advantx.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:97:2d:c9:75:38:85:3a:96:84:db:15:cc:a2:fd:81:6d:32 was issued on by Let's Encrypt.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=advantx.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:97:2d:c9:75:38:85:3a:96:84:db:15:cc:a2:fd:81:6d:32
Serial Number (int): 399892642421101514346952918126747497622834
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8f:97:d7:e7:7d:1d:8d:a0:3c:6a:68:7b:15:00:7b:16:de:c2:c8:37
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cb:5f:44:50:b5:bc:c2:69:16:2b:62:4b:43:b8:78:8e:19:52:4a:cb
Fingerprint (sha256): 58:9b:64:72:00:ca:ff:e5:eb:30:c2:cf:57:17:0e:0c:95:13:c6:61:60:49:ef:6e:01:82:aa:c3:d0:a3:78:cb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate advantx.ch

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for advantx.ch

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advantx.ch
amcag.ch
basago.ch
beat.bwise.ch
chicago.ztonline.ch
coaching.bolligernet.ch
compartout.ch
creditreform.bwise.ch
die-regiomesse.ch
dieregiomesse.ch
echtholz.bwise.ch
ergotherapie-interlaken.ch
fgad.ch
gestuet-staufberg.ch
gionantoniderungs.ch
gorbi.ztonline.ch
intranet.marquis.ch
krienshilft.ch
kulturhauswest.ch
loipe-kalthof-wiliberg.ch
mosaik-konolfingen.ch
praxisampelikanweg.ch
refina.ch
retriever.bwise.ch
schlager-abend.ch
schulungscenter.ch
silviamutter.ch
stbs.ch
stiftungpetersburg.org
streuplan.zto.ch
theautomationalliance.ch
theautomationalliance.com
theautomationalliance.de
theresegrossenbacher.ch
tiefelach.ch
tramondi.ch
www.advantx.ch
www.amcag.ch
www.basago.ch
www.coaching.bolligernet.ch
www.compartout.ch
www.die-regiomesse.ch
www.dieregiomesse.ch
www.ergotherapie-interlaken.ch
www.fgad.ch
www.gestuet-staufberg.ch
www.gionantoniderungs.ch
www.krienshilft.ch
www.kulturhauswest.ch
www.loipe-kalthof-wiliberg.ch
www.mosaik-konolfingen.ch
www.praxisampelikanweg.ch
www.refina.ch
www.schlager-abend.ch
www.schulungscenter.ch
www.silviamutter.ch
www.stbs.ch
www.stiftungpetersburg.org
www.theautomationalliance.ch
www.theautomationalliance.com
www.theautomationalliance.de
www.theresegrossenbacher.ch
www.tiefelach.ch
www.tramondi.ch

Other certificates including the domain name advantx.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for advantx.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399892642421101514346952918126747497622834
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-08 07:55:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 07:55:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'advantx.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4917463707304127119194788618216246654872069383801832803498748485905691688942061392024366063910121921092118137929228041018455851993058014443553177148290090735263682347236344351404602994618648868769647271689926965355001156449748354823872646719627729684610350524708506697405810080052583881373491947849273294028890787938941684767499947720436751651020295234423390330539797120336417062986396965875593251789969505150973134266768619022969331514954767056734678658748210094484190023922756716294469480729134178165998497381069500868459575924848792701274849024953915322894223658486167666865138424594134075516684392769578581178345015943617429589784010838496932634821054927644677797962992312786295840135758947045224434171057716861925108422098327521767326273161952675778728988993879470798272540361606255107205034612354179244650386039800702173087059810546764087116962643923297798897675033266574925910442437703946799933642308682560868071442811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f97d7e77d1d8da03c6a687b15007b16dec2c837
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1332 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantx.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amcag.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basago.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beat.bwise.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicago.ztonline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coaching.bolligernet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compartout.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditreform.bwise.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'die-regiomesse.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dieregiomesse.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echtholz.bwise.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ergotherapie-interlaken.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fgad.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestuet-staufberg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gionantoniderungs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorbi.ztonline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.marquis.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krienshilft.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kulturhauswest.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loipe-kalthof-wiliberg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosaik-konolfingen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxisampelikanweg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refina.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retriever.bwise.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schlager-abend.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schulungscenter.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silviamutter.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stiftungpetersburg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streuplan.zto.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theautomationalliance.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theautomationalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theautomationalliance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theresegrossenbacher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiefelach.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tramondi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantx.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amcag.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basago.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coaching.bolligernet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compartout.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.die-regiomesse.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dieregiomesse.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ergotherapie-interlaken.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fgad.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gestuet-staufberg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gionantoniderungs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krienshilft.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kulturhauswest.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loipe-kalthof-wiliberg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mosaik-konolfingen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxisampelikanweg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refina.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schlager-abend.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schulungscenter.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silviamutter.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stiftungpetersburg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theautomationalliance.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theautomationalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theautomationalliance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theresegrossenbacher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiefelach.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tramondi.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e1d46ae400000040300483046022100dccfc75ea688629fb354a73fc4b462128c71e5b2d534406cbe49345a155c06d9022100d2afbed22f6698f652b3ab2b38e5beadfeb4ac0c691f2f6f34ccf1a68d8a8458007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e1d46ae4f0000040300483046022100efe0930bfa833b932ae00c2d48725061cbde116c572f8bdfb8f8ed0f1f1a6c0d022100a3a290cd6426b6f48ed338c3345e2c777bdc76ee6d97c93b67023ccbf30b0436
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0021dc6a2ead55e77d682f317c95246d28bb3fe78c76d951c600fdf0d957cdad1f5bd64411309ae46bb3ee8d8951779425fc0eb384b7fd1d9a98204ec8167829fac5687dab78f3a2433cef013e1fcb21f9cbd4d82872c42254a785b554cb5b19a4266fe505b52f9bcb007b2d4bc4beda8b949c8841a8c3528814b6fe7f0b1158f9d5ff41f92e984fb706891cd2100ac8ee4be7429e3786be4883ec4ca936964010b250540d8f890632f8f95270bd8cd895837650e7b9a49667e287de95ddf9e8847e139e35e7a7d791101d7d330e967ab0853001a53e1b302a2b81c8e6253c3db2323db242ceb32ac6ef46deeefd8b8938e54d380138cb2995ec63540c0dccb0e1