bigbendnyc.com
Issued by R3
About this certificate
This digital certificate with serial number 04:b4:a2:6b:93:4b:45:0d:1e:f4:61:b8:cb:cb:c4:f9:cf:fc was issued on by Let's Encrypt.
With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bigbendnyc.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b4:a2:6b:93:4b:45:0d:1e:f4:61:b8:cb:cb:c4:f9:cf:fcSerial Number (int): 409915863271368623861127443936572509638652
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 5b:6c:a1:99:df:84:46:dd:24:a5:a8:2d:19:0e:dd:b3:f7:1b:50:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 9b:2b:d3:59:60:4b:ec:3e:31:99:d9:86:e6:97:1b:36:f0:8a:80:96
Fingerprint (sha256): 67:7e:e5:d5:61:53:33:2f:16:d8:c1:0c:77:9d:80:60:2a:f2:68:b0:83:13:b3:86:70:e8:b8:9d:15:88:a2:48
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate bigbendnyc.com
30
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bigbendnyc.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
1521kirkwoodave.com
bigbendnyc.com
bowfin-tech.com
caprie.com
dangge.com
decentralizedeth.com
deepstatemanifesting.com
domoi.com
metropolisroofing.com
phlebite.com
sex-katalog.com
shippingsave.com
sonxe.com
vioxi.com
www.1521kirkwoodave.com
www.bigbendnyc.com
www.bowfin-tech.com
www.caprie.com
www.dangge.com
www.decentralizedeth.com
www.deepstatemanifesting.com
www.domoi.com
www.metropolisroofing.com
www.phlebite.com
www.sex-katalog.com
www.shippingsave.com
www.sonxe.com
www.vioxi.com
www.xn--9dbaid6adh.com
xn--9dbaid6adh.com
bigbendnyc.com
bowfin-tech.com
caprie.com
dangge.com
decentralizedeth.com
deepstatemanifesting.com
domoi.com
metropolisroofing.com
phlebite.com
sex-katalog.com
shippingsave.com
sonxe.com
vioxi.com
www.1521kirkwoodave.com
www.bigbendnyc.com
www.bowfin-tech.com
www.caprie.com
www.dangge.com
www.decentralizedeth.com
www.deepstatemanifesting.com
www.domoi.com
www.metropolisroofing.com
www.phlebite.com
www.sex-katalog.com
www.shippingsave.com
www.sonxe.com
www.vioxi.com
www.xn--9dbaid6adh.com
xn--9dbaid6adh.com
Other certificates including the domain name bigbendnyc.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for bigbendnyc.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgISBLSia5NLRQ0e9GG4y8vE+c/8MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA3MTMxMTIwMjJaFw0yMzEwMTExMTIwMjFaMBkxFzAVBgNVBAMT DmJpZ2JlbmRueWMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA ri1RPSEbHdLEZT5VbNw6TDdyThY1hhrxxBX4uNwquXdpqXZdTNysnVyJnfFNtE+r 4wQL23/MPM8oHyuj96QG7N5Dgy07s8NAo/HWQkcm4Dz/c/NwXm/WbFt4c68xhWvt f9K3GtCxM/cBXwGythDdUmckJlhVlByW69JM8kV6IVKrSif/qsXDDg5ogbob2t9e aKA1QDpSk4W5a3e1wGln0iL9E0N8I1En0KbW+hnizi/yuUminOdmSHjwqrQdrdnQ mWBDZC2lCEm2ltFsHkJhcMvAnwayCSS8wxYK9OgmxGBCBuO/bo80jGaCBnvQ7D1W DcGtZhobqCrztWymnmr9jwIDAQABo4IENzCCBDMwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBRbbKGZ34RG3SSlqC0ZDt2z9xtQVTAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzCCAj8GA1UdEQSCAjYwggIyghMxNTIxa2lya3dvb2RhdmUuY29tgg5iaWdiZW5k bnljLmNvbYIPYm93ZmluLXRlY2guY29tggpjYXByaWUuY29tggpkYW5nZ2UuY29t ghRkZWNlbnRyYWxpemVkZXRoLmNvbYIYZGVlcHN0YXRlbWFuaWZlc3RpbmcuY29t gglkb21vaS5jb22CFW1ldHJvcG9saXNyb29maW5nLmNvbYIMcGhsZWJpdGUuY29t gg9zZXgta2F0YWxvZy5jb22CEHNoaXBwaW5nc2F2ZS5jb22CCXNvbnhlLmNvbYIJ dmlveGkuY29tghd3d3cuMTUyMWtpcmt3b29kYXZlLmNvbYISd3d3LmJpZ2JlbmRu eWMuY29tghN3d3cuYm93ZmluLXRlY2guY29tgg53d3cuY2FwcmllLmNvbYIOd3d3 LmRhbmdnZS5jb22CGHd3dy5kZWNlbnRyYWxpemVkZXRoLmNvbYIcd3d3LmRlZXBz dGF0ZW1hbmlmZXN0aW5nLmNvbYINd3d3LmRvbW9pLmNvbYIZd3d3Lm1ldHJvcG9s aXNyb29maW5nLmNvbYIQd3d3LnBobGViaXRlLmNvbYITd3d3LnNleC1rYXRhbG9n LmNvbYIUd3d3LnNoaXBwaW5nc2F2ZS5jb22CDXd3dy5zb254ZS5jb22CDXd3dy52 aW94aS5jb22CFnd3dy54bi0tOWRiYWlkNmFkaC5jb22CEnhuLS05ZGJhaWQ2YWRo LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA 7wB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiU8x+ugAAAQD AEcwRQIhAO9QZ1bt4utq2/CQiuYMl/y2nMGrzoag81nVQkiYsaahAiBLXg/TPpb7 Dflg9CTU7qhV9SmBAG/HDbtYs01eyYQ8OQB1AOg+0No+9QY1MudXKLyJa8kD08vR EWvs62nhd31tBr1uAAABiU8x+t8AAAQDAEYwRAIgEi0/rOmPXZiCX/c1EZq6SCac g5NsrGzHJsIJtUXJs0ACIEh1oA6Y/1OAWwnMa936z1ldwDqqiW00bNclmFmXgrtg MA0GCSqGSIb3DQEBCwUAA4IBAQBXf36/Ha+eQmOgyz+6RMpHodrJi4qcQD1gom3C 42jNGBoFpOMdReTBrUqMhPnU7/4le5LILtaivTtUEjwa/wxu4NeBBh0zIYuG53Wl bF36SYNqJ+36zNiwQetSTZ4aUUCBHat2USjlOM+pcxQA/3lkPYrc1kIpO/mxOp+Y F1Jdim65q2JVk+W7sy36jwp6ef0uahKtfysG+SQ/1boGspHVo49S+jNj6aASm0Jy 6FePTbRFIScRSiES3wCzh1FukZ96q9pJ6ephBxTNB4EeChQhVzhJWIYYvaoIGwp4 uEbteG9+6tGBZoabDquhrZlSAAcmwGWIpHyb3AI3vkEPuUMy -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri1RPSEbHdLEZT5VbNw6 TDdyThY1hhrxxBX4uNwquXdpqXZdTNysnVyJnfFNtE+r4wQL23/MPM8oHyuj96QG 7N5Dgy07s8NAo/HWQkcm4Dz/c/NwXm/WbFt4c68xhWvtf9K3GtCxM/cBXwGythDd UmckJlhVlByW69JM8kV6IVKrSif/qsXDDg5ogbob2t9eaKA1QDpSk4W5a3e1wGln 0iL9E0N8I1En0KbW+hnizi/yuUminOdmSHjwqrQdrdnQmWBDZC2lCEm2ltFsHkJh cMvAnwayCSS8wxYK9OgmxGBCBuO/bo80jGaCBnvQ7D1WDcGtZhobqCrztWymnmr9 jwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 409915863271368623861127443936572509638652 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 11:20:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 11:20:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bigbendnyc.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21987811876836852059482500349332776982240820168007125185417190812189697093205733500842277771247430631665489779651907069928626323296755564220005130915929245636325049946077544234359210146980676580964502471120565393109823909035841980666994895936402489805602676058249133150067740255761628449943490266810069545900534818788182655191461925853455240249664569203550730793356931823630081903367062292676859174275916828128317941495506238738056510463602971020722072372283187980896093019022180401458470236868120946754495176248427571727401729129622060473955337222297837867035995968434803943604956056107438404872860192180417090747791 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5b6ca199df8446dd24a5a82d190eddb3f71b5055 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (566 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1521kirkwoodave.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigbendnyc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowfin-tech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caprie.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dangge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decentralizedeth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepstatemanifesting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domoi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metropolisroofing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phlebite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sex-katalog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shippingsave.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonxe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vioxi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1521kirkwoodave.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigbendnyc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowfin-tech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caprie.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dangge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decentralizedeth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deepstatemanifesting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domoi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metropolisroofing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phlebite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sex-katalog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shippingsave.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonxe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vioxi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--9dbaid6adh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--9dbaid6adh.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001894f31fae80000040300473045022100ef506756ede2eb6adbf0908ae60c97fcb69cc1abce86a0f359d5424898b1a6a102204b5e0fd33e96fb0df960f424d4eea855f52981006fc70dbb58b34d5ec9843c39007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001894f31fadf00000403004630440220122d3face98f5d98825ff735119aba48269c83936cac6cc726c209b545c9b34002204875a00e98ff53805b09cc6bddfacf595dc03aaa896d346cd72598599782bb60 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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