www.nangluongtaitao.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:4b:0e:9f:31:82:a0:13:f5:cb:24:21:53:32:3c:46:f0:e9 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.nangluongtaitao.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4b:0e:9f:31:82:a0:13:f5:cb:24:21:53:32:3c:46:f0:e9
Serial Number (int): 286877471085679893997113667065828121964777
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:74:40:a8:23:41:d7:50:49:58:13:3e:09:f9:41:c8:9d:18:00:c3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bf:87:d4:66:8d:12:f4:96:47:56:30:34:f2:09:99:17:7b:ca:22:13
Fingerprint (sha256): 5f:2b:4b:14:df:0d:4a:73:83:d8:52:3c:9f:c2:03:e7:6e:c0:05:6c:12:ca:f1:12:e7:6b:98:98:37:01:01:44

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.nangluongtaitao.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nangluongtaitao.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acquyleopard.duy7.name.vn
duanhimlam.duy7.name.vn
gttvietnam.com
gttvietnam.duy7.name.vn
mail.nangluongtaitao.vn
maytudongnganhmay.duy7.name.vn
nangluongtaitao.duy7.name.vn
nangluongtaitao.vn
stroman.duy7.name.vn
thangmayitech.com
thangmayitech.duy7.name.vn
vitechbacninh.com
vitechbacninh.duy7.name.vn
www.acquyleopard.duy7.name.vn
www.duanhimlam.duy7.name.vn
www.gttvietnam.com
www.gttvietnam.duy7.name.vn
www.maytudongnganhmay.duy7.name.vn
www.nangluongtaitao.duy7.name.vn
www.nangluongtaitao.vn
www.stroman.duy7.name.vn
www.thangmayitech.com
www.thangmayitech.duy7.name.vn
www.vitechbacninh.duy7.name.vn

Other certificates including the domain name nangluongtaitao.vn

(limited to 100 certificates)
www.nangluongtaitao.vn
www.gttvietnam.com
hikorea.duy7.name.vn

Certificate

The complete raw certificate details for www.nangluongtaitao.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHXjCCBkagAwIBAgISA0sOnzGCoBP1yyQhUzI8RvDpMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMjUxNzU2MzhaFw0yNDA2MjMxNzU2MzdaMCExHzAdBgNVBAMT
Fnd3dy5uYW5nbHVvbmd0YWl0YW8udm4wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDwtRClJx6zXlTt0qKacYIICQzwbPDMQC3Y8gSjHaCq+QpJH6bTkJRD
fZEagmLpzFyw5TZBY1EI0Ejmq5JGcA3g/A27y5+sj1yuDJtP0wDEquh582shztk/
G18RTfXAy7uk919OblDO2Yst6rksI6jCBQSxWcDgP9kRztUKEExE/ymXBWdXcEWp
/1Z3u+74DDxgzA+FlXQUFNBReHgOChVZbjajoBdK47R2aSFQ47kmHq1Z6RlsKX1z
7sEX5iTV2OuAkZNnyPany07tgh83HRlcu9O9o0Oaf15aUQcJR8CVuGSIwF/UeqhW
kFaernBkfKBox03ENW0rFSkok5Bm/YZ3AgMBAAGjggR9MIIEeTAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFHl0QKgjQddQSVgTPgn5QcidGADDMB8GA1UdIwQYMBaAFBQu
sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV
aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s
ZW5jci5vcmcvMIIChQYDVR0RBIICfDCCAniCGWFjcXV5bGVvcGFyZC5kdXk3Lm5h
bWUudm6CF2R1YW5oaW1sYW0uZHV5Ny5uYW1lLnZugg5ndHR2aWV0bmFtLmNvbYIX
Z3R0dmlldG5hbS5kdXk3Lm5hbWUudm6CF21haWwubmFuZ2x1b25ndGFpdGFvLnZu
gh5tYXl0dWRvbmduZ2FuaG1heS5kdXk3Lm5hbWUudm6CHG5hbmdsdW9uZ3RhaXRh
by5kdXk3Lm5hbWUudm6CEm5hbmdsdW9uZ3RhaXRhby52boIUc3Ryb21hbi5kdXk3
Lm5hbWUudm6CEXRoYW5nbWF5aXRlY2guY29tghp0aGFuZ21heWl0ZWNoLmR1eTcu
bmFtZS52boIRdml0ZWNoYmFjbmluaC5jb22CGnZpdGVjaGJhY25pbmguZHV5Ny5u
YW1lLnZugh13d3cuYWNxdXlsZW9wYXJkLmR1eTcubmFtZS52boIbd3d3LmR1YW5o
aW1sYW0uZHV5Ny5uYW1lLnZughJ3d3cuZ3R0dmlldG5hbS5jb22CG3d3dy5ndHR2
aWV0bmFtLmR1eTcubmFtZS52boIid3d3Lm1heXR1ZG9uZ25nYW5obWF5LmR1eTcu
bmFtZS52boIgd3d3Lm5hbmdsdW9uZ3RhaXRhby5kdXk3Lm5hbWUudm6CFnd3dy5u
YW5nbHVvbmd0YWl0YW8udm6CGHd3dy5zdHJvbWFuLmR1eTcubmFtZS52boIVd3d3
LnRoYW5nbWF5aXRlY2guY29tgh53d3cudGhhbmdtYXlpdGVjaC5kdXk3Lm5hbWUu
dm6CHnd3dy52aXRlY2hiYWNuaW5oLmR1eTcubmFtZS52bjATBgNVHSAEDDAKMAgG
BmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ADtTd3U+LbmAToswWwb+
QDtn2E/D9Me9AA0tcm/h+tQXAAABjnb4xEUAAAQDAEcwRQIgDDbgd3x0kffoYFYL
t3BsgvhveEnyN3rIJwzfqNSAafoCIQDppaKfPRZVh9vI2/g18xCQMZdfzvFPsrfU
6U5X2t0+PAB1AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABjnb4
xFQAAAQDAEYwRAIgLXvb4UkcnKjszAzRb/VOBXbyNoXHXPgSV4LbSK0xpRoCIFhd
a+EcunsUnOckWJDYiGEObao7OjzEs3cSiOYbIOSKMA0GCSqGSIb3DQEBCwUAA4IB
AQBdfqgsoEutS/0nUOasoGM5Ads2I7ZQDrxvqky3OG05duK73VLabkqkto1YPY/a
S+t86ALSesx6FVwtYZIvJ4QDlpOuS2/OmhQMH8blAra333TgD3seOOOSVqpvJh/I
LM4x+aZW79GITSe2x79TA10Fb7zK2eM8DS3BjH0lnwXDXwF2b6GVbbRQb338pyTq
HwlLYTfXEvUFjMXYz+0xE9khTrMmMBo//lKAONDlpdFR7Mg2+kX5EjAZ4YvC2jAa
8UG5tumhfojcbTaDi2gugPSKUirrECabo8cFRGZsZ3kEXNs3BYKMfg3BplCXKSN5
Ml/OzHqirC/YiEL+zpr8tb3n
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LUQpSces15U7dKimnGC
CAkM8GzwzEAt2PIEox2gqvkKSR+m05CUQ32RGoJi6cxcsOU2QWNRCNBI5quSRnAN
4PwNu8ufrI9crgybT9MAxKroefNrIc7ZPxtfEU31wMu7pPdfTm5QztmLLeq5LCOo
wgUEsVnA4D/ZEc7VChBMRP8plwVnV3BFqf9Wd7vu+Aw8YMwPhZV0FBTQUXh4DgoV
WW42o6AXSuO0dmkhUOO5Jh6tWekZbCl9c+7BF+Yk1djrgJGTZ8j2p8tO7YIfNx0Z
XLvTvaNDmn9eWlEHCUfAlbhkiMBf1HqoVpBWnq5wZHygaMdNxDVtKxUpKJOQZv2G
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286877471085679893997113667065828121964777
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 17:56:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 17:56:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nangluongtaitao.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30386479680984833407454415482001579270025230694453586400294984373302557583411623702254267636754534337361074617387511652826598079940914298319278811986555079767632998985971772486568211338447263363668354094726093835497581682229748233992276433352061615820123218484257361943967491378295959186272655867314736283326308036206835227011816899894236445452647241995319331036910933052024148607431095248650580522820861095352421021130862181270467004897871191272099312328471294726588817749029378436525299520692064577347271414110379975910438533378890934605748946057520695483843806414165994821577685769897221896327480527470410327754359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							797440a82341d7504958133e09f941c89d1800c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (636 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquyleopard.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duanhimlam.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gttvietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gttvietnam.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nangluongtaitao.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maytudongnganhmay.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nangluongtaitao.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nangluongtaitao.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stroman.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thangmayitech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thangmayitech.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitechbacninh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitechbacninh.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acquyleopard.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duanhimlam.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gttvietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gttvietnam.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maytudongnganhmay.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nangluongtaitao.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nangluongtaitao.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stroman.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thangmayitech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thangmayitech.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitechbacninh.duy7.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e76f8c445000004030047304502200c36e0777c7491f7e860560bb7706c82f86f7849f2377ac8270cdfa8d48069fa022100e9a5a29f3d165587dbc8dbf835f3109031975fcef14fb2b7d4e94e57dadd3e3c007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e76f8c454000004030046304402202d7bdbe1491c9ca8eccc0cd16ff54e0576f23685c75cf8125782db48ad31a51a0220585d6be11cba7b149ce7245890d888610e6daa3b3a3cc4b3771288e61b20e48a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005d7ea82ca04bad4bfd2750e6aca0633901db3623b6500ebc6faa4cb7386d3976e2bbdd52da6e4aa4b68d583d8fda4beb7ce802d27acc7a155c2d61922f2784039693ae4b6fce9a140c1fc6e502b6b7df74e00f7b1e38e39256aa6f261fc82cce31f9a656efd1884d27b6c7bf53035d056fbccad9e33c0d2dc18c7d259f05c35f01766fa1956db4506f7dfca724ea1f094b6137d712f5058cc5d8cfed3113d9214eb326301a3ffe528038d0e5a5d151ecc836fa45f9123019e18bc2da301af141b9b6e9a17e88dc6d36838b682e80f48a522aeb10269ba3c70544666c6779045cdb3705828c7e0dc1a65097292379325fcecc7aa2ac2fd88842fece9afcb5bde7