www.vesimiehenkatu22.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ba:fe:d5:75:39:4d:4b:fc:63:f4:11:e7:1b:f3:0b:7e:5b was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.vesimiehenkatu22.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:ba:fe:d5:75:39:4d:4b:fc:63:f4:11:e7:1b:f3:0b:7e:5b
Serial Number (int): 324968110290317381791693209429651447578203
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:a7:ed:69:3f:e0:8d:f1:5d:12:7a:d5:dd:ac:47:30:e3:86:c3:99
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c4:0e:60:d2:fe:8c:5c:e5:ac:4e:da:93:fe:d9:9e:ac:11:9b:db:dc
Fingerprint (sha256): 7f:a8:1a:98:4a:3b:a3:73:cd:79:e5:c9:57:9f:e2:b5:1a:08:ba:d7:fc:ab:4c:4d:b4:b6:d6:8d:a3:9c:a5:94

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.vesimiehenkatu22.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vesimiehenkatu22.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abp.fi
autodiscover.bauwerk.fi
bauwerk.fi
cpanel.bauwerk.fi
cpcalendars.bauwerk.fi
cpcontacts.bauwerk.fi
hallipaikka.com
mail.abp.fi
mail.bauwerk.fi
mail.hallipaikka.com
mail.tilani.net
mail.vanhahameentie7.com
mail.vesimiehenkatu22.com
tilani.net
vanhahameentie7.com
vesimiehenkatu22.com
webdisk.bauwerk.fi
webmail.bauwerk.fi
www.abp.fi
www.bauwerk.fi
www.hallipaikka.com
www.tilani.net
www.vanhahameentie7.com
www.vesimiehenkatu22.com

Other certificates including the domain name vesimiehenkatu22.com

(limited to 100 certificates)
bauwerk.fi
bauwerk.fi
bauwerk.fi
bauwerk.fi
bauwerk.fi
www.vesimiehenkatu22.com
bauwerk.fi
www.vesimiehenkatu22.com
bauwerk.fi
mail.abp.fi
bauwerk.fi
bauwerk.fi
bauwerk.fi
bauwerk.fi
bauwerk.fi
www.vanhahameentie7.com
bauwerk.fi
bauwerk.fi
bauwerk.fi
bauwerk.fi

Certificate

The complete raw certificate details for www.vesimiehenkatu22.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGtTCCBZ2gAwIBAgISA7r+1XU5TUv8Y/QR5xvzC35bMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MDIwOTU0MDNaFw0yNDA3MDEwOTU0MDJaMCMxITAfBgNVBAMT
GHd3dy52ZXNpbWllaGVua2F0dTIyLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMbq+vxBWRgYw+OOGY913AzCM6h00qSws+ns+KJD5uE37ZUvo1ZD
oM10qUhhWrcdIycCS+2spVmKG8rlbwdXfRRpFHRn0oePQb0KM1TWbaJnP2dSwx1x
M7bKHaNKs0/IRZKccJ+KOgLe3i8yO9kLLA/5GDOUGmvLizGLTT3DxDRT7OmDQzXS
80G1Xj/6R3S09FkAdLXbx3MBa0nXditRlaHzZmxrEZzBAkpBD1cuhVd1KIH8C9KS
8fGyjSEqbcIZSqtf8SWU665Plq1C4j3O8aIMp/NbkN4UiwkPeKGKbr6I34vlnSR9
1qvBmJyqpnvy+OLsJBSpLjb226jMu9b0d18CAwEAAaOCA9IwggPOMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUUqftaT/gjfFdEnrV3axHMOOGw5kwHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wggHaBgNVHREEggHRMIIBzYIGYWJwLmZpghdhdXRvZGlzY292
ZXIuYmF1d2Vyay5maYIKYmF1d2Vyay5maYIRY3BhbmVsLmJhdXdlcmsuZmmCFmNw
Y2FsZW5kYXJzLmJhdXdlcmsuZmmCFWNwY29udGFjdHMuYmF1d2Vyay5maYIPaGFs
bGlwYWlra2EuY29tggttYWlsLmFicC5maYIPbWFpbC5iYXV3ZXJrLmZpghRtYWls
LmhhbGxpcGFpa2thLmNvbYIPbWFpbC50aWxhbmkubmV0ghhtYWlsLnZhbmhhaGFt
ZWVudGllNy5jb22CGW1haWwudmVzaW1pZWhlbmthdHUyMi5jb22CCnRpbGFuaS5u
ZXSCE3ZhbmhhaGFtZWVudGllNy5jb22CFHZlc2ltaWVoZW5rYXR1MjIuY29tghJ3
ZWJkaXNrLmJhdXdlcmsuZmmCEndlYm1haWwuYmF1d2Vyay5maYIKd3d3LmFicC5m
aYIOd3d3LmJhdXdlcmsuZmmCE3d3dy5oYWxsaXBhaWtrYS5jb22CDnd3dy50aWxh
bmkubmV0ghd3d3cudmFuaGFoYW1lZW50aWU3LmNvbYIYd3d3LnZlc2ltaWVoZW5r
YXR1MjIuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB
9ASB8QDvAHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGOnnHU
oQAABAMARjBEAiBcLSQNS28kksEWz0jvVXVLIQNpruqRN/6mAIq0OBCCkwIgFCPW
IYBSnDCxHgHUGiiOIIEvZmKD5r+kZh6xxDabyC4AdgDf4VbrqgWvtZwPhnGNqMAy
Tq5W2W6n9aVqAdHBO75SXAAAAY6ecdUdAAAEAwBHMEUCIQDRsiHB0zF9CRfzlhhj
LcvXVngHTf8uP8XO9ebs33QK+gIgA5eVirrDfRV23fQZYuyPZMaffVl8bXsxFC1K
UNCPK2kwDQYJKoZIhvcNAQELBQADggEBADsBqe9fTLYX07ybbhNkPVtlHSpcIXUJ
RI3CNibC/ahd2AMc3DWVUFGnyqTqCvuMwS9qD+PiV82Jsr077nFkbfWYyz/dM0Pe
BMYMJqnwD03N+erx0SzDQjft4rAqufTLl4CIlqzVpOn+stPEOIyIjjIPLgVlyrRK
4D3/BFQRxrf0NSnet0mZKi3yphs/lGSbfL24UyuW4MVWUwowcu6edJR1s6se1jjn
tRmymMqAviu1zdfW+IFSR+box4VIX6S0Wlc1AK4lMadBd1fPKL6SpRduUop3Nru7
4NW4gPGp1WexXJQeKpz66y+Ypa0IjgmeGYxtjDe/1GgaNxoHZRh3y30=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxur6/EFZGBjD444Zj3Xc
DMIzqHTSpLCz6ez4okPm4TftlS+jVkOgzXSpSGFatx0jJwJL7aylWYobyuVvB1d9
FGkUdGfSh49BvQozVNZtomc/Z1LDHXEztsodo0qzT8hFkpxwn4o6At7eLzI72Qss
D/kYM5Qaa8uLMYtNPcPENFPs6YNDNdLzQbVeP/pHdLT0WQB0tdvHcwFrSdd2K1GV
ofNmbGsRnMECSkEPVy6FV3UogfwL0pLx8bKNISptwhlKq1/xJZTrrk+WrULiPc7x
ogyn81uQ3hSLCQ94oYpuvojfi+WdJH3Wq8GYnKqme/L44uwkFKkuNvbbqMy71vR3
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324968110290317381791693209429651447578203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 09:54:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 09:54:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vesimiehenkatu22.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25111057542896244760921924893160438832093354608952018383915252139767696698883529625604625739963151561555144093405243315056259877809118258453557406578614184209092293388643131017831016489636326622279438698624625434302320878407196245508203991512323454200595409058978249563120014957120297694293818696701464339400256194466248298753698712226166192855764913869222209654325402550343508153135958280341914706080788488632351776383611981533342079944867749989479110598276707076882877942766883139137444139899186979913283020943521497155618841531843392951607127126916601368115777493228364248579571913426687389765699963696338502448991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52a7ed693fe08df15d127ad5ddac4730e386c399
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (465 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abp.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bauwerk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bauwerk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.bauwerk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.bauwerk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.bauwerk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallipaikka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.abp.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bauwerk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hallipaikka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tilani.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vanhahameentie7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vesimiehenkatu22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilani.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanhahameentie7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesimiehenkatu22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.bauwerk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bauwerk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abp.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bauwerk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hallipaikka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tilani.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanhahameentie7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vesimiehenkatu22.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e9e71d4a1000004030046304402205c2d240d4b6f2492c116cf48ef55754b210369aeea9137fea6008ab43810829302201423d62180529c30b11e01d41a288e20812f666283e6bfa4661eb1c4369bc82e007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018e9e71d51d0000040300473045022100d1b221c1d3317d0917f39618632dcbd75678074dff2e3fc5cef5e6ecdf740afa02200397958abac37d1576ddf41962ec8f64c69f7d597c6d7b31142d4a50d08f2b69
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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