intradaten.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:17:b9:15:b2:a6:82:08:a5:83:15:6c:2b:56:c4:4c:94:2c was issued on by Let's Encrypt.

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=intradaten.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:b9:15:b2:a6:82:08:a5:83:15:6c:2b:56:c4:4c:94:2c
Serial Number (int): 269409372075377591199053802007781429777452
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:ce:2c:2f:c3:aa:c6:68:78:d9:47:d6:34:09:4f:f3:09:f8:ae:00
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dc:32:a0:03:c3:09:e7:fe:d7:ec:dc:42:a4:73:c1:db:79:23:79:13
Fingerprint (sha256): 60:2c:8a:e1:4e:af:8d:66:c5:67:2a:6b:d2:ad:3b:67:7d:20:df:b4:21:83:df:5c:d0:0f:24:43:a1:6d:fd:5d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate intradaten.ch

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intradaten.ch

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.angst-depressiv.de
*.avs-summary.de
*.begovic.net
*.betreuungundhilfe.de
*.danielhaese.de
*.ellis-kunst.de
*.ferienwohnung-lenningen.de
*.fladungen-webcam.de
*.gemina-global.com
*.ramassadeur.com
*.rockadog.de
*.societytechnik.de
angst-depressiv.de
ares-grundbesitz.de
avs-summary.de
begovic.net
betreuungundhilfe.de
chp.de.com
citrix.icekey.org
danielhaese.de
ellis-kunst.de
ferienwohnung-lenningen.de
fladungen-webcam.de
gemina-global.com
hub.dev.kilianrei.at
intradaten.ch
ramassadeur.com
rockadog.de
simson-project.com
societytechnik.de
www.christianvr.de
www.heizpilz24.de
www.hypnobirthing-vinschgau.it
www.karlbeck.at
www.pay.schoolshare.de
www.ueberleben-in-der-krise.de

Other certificates including the domain name intradaten.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for intradaten.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG3zCCBcegAwIBAgISAxe5FbKmggilgxVsK1bETJQsMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTMwOTE5MTNaFw0yNDA0MTIwOTE5MTJaMBgxFjAUBgNVBAMT
DWludHJhZGF0ZW4uY2gwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAATC+EMbjBem
7qcFFtAWJIONzwN4TxF76QBnr6J3R+J3iBfhnnl1qgCdmTnnYkvnRoJcHzS1U1Vr
JjhTIeOIR51+o4IE0jCCBM4wDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRdziwvw6rG
aHjZR9Y0CU/zCfiuADAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBV
BggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9y
ZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCAtoGA1UdEQSC
AtEwggLNghQqLmFuZ3N0LWRlcHJlc3Npdi5kZYIQKi5hdnMtc3VtbWFyeS5kZYIN
Ki5iZWdvdmljLm5ldIIWKi5iZXRyZXV1bmd1bmRoaWxmZS5kZYIQKi5kYW5pZWxo
YWVzZS5kZYIQKi5lbGxpcy1rdW5zdC5kZYIcKi5mZXJpZW53b2hudW5nLWxlbm5p
bmdlbi5kZYIVKi5mbGFkdW5nZW4td2ViY2FtLmRlghMqLmdlbWluYS1nbG9iYWwu
Y29tghEqLnJhbWFzc2FkZXVyLmNvbYINKi5yb2NrYWRvZy5kZYITKi5zb2NpZXR5
dGVjaG5pay5kZYISYW5nc3QtZGVwcmVzc2l2LmRlghNhcmVzLWdydW5kYmVzaXR6
LmRlgg5hdnMtc3VtbWFyeS5kZYILYmVnb3ZpYy5uZXSCFGJldHJldXVuZ3VuZGhp
bGZlLmRlggpjaHAuZGUuY29tghFjaXRyaXguaWNla2V5Lm9yZ4IOZGFuaWVsaGFl
c2UuZGWCDmVsbGlzLWt1bnN0LmRlghpmZXJpZW53b2hudW5nLWxlbm5pbmdlbi5k
ZYITZmxhZHVuZ2VuLXdlYmNhbS5kZYIRZ2VtaW5hLWdsb2JhbC5jb22CFGh1Yi5k
ZXYua2lsaWFucmVpLmF0gg1pbnRyYWRhdGVuLmNogg9yYW1hc3NhZGV1ci5jb22C
C3JvY2thZG9nLmRlghJzaW1zb24tcHJvamVjdC5jb22CEXNvY2lldHl0ZWNobmlr
LmRlghJ3d3cuY2hyaXN0aWFudnIuZGWCEXd3dy5oZWl6cGlsejI0LmRlgh53d3cu
aHlwbm9iaXJ0aGluZy12aW5zY2hnYXUuaXSCD3d3dy5rYXJsYmVjay5hdIIWd3d3
LnBheS5zY2hvb2xzaGFyZS5kZYIed3d3LnVlYmVybGViZW4taW4tZGVyLWtyaXNl
LmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv
AHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGNAlUwKQAABAMA
RjBEAiA0Qk0JrnNViXRL8eu4paeJgX03h0pZKDuQKvMw6yPfTwIgQsGlOZ2FQvtv
LSDq1p3oNMUS22YAxdg84+P2OLxcqmoAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/TH
vQANLXJv4frUFwAAAY0CVTFaAAAEAwBHMEUCIGHjerRGpc1DAACE7EOasadLhpxV
/b7k3nTMCPnB/t9xAiEAwz1CHMOfiKpguLi4JCfLr5LXAznNptJrYlikvbuFrsww
DQYJKoZIhvcNAQELBQADggEBAKTrIFMFT7BK61FjV/yBQVufqxFLNDhUU1IRWk57
VdgKKVtEmZX+ZkFEgicYqaMT7YlKIaTic5JHNXR/0TIqP5GXeSr9Ra6EkpAws/6I
lTG6WAMJjtkt9OCFQwydTpfrwv2OHpENHa4Rh0ZGvGz1JRcOP8XRuhvEfWGrJ1kI
R1reniLvoZ0/jQylwXa4xT0hXVfjMlWCKbjEUmhPK2gibPa7c3zFYa2LFDRmMKdw
oUp2PgIWGoE8hwm6r6zfIMklsa0okSIWUvk9Yic0x1t98OrnthCy3EKiBOFDLL1L
1FQ3vK5Q1ev9c24NzBoU7BVt34Ih4AV2EQGp4IWQvaCoL9o=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEwvhDG4wXpu6nBRbQFiSDjc8DeE8R
e+kAZ6+id0fid4gX4Z55daoAnZk552JL50aCXB80tVNVayY4UyHjiEedfg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269409372075377591199053802007781429777452
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 09:19:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 09:19:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intradaten.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004c2f8431b8c17a6eea70516d01624838dcf03784f117be90067afa27747e2778817e19e7975aa009d9939e7624be746825c1f34b553556b26385321e388479d7e
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5dce2c2fc3aac66878d947d634094ff309f8ae00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (721 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angst-depressiv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avs-summary.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.begovic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betreuungundhilfe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danielhaese.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ellis-kunst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ferienwohnung-lenningen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fladungen-webcam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemina-global.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ramassadeur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rockadog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.societytechnik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angst-depressiv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ares-grundbesitz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avs-summary.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'begovic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betreuungundhilfe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chp.de.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix.icekey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danielhaese.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellis-kunst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferienwohnung-lenningen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fladungen-webcam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemina-global.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.dev.kilianrei.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intradaten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramassadeur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockadog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simson-project.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'societytechnik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christianvr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heizpilz24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hypnobirthing-vinschgau.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karlbeck.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pay.schoolshare.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ueberleben-in-der-krise.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d025530290000040300463044022034424d09ae735589744bf1ebb8a5a789817d37874a59283b902af330eb23df4f022042c1a5399d8542fb6f2d20ead69de834c512db6600c5d83ce3e3f638bc5caa6a0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d0255315a0000040300473045022061e37ab446a5cd43000084ec439ab1a74b869c55fdbee4de74cc08f9c1fedf71022100c33d421cc39f88aa60b8b8b82427cbaf92d70339cda6d26b6258a4bdbb85aecc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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