www.duvallwa.gov
Issued by R3
About this certificate
This digital certificate with serial number 04:c9:46:0d:01:19:4b:79:91:bc:93:35:fd:fa:5b:57:ce:de was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.duvallwa.gov
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:c9:46:0d:01:19:4b:79:91:bc:93:35:fd:fa:5b:57:ce:deSerial Number (int): 416939012960000194816987120174363319979742
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 62:39:06:05:5d:90:fe:0e:32:87:bc:20:7c:a3:c4:7e:59:2d:be:ce
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 30:3f:a3:0b:e1:71:33:fc:d1:da:46:81:a5:57:19:b1:2a:71:5f:1f
Fingerprint (sha256): 7b:74:e2:61:b5:ee:e5:34:9a:86:11:0c:25:9f:c2:30:26:51:d7:2b:8c:59:5f:1b:7e:0e:64:c8:fd:08:59:9f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.duvallwa.gov
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.duvallwa.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
duvallwa.gov
www.duvallwa.gov
www.duvallwa.gov
Other certificates including the domain name duvallwa.gov
(limited to 100 certificates)
helpdesk.almeera.com.qa
servicedesk.orn.net
helpdesk.almeera.com.qa
www.duvallwa.gov
servicedesk.orn.net
helpdesk.almeera.com.qa
servicedesk.orn.net
helpdesk.almeera.com.qa
technologyservicedesk.expocitydubai.ae
ithelpdesk.cdmig.com
servicedesk.orn.net
helpdesk.almeera.com.qa
helpdesk.almeera.com.qa
helpdesk.almeera.com.qa
www.duvallwa.gov
technologyservicedesk.expocitydubai.ae
support.alsafygroup.com
helpdesk.vitalcareinc.com
www.duvallwa.gov
it-helpdesk.aspirafp.co.uk
servicedesk.orn.net
servicedesk.orn.net
servicedesk.orn.net
servicedesk.scscourt.org
itsupport.agencybloc.com
helpdesk.almeera.com.qa
helpdesk.aeainvestors.com
servicedesk.orn.net
helpdesk.foodspecialities.com
eedesk.hayden-homes.com
servicedesk.orn.net
servicedesk.orn.net
it-helpdesk.aspirafp.co.uk
helpdesk.almeera.com.qa
helpdesk.vitalcareinc.com
servicedesk.orn.net
service.aramtec.com
servicedesk.orn.net
helpdesk.almeera.com.qa
it-helpdesk.aspirafp.co.uk
helpdesk.duvallwa.gov
it.ziahomesep.com
helpdesk.almeera.com.qa
servicedesk.scscourt.org
servicedesk.asrc.com
servicedesk.orn.net
support.alsafygroup.com
servicedesk.orn.net
www.duvallwa.gov
helpdesk.almeera.com.qa
www.duvallwa.gov
servicedesk.orn.net
helpdesk.almeera.com.qa
servicedesk.sarcos.com
ithelpdesk.cdmig.com
helpdesk.vitalcareinc.com
servicedesk.orn.net
www.duvallwa.gov
duvallwa.gov
servicedesk.orn.net
servicedesk.orn.net
servicedesk.orn.net
support.alsafygroup.com
servicedesk.orn.net
helpdesk.foodspecialities.com
servicedesk.orn.net
eedesk.hayden-homes.com
www.duvallwa.gov
servicedesk.orn.net
support.eltizam.com
service.aramtec.com
servicedesk.orn.net
helpdesk.almeera.com.qa
www.duvallwa.gov
eedesk.hayden-homes.com
it-helpdesk.aspirafp.co.uk
helpdesk.almeera.com.qa
servicedesk.orn.net
www.duvallwa.gov
servicedesk.orn.net
helpdesk.almeera.com.qa
eedesk.hayden-homes.com
helpdesk.almeera.com.qa
helpdesk.almeera.com.qa
servicedesk.orn.net
ithelpdesk.cdmig.com
www.duvallwa.gov
servicedesk.orn.net
www.duvallwa.gov
helpdesk.almeera.com.qa
helpdesk.duvallwa.gov
it.ziahomesep.com
service.aramtec.com
helpdesk.almeera.com.qa
helpdesk.almeera.com.qa
helpdesk.almeera.com.qa
technologyservicedesk.expocitydubai.ae
www.duvallwa.gov
it.ziahomesep.com
servicedesk.sarcos.com
servicedesk.orn.net
helpdesk.almeera.com.qa
www.duvallwa.gov
servicedesk.orn.net
helpdesk.almeera.com.qa
servicedesk.orn.net
helpdesk.almeera.com.qa
technologyservicedesk.expocitydubai.ae
ithelpdesk.cdmig.com
servicedesk.orn.net
helpdesk.almeera.com.qa
helpdesk.almeera.com.qa
helpdesk.almeera.com.qa
www.duvallwa.gov
technologyservicedesk.expocitydubai.ae
support.alsafygroup.com
helpdesk.vitalcareinc.com
www.duvallwa.gov
it-helpdesk.aspirafp.co.uk
servicedesk.orn.net
servicedesk.orn.net
servicedesk.orn.net
servicedesk.scscourt.org
itsupport.agencybloc.com
helpdesk.almeera.com.qa
helpdesk.aeainvestors.com
servicedesk.orn.net
helpdesk.foodspecialities.com
eedesk.hayden-homes.com
servicedesk.orn.net
servicedesk.orn.net
it-helpdesk.aspirafp.co.uk
helpdesk.almeera.com.qa
helpdesk.vitalcareinc.com
servicedesk.orn.net
service.aramtec.com
servicedesk.orn.net
helpdesk.almeera.com.qa
it-helpdesk.aspirafp.co.uk
helpdesk.duvallwa.gov
it.ziahomesep.com
helpdesk.almeera.com.qa
servicedesk.scscourt.org
servicedesk.asrc.com
servicedesk.orn.net
support.alsafygroup.com
servicedesk.orn.net
www.duvallwa.gov
helpdesk.almeera.com.qa
www.duvallwa.gov
servicedesk.orn.net
helpdesk.almeera.com.qa
servicedesk.sarcos.com
ithelpdesk.cdmig.com
helpdesk.vitalcareinc.com
servicedesk.orn.net
www.duvallwa.gov
duvallwa.gov
servicedesk.orn.net
servicedesk.orn.net
servicedesk.orn.net
support.alsafygroup.com
servicedesk.orn.net
helpdesk.foodspecialities.com
servicedesk.orn.net
eedesk.hayden-homes.com
www.duvallwa.gov
servicedesk.orn.net
support.eltizam.com
service.aramtec.com
servicedesk.orn.net
helpdesk.almeera.com.qa
www.duvallwa.gov
eedesk.hayden-homes.com
it-helpdesk.aspirafp.co.uk
helpdesk.almeera.com.qa
servicedesk.orn.net
www.duvallwa.gov
servicedesk.orn.net
helpdesk.almeera.com.qa
eedesk.hayden-homes.com
helpdesk.almeera.com.qa
helpdesk.almeera.com.qa
servicedesk.orn.net
ithelpdesk.cdmig.com
www.duvallwa.gov
servicedesk.orn.net
www.duvallwa.gov
helpdesk.almeera.com.qa
helpdesk.duvallwa.gov
it.ziahomesep.com
service.aramtec.com
helpdesk.almeera.com.qa
helpdesk.almeera.com.qa
helpdesk.almeera.com.qa
technologyservicedesk.expocitydubai.ae
www.duvallwa.gov
it.ziahomesep.com
servicedesk.sarcos.com
Certificate
The complete raw certificate details for www.duvallwa.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgISBMlGDQEZS3mRvJM1/fpbV87eMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MTYwMTAzMzNaFw0yNDA4MTQwMTAzMzJaMBsxGTAXBgNVBAMT EHd3dy5kdXZhbGx3YS5nb3YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCFbAPRc3mmO7KLjpM8bFkl4jFtG6GXlwDeWhRGqNv5jtAJQuBlpxjXVcWazRb0 ZvYxX5p4HAoN/BY7GHJN43iDnTVi4KHvPcAst/HCBh+bUKdOij9gcIqn2998g4pH EZwqrSNMlFxmR8+QfKzdghCNsz2kS1NJOK8AAoWWDpytf5e+xpp0JFZ8Jd6A9RUq GWKZ+aKaDZ4SzmhXMLkWxYhAhBDDxaDakDrkpnx/+KSLL8ZIKOfUXEcbUrgmApOK zZxkQzo6cm7yTcmWWGgINI8BkYKQQKlgSgtj82XTwUQEKg0XfJxeHBuSxmiRYOfi C5uDfsdGUpHsNZE/9K2I2VEjAgMBAAGjggIfMIICGzAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFGI5BgVdkP4OMoe8IHyjxH5ZLb7OMB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMCkGA1UdEQQiMCCCDGR1dmFsbHdhLmdvdoIQd3d3LmR1dmFsbHdhLmdvdjAT BgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AD8X S0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABj38j9UUAAAQDAEcwRQIh AKC4VxRkjZGu+5lRpBdd5h3FkYzOIb/aQPBPTyVepe2zAiBQLPqLATVvqrr0izHo FgAN7qaDxjU1ZPbuQwF9jGnL4wB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf 5mdMWjp0AAABj38j9XMAAAQDAEYwRAIgaDHXlRZFgOEpA1Z8NRv0cxd6eT1/0S+1 WK7wSOdIkS8CIAnngo9Xtk1FEP+xvjf2irSMCiQjrfyPa4O18duEeHtoMA0GCSqG SIb3DQEBCwUAA4IBAQBYhPwbtAm3VFIJxsLDuYnkBBZDySXrJgXEQH3Sk5/aJlkb mkA31RBG8wBbbLDlPz5RK515N5FJcKXacBouIOKiacGTJLobRQTIyydlDE4bJZKF oUe87CoWvoN4QJiEwJMwxumFCYlNdYHBIVAwyJJYDmMOZQyOflg6WGkVAEEp13SD ttctoLev73hrc1By8iHNus7fxisCIlEWrWq4Z1GVfoQYAA+h9IlJRpVNvrZh41+z feyaiQdOdg48txm+ha0NoIIoRp1j+PACqu/qhAYWe/TzOomZ61UJDI3fD9K5O5K3 vAx+uMGbth3/YgsapG83kefKliyZXWol6I4QxUQ9 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWwD0XN5pjuyi46TPGxZ JeIxbRuhl5cA3loURqjb+Y7QCULgZacY11XFms0W9Gb2MV+aeBwKDfwWOxhyTeN4 g501YuCh7z3ALLfxwgYfm1CnToo/YHCKp9vffIOKRxGcKq0jTJRcZkfPkHys3YIQ jbM9pEtTSTivAAKFlg6crX+XvsaadCRWfCXegPUVKhlimfmimg2eEs5oVzC5FsWI QIQQw8Wg2pA65KZ8f/ikiy/GSCjn1FxHG1K4JgKTis2cZEM6OnJu8k3JllhoCDSP AZGCkECpYEoLY/Nl08FEBCoNF3ycXhwbksZokWDn4gubg37HRlKR7DWRP/StiNlR IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 416939012960000194816987120174363319979742 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 01:03:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 01:03:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.duvallwa.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16842958700115786529672758172838603086790482134235627222347389049723000573491524275579154872457864450968853704429419441994808430477527008227101600126386002042633695578034026282667909333706905597839027251418888435722043468792225405383258663196646813310637645016775401242075722012830054389762706560657053300745785237044682402178586944274269129043305652209283287183274035470165671759234940703550031837682459618594423406591936739380992759463510268627265777663558880378134020078722762185212899739822925551373906329303282648749129317307278407709686691657910821352628608598944882792575033919248943834520342638721537117081891 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 623906055d90fe0e3287bc207ca3c47e592dbece . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duvallwa.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duvallwa.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f7f23f5450000040300473045022100a0b85714648d91aefb9951a4175de61dc5918cce21bfda40f04f4f255ea5edb30220502cfa8b01356faabaf48b31e816000deea683c6353564f6ee43017d8c69cbe300750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f7f23f573000004030046304402206831d795164580e12903567c351bf473177a793d7fd12fb558aef048e748912f022009e7828f57b64d4510ffb1be37f68ab48c0a2423adfc8f6b83b5f1db84787b68 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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