosebowl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whakatanehockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpkgolf.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cfae2d5e20000040300483046022100dd60e5e0e5991498f2c6bd8d34c7a5beb9e9c303ef6ea0d947f3337ae9b683e9022100f52ec2b2601db57817598c0f28d3420cc8f7cb39e3066fb46c95395f3ee7a793007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cfae2d5e3000004030047304502203245544ef5e154c47ff1b894128ce304db79df64dc995883de52a00b6e07e338022100d4a5f210db10e785e266b1fb6a27a4d1f231bfe5783d4748f71cecb22a72ac64
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008d6118833bada510df5679f25bbcab54c69e974a45ef2866adf123425e9c79b2a3a3c55fe0de2bbd96f10d294b96e1ecf37adff91a898a14638d089eaa31f852784c51305178c8deaac82a5bdde3c9e25a884d3f57b7e7b0663b856ee8f313159414085dd7e82e88ef81e28af1e72af6e58dacd105273e423b4e93ef3db8f7dd121c4f30c92ece5d9de1cd87ed2d2fcf4f6f5705ef17087ca480a8016fe2bfa865b335f932e18da7634ad6964116ffda588b159cb788da1179798dda9ab38f0a9f1eb844d0e7e8c51468e87c175c7ceafdd553f7eada97d2698fb529d569179ea352f4f204d47a30e390606f3b9d25142a7d2efd37f817f1978e5950130f8a64