www.digital.duy6.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 04:b9:91:06:6a:6a:84:76:26:3b:d2:7e:69:71:dd:7e:3f:42 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.digital.duy6.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b9:91:06:6a:6a:84:76:26:3b:d2:7e:69:71:dd:7e:3f:42
Serial Number (int): 411594152978959164406442392316293154750274
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c9:ba:84:67:92:3a:cf:ba:49:31:37:da:2f:77:c2:89:ae:df:47:9c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6f:f7:4c:aa:8a:ca:ec:15:ed:bf:b6:de:a6:42:dd:11:a8:b6:03:9a
Fingerprint (sha256): 54:15:1c:56:df:c4:36:1c:f3:e4:d5:82:8c:36:69:a8:e1:b2:04:87:2b:fe:6d:61:68:3d:da:b4:1f:fe:aa:4c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.digital.duy6.name.vn

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.digital.duy6.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bachkhoaxuanvinh.duy6.name.vn
bachkhoaxuanvinh.edu.vn
beestacademy.duy6.name.vn
codienphongchay.com
codienphongchay.duy6.name.vn
cpanel.bachkhoaxuanvinh.edu.vn
cpcalendars.bachkhoaxuanvinh.edu.vn
cpcontacts.bachkhoaxuanvinh.edu.vn
digital.duy6.name.vn
digital.solartop.vn
mbcvietnam.duy6.name.vn
moihongocha.duy6.name.vn
tmpen.duy6.name.vn
webdisk.bachkhoaxuanvinh.edu.vn
webmail.bachkhoaxuanvinh.edu.vn
www.bachkhoaxuanvinh.duy6.name.vn
www.bachkhoaxuanvinh.edu.vn
www.beestacademy.duy6.name.vn
www.codienphongchay.duy6.name.vn
www.digital.duy6.name.vn
www.mbcvietnam.duy6.name.vn
www.moihongocha.duy6.name.vn
www.tmpen.duy6.name.vn

Other certificates including the domain name duy6.name.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.digital.duy6.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHejCCBmKgAwIBAgISBLmRBmpqhHYmO9J+aXHdfj9CMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMjQwOTIxMTdaFw0yNDAyMjIwOTIxMTZaMCMxITAfBgNVBAMT
GHd3dy5kaWdpdGFsLmR1eTYubmFtZS52bjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKc4arYr5K0VgOaZhlyng3VK7afx3BXe/auSNN25RxhcFBu+jefK
/kLEkN9yZcdJb/udYAr/w7Jn5ygqUK8xsIkxVJjp5t+XYTylnTK/pnDfzrzSsTOQ
H5y4goeSB2IG3U5LritC4zk6YBl8K6zMHY3mIqUxvzBghKqRJ7i+rddbO6VLBuut
YEsqx463j0lr/PkUlifXqQPgo3rV1ov4zpAzHtjf76wKOG6uRF2TE54v1hgAkXHw
aUz4/h0Fgr54Y3ZK1bZLBpTdUf9MqDnmRfMFexDGrcdtJkGpVdAA/uis/M+ZCG4P
yT32PscR/Da4sOT2f4IX1JJ6tO9cSDqxXmsCAwEAAaOCBJcwggSTMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUybqEZ5I6z7pJMTfaL3fCia7fR5wwHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wggKeBgNVHREEggKVMIICkYIdYmFjaGtob2F4dWFudmluaC5k
dXk2Lm5hbWUudm6CF2JhY2hraG9heHVhbnZpbmguZWR1LnZughliZWVzdGFjYWRl
bXkuZHV5Ni5uYW1lLnZughNjb2RpZW5waG9uZ2NoYXkuY29tghxjb2RpZW5waG9u
Z2NoYXkuZHV5Ni5uYW1lLnZugh5jcGFuZWwuYmFjaGtob2F4dWFudmluaC5lZHUu
dm6CI2NwY2FsZW5kYXJzLmJhY2hraG9heHVhbnZpbmguZWR1LnZugiJjcGNvbnRh
Y3RzLmJhY2hraG9heHVhbnZpbmguZWR1LnZughRkaWdpdGFsLmR1eTYubmFtZS52
boITZGlnaXRhbC5zb2xhcnRvcC52boIXbWJjdmlldG5hbS5kdXk2Lm5hbWUudm6C
GG1vaWhvbmdvY2hhLmR1eTYubmFtZS52boISdG1wZW4uZHV5Ni5uYW1lLnZugh93
ZWJkaXNrLmJhY2hraG9heHVhbnZpbmguZWR1LnZugh93ZWJtYWlsLmJhY2hraG9h
eHVhbnZpbmguZWR1LnZugiF3d3cuYmFjaGtob2F4dWFudmluaC5kdXk2Lm5hbWUu
dm6CG3d3dy5iYWNoa2hvYXh1YW52aW5oLmVkdS52boIdd3d3LmJlZXN0YWNhZGVt
eS5kdXk2Lm5hbWUudm6CIHd3dy5jb2RpZW5waG9uZ2NoYXkuZHV5Ni5uYW1lLnZu
ghh3d3cuZGlnaXRhbC5kdXk2Lm5hbWUudm6CG3d3dy5tYmN2aWV0bmFtLmR1eTYu
bmFtZS52boIcd3d3Lm1vaWhvbmdvY2hhLmR1eTYubmFtZS52boIWd3d3LnRtcGVu
LmR1eTYubmFtZS52bjATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAAB
jADZHDAAAAQDAEcwRQIgWFTF1Vjwwfl8u5PJcixAx9X/8eihnNyOOwoqiHBjmJAC
IQC9SUEzqYtDVtM6HbN5C91RlXaheCtX6BcDn7nArYTT7AB2AHb/iD8KtvuVUcJh
zPWHujS0pM27KdxoQgqf5mdMWjp0AAABjADZHIIAAAQDAEcwRQIhALohrP5s5nS3
C7rZFVQ9ZwjWL5u+1hzyncr3qM7QRg5FAiByMqMPnehEuNEvv7e4o+Q+HsxTtLpR
9toppOSFLPmkfDANBgkqhkiG9w0BAQsFAAOCAQEAWog64NEnIa9DSBOqwzaKFLMi
DGkXcRacf/74uTtkUcUi1bMDMxUaNtWWx9nncPvyFSyf7iIAD+y9M6QBJ3Q0Gyt2
ANdI1QtqPJPlsQB5datzzHg40DxlywtBs1+kFFW/AqZowUQKRqgLE+VwohuBtmwJ
kommWoB6pHbqxR3uO3vSa3gcabyilFoXCgbBfCYlSti91QexbBueGa1TzTpi7u6Z
CjbSlrYVDS3/DsBk4BXIevYd9gnB8oYRq0onoHhkx1uRbWWnHX1zHOQUnE/zCXnv
vXZ+27BDkrOZDI5CWKaG4pcrbvCmltZziafQ8EINM/lte8iDLQo2DWgoCZTdvw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzhqtivkrRWA5pmGXKeD
dUrtp/HcFd79q5I03blHGFwUG76N58r+QsSQ33Jlx0lv+51gCv/DsmfnKCpQrzGw
iTFUmOnm35dhPKWdMr+mcN/OvNKxM5AfnLiCh5IHYgbdTkuuK0LjOTpgGXwrrMwd
jeYipTG/MGCEqpEnuL6t11s7pUsG661gSyrHjrePSWv8+RSWJ9epA+CjetXWi/jO
kDMe2N/vrAo4bq5EXZMTni/WGACRcfBpTPj+HQWCvnhjdkrVtksGlN1R/0yoOeZF
8wV7EMatx20mQalV0AD+6Kz8z5kIbg/JPfY+xxH8Nriw5PZ/ghfUknq071xIOrFe
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411594152978959164406442392316293154750274
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-24 09:21:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 09:21:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digital.duy6.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21109617111100800557113791261576216223597896424038003734686507119267971751156056550843416730495296401512115517507957264597648129320849001598451119247587427437644835689842498573714551406551558661878711788169938760013509805271586387507561139518578059741064315836594385486950651642770791717570647568208349875174317915577397755532068037332996046112157274270459009621436812687781002074529273948521318720665297240700412510995226299661880432359823266682612093666999475780495062997483646842040336440076932161912063943090396547597055844572813157147429721879973659311299869311608612555470652548591406557988419219711032334311019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9ba8467923acfba493137da2f77c289aedf479c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (661 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bachkhoaxuanvinh.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bachkhoaxuanvinh.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beestacademy.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codienphongchay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codienphongchay.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.bachkhoaxuanvinh.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.bachkhoaxuanvinh.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.bachkhoaxuanvinh.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.solartop.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbcvietnam.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moihongocha.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmpen.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.bachkhoaxuanvinh.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bachkhoaxuanvinh.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bachkhoaxuanvinh.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bachkhoaxuanvinh.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beestacademy.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codienphongchay.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digital.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbcvietnam.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moihongocha.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tmpen.duy6.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c00d91c30000004030047304502205854c5d558f0c1f97cbb93c9722c40c7d5fff1e8a19cdc8e3b0a2a8870639890022100bd494133a98b4356d33a1db3790bdd519576a1782b57e817039fb9c0ad84d3ec00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c00d91c820000040300473045022100ba21acfe6ce674b70bbad915543d6708d62f9bbed61cf29dcaf7a8ced0460e4502207232a30f9de844b8d12fbfb7b8a3e43e1ecc53b4ba51f6da29a4e4852cf9a47c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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