aiq-in.65.movie

Issued by R11

About this certificate

This digital certificate with serial number 03:05:14:79:56:82:0a:d4:20:61:7d:6d:db:6e:1b:25:ce:fd was issued on by Let's Encrypt.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aiq-in.65.movie

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:05:14:79:56:82:0a:d4:20:61:7d:6d:db:6e:1b:25:ce:fd
Serial Number (int): 263065484212311251624973791722986503786237
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:e1:ab:2f:b1:96:0d:ec:58:20:b4:43:f8:12:d9:d7:6a:f8:3f:41
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 8c:78:6b:ef:ad:8a:3c:5a:c3:b1:87:55:6f:bd:f2:ee:19:e8:ae:ee
Fingerprint (sha256): 56:ec:a4:08:fd:66:e2:0f:dc:5b:c1:0d:3b:a1:8f:ea:ff:cb:b7:f7:8f:a4:b3:1d:b4:bd:d4:b3:f4:32:17:0c

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate aiq-in.65.movie

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aiq-in.65.movie

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aiq-in.65.movie
aiq-in.acrossthespiderversemovie.com
aiq-in.alphauniverse.com
aiq-in.anyonebutyou.movie
aiq-in.badboys.movie
aiq-in.biggeorgeforeman.movie
aiq-in.butcherscrossingmovie.com
aiq-in.cultkillermovie.com
aiq-in.dumbmoney.movie
aiq-in.electronics.sony.com
aiq-in.equalizer.movie
aiq-in.flymetothemoon.movie
aiq-in.ghostbusters.com
aiq-in.granturismo.movie
aiq-in.here-movie.com
aiq-in.insidious.movie
aiq-in.itendswithus.movie
aiq-in.jeopardy.com
aiq-in.kotzmovie.com
aiq-in.kravenmovie.com
aiq-in.loveagain.movie
aiq-in.madameweb.movie
aiq-in.napoleon.movie
aiq-in.nohardfeelingsmovie.com
aiq-in.sonycine.com
aiq-in.sonypictures.com
aiq-in.tarotmovie.com
aiq-in.thanksgiving.movie
aiq-in.thebookofclarence.movie
aiq-in.thegarfield-movie.com
aiq-in.themachine.movie
aiq-in.thepopes-exorcist.movie
aiq-in.venom.movie
aiq-in.welcometohelios.com
aiq-in.wheeloffortune.com
aiq-in.wolfsmovie.com
aiq-in.yolo.movie
sony-prod.actioniq.mr-in.com

Other certificates including the domain name 65.movie

(limited to 100 certificates)
microsites.sonypictures.com
edge-micros1.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
edge-micros1.sonypictures.com
stage-microsites.sonypictures.com
sony-prod.actioniq.mr-in.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
sony-prod.actioniq.mr-in.com
edge-micros1.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
microsites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
sony-prod.actioniq.mr-in.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
sony-prod.actioniq.mr-in.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
edge-micros1.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
sony-prod.actioniq.mr-in.com
microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
sony-prod.actioniq.mr-in.com
edge-micros1.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
sony-prod.actioniq.mr-in.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
sony-prod.actioniq.mr-in.com
edge-micros1.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
sony-prod.actioniq.mr-in.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
sony-prod.actioniq.mr-in.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
microsites.sonypictures.com
edge-micros1.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
sony-prod.actioniq.mr-in.com
edge-micros1.sonypictures.com
stage-microsites.sonypictures.com
aiq-in.65.movie
microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
sony-prod.actioniq.mr-in.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
microsites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
edge-micros1.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
edge-micros1.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com

Certificate

The complete raw certificate details for aiq-in.65.movie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E+4wVy7dyFVjnyNBm1W
5n4MgjUVsasCyn8RdsZdo5hQU7uWi6MZh1qAORvJo/lvv27XMPRLim59nYJhB9hN
B5zncgqcXdNitUqUsFShdwUy3VctEl13p45839C+ILHsc3l/4e11jO/TM2/+shMe
x5osCk3TEQnTBFpbN50NjKNfFVp1/r+J1D0AbmpzpFeQiTUqPRpNIku2pGdZ9ONc
mfu765teSHPDEV7qok//pv1+Hk0V7C4+4u9WRuUnDa8fcArbb4s63k10kaACMR7M
bQSiMDmVFkFFTuU+pAZOQJUJ4CetDo8e06fkafP2QqGfR5IYt0RuEwY3gXIHiaaW
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263065484212311251624973791722986503786237
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 14:58:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-23 14:58:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aiq-in.65.movie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27306786108359266159809059654554832422142519213244496562594383549075689309789910437108184232582889259349270254677593983008205527137724916465791764885000110686054329922638602099151709719544711253313239977133470837300077173345438133802123953844362890384741378226274200373861743645851428252495614761921986217518706457513757684458407756412709725714392124665252460827963031546836285051309447045819654168230463128600977462751070721888773522049466905859766694146201315106675385233205175946139392461603038054969734202233761955903756723534119960180965792776508155660403819750738387880614443627164771668341060077538234016896561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7e1ab2fb1960dec5820b443f812d9d76af83f41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (990 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.65.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.acrossthespiderversemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.alphauniverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.anyonebutyou.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.badboys.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.biggeorgeforeman.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.butcherscrossingmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.cultkillermovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.dumbmoney.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.electronics.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.equalizer.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.flymetothemoon.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.granturismo.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.here-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.insidious.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.itendswithus.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.jeopardy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.kotzmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.kravenmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.loveagain.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.madameweb.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.napoleon.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.nohardfeelingsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.sonycine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.sonypictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.tarotmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.thanksgiving.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.thebookofclarence.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.thegarfield-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.themachine.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.thepopes-exorcist.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.venom.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.welcometohelios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.wheeloffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.wolfsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq-in.yolo.movie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony-prod.actioniq.mr-in.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000190501e5b1800000403004630440220328fbdfce10093b5b1d070f7b3ff8616dd876223d51d3961d346bdf06cdd2e9402205bc2a2c21231fddd994a3cbc1ea96c5a809288b79d25d913163ee299ff58840400750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000190501e5b1b0000040300463044022032618bf6ee85413f388eaa271bdf9a430372bd3199c7c5a0a23e2945809377c70220102ce754f38656d2ec47add817169b9b61e1e9d068d108b8906f6d58b97f1810
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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