harmonyranchiowa.org

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 36:29:d8:88:7a:32:cb:55:d4:0a:4e:31:32:7e:48:87 was issued on by ZeroSSL.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=harmonyranchiowa.org

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): 36:29:d8:88:7a:32:cb:55:d4:0a:4e:31:32:7e:48:87
Serial Number (int): 71995587756908453483170026238355851399
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: bb:d0:a1:f9:c4:76:3a:93:88:8c:a5:5b:69:df:1f:51:c8:cf:1b:b4
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): 4e:f4:ce:62:4a:d8:5d:95:2c:9f:4f:91:05:a6:bd:04:29:a5:4b:20
Fingerprint (sha256): 65:30:bd:27:54:64:45:3b:e0:30:66:50:ab:b4:38:83:93:c5:22:a8:5f:48:c1:8e:50:3b:4a:95:94:39:d9:04

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate harmonyranchiowa.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for harmonyranchiowa.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

harmonyranchiowa.org
www.harmonyranchiowa.org

Other certificates including the domain name harmonyranchiowa.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for harmonyranchiowa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHkDCCBXigAwIBAgIQNinYiHoyy1XUCk4xMn5IhzANBgkqhkiG9w0BAQwFADBL
MQswCQYDVQQGEwJBVDEQMA4GA1UEChMHWmVyb1NTTDEqMCgGA1UEAxMhWmVyb1NT
TCBSU0EgRG9tYWluIFNlY3VyZSBTaXRlIENBMB4XDTIzMTIwMjAwMDAwMFoXDTI0
MDMwMTIzNTk1OVowHzEdMBsGA1UEAxMUaGFybW9ueXJhbmNoaW93YS5vcmcwggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCYM3nLSlbXvFheaG7N+ZAk49lT
H5M4PGzcj6E4EX0zEykoOnf9XhCxmllBFCgaCc6iIeyDrbIJRFJ/16q7WdZvZ/cR
1OwXL5OI7oHHTPpLCCHtFTapKQUghfGltHQi2A9PqpyaA3M/YdctiJYZCzrDYC8+
/uvq63DVKydt/ZwzEWYYkNjBVf7ZxbVjqQPp8zHEy/tFPIhgUz+6ApMzhtnJZbKi
ReThqPyKMA/KL3vDQXsN0gWI9RjnsmlAO4cxPUql+IXlHwIggub4DuVmVj1WANKa
wsNQ6M6GdROAmvYzugZEYxfI/kyNr+RScQzNJ6Uv5VgkCJfz7NejA4CZtXc/+U1J
gZJuXNvMNL69KMUe5STtciiZTVdeabiFtU5R7SV+haMPEWKmTlNAKwnGuGG/XeRA
vN4U5uYjtxO57DhgqWoP66jRiMqpPRghpe2MHPV3sMlJfv99H+dQr0dzrTcLnGaz
O6w9wc7jpT3FYcLfdP6f/2tAaASDaCd+22Gus+8iHzEqOv1wUoirFbb7fHHgOKR9
ihZGH1HBbugFoaa2LdMzcz4LZdFQ4omyq9u4VJ7FLTvSE0SePlZWlxKQ7t5fXMoL
+I0NolBHvUNjDkdCdpPuH2WpQfP52ttz6ssb0wNjwwsTKotHoLaXZYn0qGd+wwAt
4RBa6Qi+4/ZeEfP78QIDAQABo4ICmjCCApYwHwYDVR0jBBgwFoAUyNl4aKLZGWjV
PXLeXwo+3LWGhqYwHQYDVR0OBBYEFLvQofnEdjqTiIylW2nfH1HIzxu0MA4GA1Ud
DwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgJOMCUwIwYIKwYBBQUHAgEW
F2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECATCBiAYIKwYBBQUHAQEE
fDB6MEsGCCsGAQUFBzAChj9odHRwOi8vemVyb3NzbC5jcnQuc2VjdGlnby5jb20v
WmVyb1NTTFJTQURvbWFpblNlY3VyZVNpdGVDQS5jcnQwKwYIKwYBBQUHMAGGH2h0
dHA6Ly96ZXJvc3NsLm9jc3Auc2VjdGlnby5jb20wggEEBgorBgEEAdZ5AgQCBIH1
BIHyAPAAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYwoimts
AAAEAwBHMEUCIHXgM94wqjWxhKdxyjW9Dq4PNFr0AObUE+oi8G7MqSt+AiEA+pN2
Qx81sPYJ613ua5oL2zWlJgjV6Q/oHqhd8886j7sAdgA7U3d1Pi25gE6LMFsG/kA7
Z9hPw/THvQANLXJv4frUFwAAAYwoimvpAAAEAwBHMEUCIQC4fTcfD4GzD27xDkMK
i6Ku/zKgmzEC75Ygjh8q1XFyGwIgbIjRRpZKzg3a7seyl94ypPmzyY+SxzuZ3jtr
TbX93OcwOQYDVR0RBDIwMIIUaGFybW9ueXJhbmNoaW93YS5vcmeCGHd3dy5oYXJt
b255cmFuY2hpb3dhLm9yZzANBgkqhkiG9w0BAQwFAAOCAgEAciPVjekPxznycBk+
O2om2uteBYwcxYemEK+BYa7xtkGp6EqdVkXzanmR9NhFN2hBqbfk1fjsiKAeXdvj
pCI3frDMQPPA3jDXytcMeqDT+570wU642IxrB5YWHmQd1WMmyOZBTfblLdfGAfrI
x3wehiJdT5V3O2VACXu0wtKyeQF9UlK6vFYRqcXKluDAzMDHrQNeR/zc++vUQE/t
nkz8oxsZY77HMmsKOlwThvwn5Xy44NQz69ZX37OacdiXw+E6bsl9O0JyECxeZyeS
HuV3urNyjTKPqcHFlTf75PWcFQNrbohVzy9xealVXkK1NcMicNtmQdjdcl/W23/8
ikfl5HBSw6ppIlbWCnUz2aKfEXTSfOJk90QBDxwgMsXNkGMityEeJH8GgpA2G8ya
ERPN5rfTLFvjZp1CjlK3MjMX+vGuaPVTZl3HXWvkhGpU0vSt9YK1m9/hDgJa5gdK
0Pb9xHcjb8g73/7sBSHeeujiTtCm0b9cYfLlkIVCAz/Ph4HXrKriZ7t3tFkZc2FP
K5gqExiHjyBVlSAM11DseAnN0L+jujxzd/WpUdURJ5DWlydncwVeY8OBpfg4eWni
3U48umiJAfXZIqDWyosJtEBvd2yVn9D7j9aarxsWDjdENNwCEgVhqB00dBrYY0mM
Myche2wLVhO2jpvYGSxPg2F0vBg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmDN5y0pW17xYXmhuzfmQ
JOPZUx+TODxs3I+hOBF9MxMpKDp3/V4QsZpZQRQoGgnOoiHsg62yCURSf9equ1nW
b2f3EdTsFy+TiO6Bx0z6Swgh7RU2qSkFIIXxpbR0ItgPT6qcmgNzP2HXLYiWGQs6
w2AvPv7r6utw1Ssnbf2cMxFmGJDYwVX+2cW1Y6kD6fMxxMv7RTyIYFM/ugKTM4bZ
yWWyokXk4aj8ijAPyi97w0F7DdIFiPUY57JpQDuHMT1KpfiF5R8CIILm+A7lZlY9
VgDSmsLDUOjOhnUTgJr2M7oGRGMXyP5Mja/kUnEMzSelL+VYJAiX8+zXowOAmbV3
P/lNSYGSblzbzDS+vSjFHuUk7XIomU1XXmm4hbVOUe0lfoWjDxFipk5TQCsJxrhh
v13kQLzeFObmI7cTuew4YKlqD+uo0YjKqT0YIaXtjBz1d7DJSX7/fR/nUK9Hc603
C5xmszusPcHO46U9xWHC33T+n/9rQGgEg2gnftthrrPvIh8xKjr9cFKIqxW2+3xx
4DikfYoWRh9RwW7oBaGmti3TM3M+C2XRUOKJsqvbuFSexS070hNEnj5WVpcSkO7e
X1zKC/iNDaJQR71DYw5HQnaT7h9lqUHz+drbc+rLG9MDY8MLEyqLR6C2l2WJ9Khn
fsMALeEQWukIvuP2XhHz+/ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 71995587756908453483170026238355851399
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'harmonyranchiowa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 620926221665814170574337485985965749209093619274339228720905470373525576970526703127337343214323657155290287557857946478116526819799270357719868951154854696759724649507228768674657463318724130687923956270448141811777037976281603145415539860516441032485329108658902757993237003012643773597556500479286508366162423646105412813077150513257968071764213808448075011806543343002816074460782733274386614198392813984226626066194214701855560787888026594687044071675814843939680943964360510627344940808333198942268558916094446297015326896865694673704338742140974375567022535337881606447555054534132203083520403444251991417302652741273452601128816619194520509976701469821568486766298241942673745139335813763999568874817345319566192986829197027215829461117557526594767983900364543805715469556333120150957972352176575589025333908517234704563033757665665823853816296204227298567867762516841012202521791516233327677438358431672470152961100901914294190564844004780160784855119006619577674050001666535745358196248770547809044410917161515890830992309376956470975679262926701349921586291702795430392278522375033488314476301182158705520981107955746883607348853853514094362132668199551129485768544690518940698547798422429151001117206434373820131847699441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbd0a1f9c4763a93888ca55b69df1f51c8cf1bb4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c288a6b6c0000040300473045022075e033de30aa35b184a771ca35bd0eae0f345af400e6d413ea22f06ecca92b7e022100fa9376431f35b0f609eb5dee6b9a0bdb35a52608d5e90fe81ea85df3cf3a8fbb0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c288a6be90000040300473045022100b87d371f0f81b30f6ef10e430a8ba2aeff32a09b3102ef96208e1f2ad571721b02206c88d146964ace0ddaeec7b297de32a4f9b3c98f92c73b99de3b6b4db5fddce7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmonyranchiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harmonyranchiowa.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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