www.gttvietnam.com

Issued by R3

About this certificate

This digital certificate with serial number 03:55:7a:8b:57:62:10:48:94:40:2f:8c:34:88:4e:03:00:25 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.gttvietnam.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:55:7a:8b:57:62:10:48:94:40:2f:8c:34:88:4e:03:00:25
Serial Number (int): 290423748300648640358796813338222046412837
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:a1:93:13:79:20:f2:f4:54:62:2b:c7:76:6e:56:75:a4:be:a7:4f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f4:5a:df:b6:a8:c3:f7:9c:b1:24:00:40:41:97:d3:06:8f:6d:48:9c
Fingerprint (sha256): 60:8e:8d:8b:1a:ba:19:fe:48:13:9f:1c:54:91:6a:89:d8:fc:13:2b:71:b8:1f:37:2e:d2:0c:0d:b4:74:1c:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.gttvietnam.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gttvietnam.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acquyleopard.duy7.name.vn
duanhimlam.duy7.name.vn
gttvietnam.com
gttvietnam.duy7.name.vn
ibooking.duy7.name.vn
mail.nangluongtaitao.vn
maytudongnganhmay.duy7.name.vn
nangluongtaitao.duy7.name.vn
nangluongtaitao.vn
pallethoanghai2.duy7.name.vn
stroman.duy7.name.vn
sunmaxx.com.vn
sunmaxx.duy7.name.vn
www.acquyleopard.duy7.name.vn
www.duanhimlam.duy7.name.vn
www.gttvietnam.com
www.gttvietnam.duy7.name.vn
www.ibooking.duy7.name.vn
www.maytudongnganhmay.duy7.name.vn
www.nangluongtaitao.duy7.name.vn
www.nangluongtaitao.vn
www.pallethoanghai2.duy7.name.vn
www.stroman.duy7.name.vn
www.sunmaxx.duy7.name.vn

Other certificates including the domain name gttvietnam.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.gttvietnam.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHWDCCBkCgAwIBAgISA1V6i1diEEiUQC+MNIhOAwAlMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMjQxMzU2NThaFw0yNDA0MjMxMzU2NTdaMB0xGzAZBgNVBAMT
End3dy5ndHR2aWV0bmFtLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMbYXpwXAxlm0qBLBbG4t14smcDLx6iqZmP+nqQDgCYgyow3a3yEF2zXaXcq
vvqczDpCrav6Dot8Z1KD0jF8IrTeDQY7xfPoJMA0rZ3umQ3Htwtcu74RxemepxmQ
3RpMEREBEj4E6aJxYa2y4ApSQG+4IUjT4/qXJo34kskkDZud0xR2UYDnluqim3D/
BpTeliGyorXFpKIOenQ+esDkrI5WWu7G1ECOCVVFGZsb5EggpygNANtdTM+stNQQ
seyg3Vli7NM4/UC3BSHw2O+HPIyI5jwNS/rYenC3MXzQsqn1f4kviBigb3tRxKlf
8jbk7I2jEhiTj2d1YPC67880XgUCAwEAAaOCBHswggR3MA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUWqGTE3kg8vRUYivHdm5WdaS+p08wHwYDVR0jBBgwFoAUFC6zF7dY
VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw
Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy
Lm9yZy8wggKCBgNVHREEggJ5MIICdYIZYWNxdXlsZW9wYXJkLmR1eTcubmFtZS52
boIXZHVhbmhpbWxhbS5kdXk3Lm5hbWUudm6CDmd0dHZpZXRuYW0uY29tghdndHR2
aWV0bmFtLmR1eTcubmFtZS52boIVaWJvb2tpbmcuZHV5Ny5uYW1lLnZughdtYWls
Lm5hbmdsdW9uZ3RhaXRhby52boIebWF5dHVkb25nbmdhbmhtYXkuZHV5Ny5uYW1l
LnZughxuYW5nbHVvbmd0YWl0YW8uZHV5Ny5uYW1lLnZughJuYW5nbHVvbmd0YWl0
YW8udm6CHHBhbGxldGhvYW5naGFpMi5kdXk3Lm5hbWUudm6CFHN0cm9tYW4uZHV5
Ny5uYW1lLnZugg5zdW5tYXh4LmNvbS52boIUc3VubWF4eC5kdXk3Lm5hbWUudm6C
HXd3dy5hY3F1eWxlb3BhcmQuZHV5Ny5uYW1lLnZught3d3cuZHVhbmhpbWxhbS5k
dXk3Lm5hbWUudm6CEnd3dy5ndHR2aWV0bmFtLmNvbYIbd3d3Lmd0dHZpZXRuYW0u
ZHV5Ny5uYW1lLnZughl3d3cuaWJvb2tpbmcuZHV5Ny5uYW1lLnZugiJ3d3cubWF5
dHVkb25nbmdhbmhtYXkuZHV5Ny5uYW1lLnZugiB3d3cubmFuZ2x1b25ndGFpdGFv
LmR1eTcubmFtZS52boIWd3d3Lm5hbmdsdW9uZ3RhaXRhby52boIgd3d3LnBhbGxl
dGhvYW5naGFpMi5kdXk3Lm5hbWUudm6CGHd3dy5zdHJvbWFuLmR1eTcubmFtZS52
boIYd3d3LnN1bm1heHguZHV5Ny5uYW1lLnZuMBMGA1UdIAQMMAowCAYGZ4EMAQIB
MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcAO1N3dT4tuYBOizBbBv5AO2fYT8P0
x70ADS1yb+H61BcAAAGNO/lumgAABAMASDBGAiEAy+PfmOYcC5OtanmN66z3xSOi
uUegw5dET2qlm6sggtUCIQD8thKpqU1elgmD8aKavuq4CVGAXoriutiJfbqErYHA
PwB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjTv5bqgAAAQD
AEYwRAIgbIdpntEeTNpfZeZXqkvMCQOcwpQaqmT7+UPwySqgm3ACICZJeILSDY88
PfcTRtO5PJ0TCGdsge6WadNL87mLgY6VMA0GCSqGSIb3DQEBCwUAA4IBAQBB91p3
r/gXhXRS70xMMyj4B84BsrFRqwG0JDpkfmysL4kvkuvBJwBTcY5dnZgnJo7gZZ2L
Dg1PflPy3FUEfP7KzbOxaK9VmSU7Gq5la4O1E8DN/NTvJ/yqNu9Qt4B1539zJ1D+
p9FFbEodFPUZ3EVBDPbTuKq6id9kLjpNpLeMEgT7P7YBLEpVHrvHSx/Bt1YQ+P3y
gkz6pmzgTfAWocixmOMCUYpScLAnc6VsrDqqAFk+7o1J1IhMit0xcrntREn7QG8t
awi83eDghE04WwL7TwOp0DRYRoKlhpSnYzuDAjFw+IKnygZVeAGhOij/4z/pvnMP
HXqLqZRCrY/DXFih
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxthenBcDGWbSoEsFsbi3
XiyZwMvHqKpmY/6epAOAJiDKjDdrfIQXbNdpdyq++pzMOkKtq/oOi3xnUoPSMXwi
tN4NBjvF8+gkwDStne6ZDce3C1y7vhHF6Z6nGZDdGkwREQESPgTponFhrbLgClJA
b7ghSNPj+pcmjfiSySQNm53TFHZRgOeW6qKbcP8GlN6WIbKitcWkog56dD56wOSs
jlZa7sbUQI4JVUUZmxvkSCCnKA0A211Mz6y01BCx7KDdWWLs0zj9QLcFIfDY74c8
jIjmPA1L+th6cLcxfNCyqfV/iS+IGKBve1HEqV/yNuTsjaMSGJOPZ3Vg8LrvzzRe
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290423748300648640358796813338222046412837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 13:56:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 13:56:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gttvietnam.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25101880194480534941986358463362680621287717307311471826230810176275308501732137600789605553947881407012465933086876436474997765435575901627917007376614061032447513306933903628387627365246859853498844262809663887120378847879527702792744895765574364310285192856381021706596977204776204751743681022336854925501256299133109155096636216847417870472302365117477999119441492632281286346636903739992093798599994484255897052167718594716736772149414136667253679404533012920606116516100094518603181669176134134814688613810902637043761935938391625357563896581336878026627044492225471001334099434275899330012276865975349008424453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5aa193137920f2f454622bc7766e5675a4bea74f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (633 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquyleopard.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duanhimlam.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gttvietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gttvietnam.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibooking.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nangluongtaitao.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maytudongnganhmay.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nangluongtaitao.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nangluongtaitao.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pallethoanghai2.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stroman.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunmaxx.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunmaxx.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acquyleopard.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duanhimlam.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gttvietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gttvietnam.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibooking.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maytudongnganhmay.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nangluongtaitao.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nangluongtaitao.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pallethoanghai2.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stroman.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunmaxx.duy7.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d3bf96e9a0000040300483046022100cbe3df98e61c0b93ad6a798debacf7c523a2b947a0c397444f6aa59bab2082d5022100fcb612a9a94d5e960983f1a29abeeab80951805e8ae2bad8897dba84ad81c03f007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d3bf96ea8000004030046304402206c87699ed11e4cda5f65e657aa4bcc09039cc2941aaa64fbf943f0c92aa09b70022026497882d20d8f3c3df71346d3b93c9d1308676c81ee9669d34bf3b98b818e95
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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