sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:22:8e:b6:25:26:43:d1:11:3c:9b:3f:d7:e2:3a:83:d0:d0 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:22:8e:b6:25:26:43:d1:11:3c:9b:3f:d7:e2:3a:83:d0:d0
Serial Number (int): 360208440329263419490037469657980133953744
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: be:e8:4f:a1:24:48:ea:51:b2:aa:c9:8e:01:0f:8b:72:41:61:39:5e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 56:7d:f0:06:be:e1:d5:8a:d9:13:db:9a:52:c4:4d:5a:ab:d1:c5:7e
Fingerprint (sha256): 72:d5:fe:34:72:33:d0:5b:13:8e:87:83:19:26:b8:e0:d7:67:aa:3d:2c:01:44:b0:99:2b:3c:09:9f:f6:c0:72

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activeselwyn.org.nz
amctc.co.nz
athleticstauranga.co.nz
auroracollege.school.nz
autocc.co.nz
autocc.nz
automobile.cc
belfastbowlingclub.co.nz
bopblokartclub.nz
cambridgenetball.co.nz
charterisbayyachtclub.co.nz
communityconnect.nz
curling.nz
curling.org.nz
eastcitybmx.com
edit.co.nz
ellersliecricket.co.nz
fit4football.co.nz
gisbornethistle.co.nz
glenfieldrugby.co.nz
globalgames.co.nz
harbourrugby.co.nz
hbpbswimming.org.nz
hcmc.org.nz
houhorafishingclub.co.nz
kaierau.co.nz
karoricricket.co.nz
keithst.school.nz
kokkino.co.nz
ladiessocialcycling.co.nz
manawaturugby.co.nz
mytouch.co.nz
nzfpandp.co.nz
otakarofc.co.nz
pihaslsc.com
pukekohenetball.co.nz
rosebank.school.nz
secondtononebasketball.co.nz
sporty.org.nz
stampede.nz
supercrm.nz
swimotago.org
taranakirefs.co.nz
tewaipounamutouch.co.nz
trolleyads.co.nz
waipukuraugolfclub.co.nz
waiukunetball.org.nz
weirrosebowl.co.nz
whakatanehockey.co.nz
wpkgolf.co.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)
sporty.org.nz
www.sportycrm.com
sporty.org.nz
sporty.org.nz
www.giafc.co.nz
sportycrm.com
sporty.org.nz
fdmc.school.nz
arrowtownrugby.co.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AADHxvrnt0GUMqsRrHD
30+XuWD3GV/Sx++d0bFsti3GD8T3d5vqGDnOiFBnke59NBjjRF12Koo18LPETrse
A7NgItqzOGaShXqzWy8uybMTgEIFKr1mB+LY+aGN/iacVbsdhVeRk89PDCUZNGPs
R/+KqKG7Nga/n2XtoIv7GLG+8gMivhFiRO59V1+Fz8JyzMII6/wBlwystn0AxMSa
z6nxTtpgJR2B3Hu48vh9imE5u1RLcGVCexSUskm2wVgMBGN5X7xk8x/xRcL721f1
YhLwvrz42BQqkHIr8TmvX98sEj+f+0IU8rpEK7w/1WmYM5tSx59+zVHf1tI9NnRx
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360208440329263419490037469657980133953744
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 02:02:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 02:02:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26257573445747904003083880120349562816804188082347470436891936500193914424147356911361766823504103258301156848094660113275974588120435481443440482810536928892921854773771353555296729090169726311688315104170030229632826913851688107065274828029618402896135890476447876505657461344839731205480438647419754255728234106304960889165955612822208841113166624441316917680529718019115614381826879143717391673538975757367596622519423055188562517530294193401835625879686891114212144900346740457142580601770137337411173806438437741919368019659512745409291232822305260265565721252073962338847169624016970825432265622870821776421289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bee84fa12448ea51b2aac98e010f8b724161395e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (970 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activeselwyn.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amctc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticstauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auroracollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autocc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autocc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automobile.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfastbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bopblokartclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charterisbayyachtclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communityconnect.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curling.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastcitybmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellersliecricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fit4football.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisbornethistle.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbpbswimming.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcmc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houhorafishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaierau.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karoricricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keithst.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kokkino.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladiessocialcycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manawaturugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzfpandp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otakarofc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pihaslsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pukekohenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosebank.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondtononebasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stampede.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercrm.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swimotago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taranakirefs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tewaipounamutouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trolleyads.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waipukuraugolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiukunetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weirrosebowl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whakatanehockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpkgolf.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e4010083c0000040300473045022100af8657d93203b6ef720b7e2eb536d63007288c5c0b1a717ccb6e1302004f3cc1022007ad4703c1c3944a257e467dcd27cff42196cbf3eb3eee8c067ff28e31f42680007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e401008640000040300483046022100f16af82c3e4f438582c1649c99b55c2199150e61f1f43322ec60720b225d5c2e0221009b04ac1993068de211fe9b21497ee9ad4b5c6275c7bc64e6dcd842950fa95b14
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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