thichallenge.com

Issued by cPanel, Inc. Certification Authority

About this certificate

This digital certificate with serial number cc:b8:a7:96:d2:3a:b8:af:5d:bf:31:9c:1a:0c:be:57 was issued on by cPanel, Inc..

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thichallenge.com

cPanel, Inc.

Organization: cPanel, Inc.
State / Province: TX
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): cc:b8:a7:96:d2:3a:b8:af:5d:bf:31:9c:1a:0c:be:57
Serial Number (int): 272121292873784275235026036195152674391
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 04:b4:91:99:0e:ab:f8:b1:76:27:e5:12:64:41:ff:18:a7:1b:2b:50
AuthorityKeyId: 7e:03:5a:65:41:6b:a7:7e:0a:e1:b8:9d:08:ea:1d:8e:1d:6a:c7:65

Fingerprint (sha1): 98:b8:c7:5b:d9:c1:96:21:3b:0f:55:9e:1c:35:3e:ca:d2:70:38:07
Fingerprint (sha256): 7d:d7:88:69:0a:e5:a6:fe:5d:d7:74:34:71:f4:10:d4:98:7e:ad:2d:43:26:b3:ff:0d:0e:f3:e1:dd:fe:0d:66

Issuing Certificate URL: http://crt.comodoca.com/cPanelIncCertificationAuthority.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/cPanelIncCertificationAuthority.crl

Check the revocation status for certificate thichallenge.com

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thichallenge.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thichallenge.com
cpanel.thichallenge.com
digitalwellness.ca
eq-wellness.com
firsttwenty.thichallenge.com
firsttwentyperformance.com
firsttwentywellness.com
fithealthyu.thichallenge.com
generalmills.thichallenge.com
livewell.allinahealth.org
mail.digitalwellness.ca
mail.eq-wellness.com
mail.firsttwenty.thichallenge.com
mail.firsttwentyperformance.com
mail.firsttwentywellness.com
mail.fithealthyu.thichallenge.com
mail.generalmills.thichallenge.com
mail.mbs.thichallenge.com
mail.thichallenge.com
mail.vfp.thichallenge.com
mbs.thichallenge.com
portal.balanceintegration.com
vfp.thichallenge.com
webdisk.thichallenge.com
webmail.thichallenge.com
www.digitalwellness.ca
www.eq-wellness.com
www.firsttwenty.thichallenge.com
www.firsttwentyperformance.com
www.firsttwentywellness.com
www.fithealthyu.thichallenge.com
www.generalmills.thichallenge.com
www.mbs.thichallenge.com
www.portal.balanceintegration.com
www.thichallenge.com
www.vfp.thichallenge.com

Other certificates including the domain name thichallenge.com

(limited to 100 certificates)
thichallenge.com
kkrchallenge.com
thichallenge.com
leadiantwellness.com
thichallenge.com
signup.thichallenge.com
fundraising2016.com
thichallenge.com
thichallenge.com
fundraising2016.com
fundraising2016.com
signup.thichallenge.com
thichallenge.com
thichallenge.com
signup.thichallenge.com
thichallenge.com
kkrchallenge.com
leadiantwellness.com
thichallenge.com
thichallenge.com
signup.thichallenge.com
thichallenge.com
fundraising2016.com
thichallenge.com
thichallenge.com

Certificate

The complete raw certificate details for thichallenge.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KLBP4ASqLuefUxEVhTU
29YdS0uNS18ROL+QO6ngiMIyYuEceyzCKAENreyDQsruxsOqWM94lm+OrxjohLeg
pqlfGtj5fCyAFlIK3t+UA2bWZBraJTG0rFtD7wKoyeQt7RydzCD+ltQXB30Hovwc
0a9SFxVD3dQt+l2ryIG8uiW9agwOup3IRabiLx/ChBAlk4am4uVQqfVohvHjR2Kb
TBIDE4GwpOXVSRK0cILql1SI+jJFn39bVYIe78LlkM1xolz/nvyVduG/ZEMHgqjC
a5KLtK8VnzGbLsr/BzyZIZxv75xQPotfgHWhe3fh0xcMdcIds7jH1KyYlXZvf1uV
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272121292873784275235026036195152674391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc. Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thichallenge.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26842778072994373646217263032221591141585115985783309417456773430309159308389966939719478797168314093933313066759465062770518164896586766321638103534475256134474615799778000646594907696976657722379752391934653892852851931231493102295820112384482942387567561403014189409681491933500989667090919994031595345815494766690835560494644035784436526162965351045029664334300860883623060756491094512216690372307073665137413721245667436638696463198439656933374491522807124818343676572360201158263373217637478933899825524494985140928274099823585439134025381296469161470858157634607757911611537856921848195039741996794446966658449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7e035a65416ba77e0ae1b89d08ea1d8e1d6ac765
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04b491990eabf8b17627e5126441ff18a71b2b50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.52
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/cPanelIncCertificationAuthority.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/cPanelIncCertificationAuthority.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (993 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalwellness.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eq-wellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsttwenty.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsttwentyperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsttwentywellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fithealthyu.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generalmills.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livewell.allinahealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.digitalwellness.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.eq-wellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.firsttwenty.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.firsttwentyperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.firsttwentywellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fithealthyu.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.generalmills.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mbs.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vfp.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbs.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.balanceintegration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfp.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalwellness.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eq-wellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttwenty.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttwentyperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firsttwentywellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fithealthyu.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generalmills.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbs.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portal.balanceintegration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thichallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfp.thichallenge.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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