equa.life

Issued by R3

About this certificate

This digital certificate with serial number 03:5a:8f:71:0e:88:fb:d6:1a:7e:ea:f8:c0:d2:95:82:0c:36 was issued on by Let's Encrypt.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=equa.life

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:5a:8f:71:0e:88:fb:d6:1a:7e:ea:f8:c0:d2:95:82:0c:36
Serial Number (int): 292152937445914163182699322325747181423670
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: be:4d:d2:51:7c:9c:42:1d:46:2f:49:91:e9:de:f5:53:d9:c5:07:b6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e8:6d:ff:8e:eb:3f:36:2c:10:51:5e:48:68:86:da:09:1d:2f:29:bc
Fingerprint (sha256): 5c:a3:ef:38:e0:30:c7:92:84:59:09:12:9f:01:b4:e6:50:e2:87:f5:df:2d:d1:28:35:a7:fc:fa:d5:4d:2b:65

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate equa.life

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for equa.life

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

021labs.net
allsaud.com
brownbearmeat.com
callouts.epik.support
carswin.com
casinoblogs.com
charlottemodularhomes.com
contentspawning.com
equa.life
gadonate.statenationals.us
ghostgrls.com
goldenbreaks.com
goodsdealer.com
haagservices.com
hawaiiancatering.com
homeandbuy.com
homeschoolingaroundtheworld.org
homeschoolpenpal.com
jawjointpain.com
kitchenbathtv.com
largepostcard.com
minibucky.com
montegoodell.com
onefaith.us
pearsonjmj.com
perdidokeyfl.com
perteller.net
poloforvip.com
www.buildingstopowerplants.com
www.canibuild.ai
zinnia.domains

Other certificates including the domain name equa.life

(limited to 100 certificates)
equa.life
equa.life
equa.life
equa.life
gpucharter.com.equa.life
equa.life
actionalert.ca
pepper-spray.co.za
voetbal.co.za
equa.life
equa.life
equa.life
equa.life
equa.life

Certificate

The complete raw certificate details for equa.life in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHHDCCBgSgAwIBAgISA1qPcQ6I+9Yafur4wNKVggw2MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMDEwNTAyMTRaFw0yNDA1MzAwNTAyMTNaMBQxEjAQBgNVBAMT
CWVxdWEubGlmZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANB0FRfY
z8GZ+aoWw42iz2OCREScF7CZuzNVkXXpv3D5CV5HDhMxAObYgEURKdpHKXmqPnaR
bi7KOK/NmTiDTc/rGSSQ5R05gqihIJF4f7cyXn9ubH7AUv7lJbQmDEZWoB75dQxG
hVWJHaDNXafmasQnAyT18LoP/4fGDhNbLbXZjRk6TauyrwtG5MuDRiLLkrw524ub
/wB7lfh/lmSoWqMwa594Z3h44niLaxlmJFK04llr3jSi5KEC4LRDs5o5LiZpXAOY
KkxTf3rVCqRIQ1Hu2brnpVrkzGAD4SKQH0DdoJ2/DGSfFBAwDfmbLz6xvTFh4DmP
j2u6YgNHvn9YS/kCAwEAAaOCBEgwggREMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
vk3SUXycQh1GL0mR6d71U9nFB7YwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v
nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s
ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggJQ
BgNVHREEggJHMIICQ4ILMDIxbGFicy5uZXSCC2FsbHNhdWQuY29tghFicm93bmJl
YXJtZWF0LmNvbYIVY2FsbG91dHMuZXBpay5zdXBwb3J0ggtjYXJzd2luLmNvbYIP
Y2FzaW5vYmxvZ3MuY29tghljaGFybG90dGVtb2R1bGFyaG9tZXMuY29tghNjb250
ZW50c3Bhd25pbmcuY29tggllcXVhLmxpZmWCGmdhZG9uYXRlLnN0YXRlbmF0aW9u
YWxzLnVzgg1naG9zdGdybHMuY29tghBnb2xkZW5icmVha3MuY29tgg9nb29kc2Rl
YWxlci5jb22CEGhhYWdzZXJ2aWNlcy5jb22CFGhhd2FpaWFuY2F0ZXJpbmcuY29t
gg5ob21lYW5kYnV5LmNvbYIfaG9tZXNjaG9vbGluZ2Fyb3VuZHRoZXdvcmxkLm9y
Z4IUaG9tZXNjaG9vbHBlbnBhbC5jb22CEGphd2pvaW50cGFpbi5jb22CEWtpdGNo
ZW5iYXRodHYuY29tghFsYXJnZXBvc3RjYXJkLmNvbYINbWluaWJ1Y2t5LmNvbYIQ
bW9udGVnb29kZWxsLmNvbYILb25lZmFpdGgudXOCDnBlYXJzb25qbWouY29tghBw
ZXJkaWRva2V5ZmwuY29tgg1wZXJ0ZWxsZXIubmV0gg5wb2xvZm9ydmlwLmNvbYIe
d3d3LmJ1aWxkaW5nc3RvcG93ZXJwbGFudHMuY29tghB3d3cuY2FuaWJ1aWxkLmFp
gg56aW5uaWEuZG9tYWluczATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB
1nkCBAIEgfQEgfEA7wB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz
AAABjfibKjAAAAQDAEcwRQIgNTpqYpio30PYkvTDgqsgKHx4WWGMLD0glsIc8fOP
C28CIQCg394AGRKoTKn2usFnzZ6PVhENJipkuJp+fADtJt7F4QB1ADtTd3U+LbmA
ToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjfibK/oAAAQDAEYwRAIgaV1scTMc
XpGaL5CG/xNSPppSojh+TIkynEzcUmFWUY0CIDXsT0XihyGU6EVoZLBUEQt+WZ7f
akXkFuMce85HHcXTMA0GCSqGSIb3DQEBCwUAA4IBAQB4RRFVpN3I/svucm6ZMu5F
9qmeAJw94wdAWReQrXNV6gXqB7UWCPXJP/PNFq03Ie2ZclouxoxgYe8L/VWVlq9Z
bgMlKKlFtJEWBSdOcMWX35zyhh3CZvmVmzaKylbM39Ude+q1R7Z8Hk41AhZS2ts2
jkeTLdfTcBsvr2pVIGuqx8JeZWE9QFlhB7Zq4j2u5/V/fkOv5eZd2DSM9ZYNFr0j
Vg5VQCCvZqBNdhgR9HXAe752g1xkJvPFfOQkhSakkNczbyK5uPAGl/PwOlolDDcZ
dlxsrZBlaLdOgqw0SFRA/dsG867j5TUK55ucMhmYc4Yp19tR/OGx/5mu46DnpGG0
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HQVF9jPwZn5qhbDjaLP
Y4JERJwXsJm7M1WRdem/cPkJXkcOEzEA5tiARREp2kcpeao+dpFuLso4r82ZOINN
z+sZJJDlHTmCqKEgkXh/tzJef25sfsBS/uUltCYMRlagHvl1DEaFVYkdoM1dp+Zq
xCcDJPXwug//h8YOE1sttdmNGTpNq7KvC0bky4NGIsuSvDnbi5v/AHuV+H+WZKha
ozBrn3hneHjieItrGWYkUrTiWWveNKLkoQLgtEOzmjkuJmlcA5gqTFN/etUKpEhD
Ue7ZuuelWuTMYAPhIpAfQN2gnb8MZJ8UEDAN+ZsvPrG9MWHgOY+Pa7piA0e+f1hL
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292152937445914163182699322325747181423670
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 05:02:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 05:02:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'equa.life'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26314809795428458613032821036540840450782503348146810573177446767692061742050088266194661695116544042103240500229633884327343871441524421057968725829207580466911216138383550061339259734587968617593832987724111458941801634051525257821054879662747197547883567608910524476794082864637398056430947822751617007794948076675991288991319395890835107737880253750262089356861762160044838926875463435323247789679535719672731776726671555769803991082075692364564061595183588009377392974247927388214324467314453630254719545216986931377059207246099905380435716427689757626663069755786678240051300233461771452459825849338457161747449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be4dd2517c9c421d462f4991e9def553d9c507b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (583 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '021labs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownbearmeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callouts.epik.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carswin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinoblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottemodularhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentspawning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equa.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadonate.statenationals.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghostgrls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenbreaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodsdealer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haagservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiiancatering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeandbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolingaroundtheworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolpenpal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jawjointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenbathtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'largepostcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minibucky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montegoodell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onefaith.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearsonjmj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perdidokeyfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perteller.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poloforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buildingstopowerplants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canibuild.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.domains'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018df89b2a3000000403004730450220353a6a6298a8df43d892f4c382ab20287c7859618c2c3d2096c21cf1f38f0b6f022100a0dfde001912a84ca9f6bac167cd9e8f56110d262a64b89a7e7c00ed26dec5e10075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018df89b2bfa00000403004630440220695d6c71331c5e919a2f9086ff13523e9a52a2387e4c89329c4cdc526156518d022035ec4f45e2872194e8456864b054110b7e599edf6a45e416e31c7bce471dc5d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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