alihankinta.tv
Issued by R3
About this certificate
This digital certificate with serial number 03:a1:55:ff:ef:23:3d:fa:aa:9c:fe:56:28:69:97:84:77:42 was issued on by Let's Encrypt.
With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=alihankinta.tv
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a1:55:ff:ef:23:3d:fa:aa:9c:fe:56:28:69:97:84:77:42Serial Number (int): 316236632135180539371217919069959418574658
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a0:35:53:2c:24:10:ad:ac:ea:28:73:d4:55:d3:7f:43:74:87:0f:7a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): da:f7:40:71:2b:e4:56:a6:3d:7f:a0:3f:6c:26:9c:32:97:f5:dd:7e
Fingerprint (sha256): 80:1c:36:b5:f8:aa:2d:bf:83:71:49:ff:a1:73:9c:af:ec:63:4e:81:92:16:4c:5a:d3:f6:01:fb:37:80:a6:da
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate alihankinta.tv
28
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for alihankinta.tv
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
alihankinta.tv
asiakaskokemuksenakatemia.fi
ekspress.icareus.com
events.icareus.com
events.lampio.fi
fliigatv.com
futurelab.icareus.com
heimotv.westendindians.fi
inez.fi
ipsweden.icareus.com
kirjastokino.fi
my.icareus.com
play.icareus.com
salibandytv.icareus.com
suite.icareus.com
tiedekulmamedia.helsinki.fi
tv.lavis.fi
video.eventmedia.ee
video.inez.fi
videos.minifiddlers.org
weontv.icareus.com
www.alihankinta.tv
www.asiakaskokemuksenakatemia.fi
www.fliigatv.com
www.helsinkikanava.fi
www.inez.fi
www.kirjastokino.fi
www.midastv.ke
asiakaskokemuksenakatemia.fi
ekspress.icareus.com
events.icareus.com
events.lampio.fi
fliigatv.com
futurelab.icareus.com
heimotv.westendindians.fi
inez.fi
ipsweden.icareus.com
kirjastokino.fi
my.icareus.com
play.icareus.com
salibandytv.icareus.com
suite.icareus.com
tiedekulmamedia.helsinki.fi
tv.lavis.fi
video.eventmedia.ee
video.inez.fi
videos.minifiddlers.org
weontv.icareus.com
www.alihankinta.tv
www.asiakaskokemuksenakatemia.fi
www.fliigatv.com
www.helsinkikanava.fi
www.inez.fi
www.kirjastokino.fi
www.midastv.ke
Other certificates including the domain name alihankinta.tv
(limited to 100 certificates)
Certificate
The complete raw certificate details for alihankinta.tv in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgISA6FV/+8jPfqqnP5WKGmXhHdCMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MjIwNDMwNDVaFw0yMzEyMjEwNDMwNDRaMBkxFzAVBgNVBAMT DmFsaWhhbmtpbnRhLnR2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA oglv9/zkjfpVVcSOU0+65vqqMWrYdb6MOmJzCXqbgEdFHTwgKVzUVzl0GX35MARH wks3w+9Na5+HhFJSUX5axd01JPK6uPgCf6iFahhtZzGU6RlwJKVEpHoCyANHqA1c VjPZq0do5ELDSEpr+njegmO6OZI2XZ19D33cDRY6aR7lV6/NXZO+rKLo1HLkh+uf uVU/s3Cz7pRd02i28wk/KON/XZES4Ha+lv423Y0TK8MpVMAkuAOhac7e4SxasmcL n4L3kMF3mtDHCzkUrLQzTY13NL2Ak/g7EcJ6UzvDvlx66ECvovtU8zInSA8pN2gY k6OtYX5J8srxtgEmqXwSKQIDAQABo4IEOjCCBDYwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBSgNVMsJBCtrOooc9RV039DdIcPejAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzCCAkEGA1UdEQSCAjgwggI0gg5hbGloYW5raW50YS50doIcYXNpYWthc2tva2Vt dWtzZW5ha2F0ZW1pYS5maYIUZWtzcHJlc3MuaWNhcmV1cy5jb22CEmV2ZW50cy5p Y2FyZXVzLmNvbYIQZXZlbnRzLmxhbXBpby5maYIMZmxpaWdhdHYuY29tghVmdXR1 cmVsYWIuaWNhcmV1cy5jb22CGWhlaW1vdHYud2VzdGVuZGluZGlhbnMuZmmCB2lu ZXouZmmCFGlwc3dlZGVuLmljYXJldXMuY29tgg9raXJqYXN0b2tpbm8uZmmCDm15 LmljYXJldXMuY29tghBwbGF5LmljYXJldXMuY29tghdzYWxpYmFuZHl0di5pY2Fy ZXVzLmNvbYIRc3VpdGUuaWNhcmV1cy5jb22CG3RpZWRla3VsbWFtZWRpYS5oZWxz aW5raS5maYILdHYubGF2aXMuZmmCE3ZpZGVvLmV2ZW50bWVkaWEuZWWCDXZpZGVv LmluZXouZmmCF3ZpZGVvcy5taW5pZmlkZGxlcnMub3JnghJ3ZW9udHYuaWNhcmV1 cy5jb22CEnd3dy5hbGloYW5raW50YS50doIgd3d3LmFzaWFrYXNrb2tlbXVrc2Vu YWthdGVtaWEuZmmCEHd3dy5mbGlpZ2F0di5jb22CFXd3dy5oZWxzaW5raWthbmF2 YS5maYILd3d3LmluZXouZmmCE3d3dy5raXJqYXN0b2tpbm8uZmmCDnd3dy5taWRh c3R2LmtlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB 8gDwAHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGKu156YQAA BAMARzBFAiAoO9f5Q7nzwciihsBC1u0QqjyuhPJdOHVNCHHc8oolJwIhALOvGLcR IKI5IYBdDQ+DaKDfdQHQ92qy3rysWIhj0275AHYArfe++nz/EMiLnT2cHj4YarRn KV3PsQwkyoWGNOvcgooAAAGKu156pAAABAMARzBFAiEA+U63ZgiNOpjmdXWKjD6i vGlCyBFGYLHcHQp3pLfeRUkCIAI4QD1KC+6h6j5lw+R8VaKR6G5a07y05vzT5a5y UQBYMA0GCSqGSIb3DQEBCwUAA4IBAQAUMRWXo+nUS97eXZBfyQjkMgKZbtsXrWc5 W6rhJG25U9j7r2hsmSOOmDFd4wmUq/bO47GjEaOnFZk56gC1QcBFl3quhMVkg/tr cvR0O6UWQa6x7S3Qgz2pxB4CLV8tXVX+BXGdS2DLiF+nwWhOy0SBppv6IihF2bRZ Rp8eAIT3idKajI9O8tplZyuqkkgPgtEH/6oNpZ2F842GUdNmko3LnrEmG6QLrJgi KDgK5dAn9zJs2DOVV4SXM7d3MhZhGRvRyPls9MsxTeuDuFno9NZoiwRwXdfvUbcL Y3aloYxe5rRNz5vROG0Vp4jqkgp9XE+jaliQ7GhEaOryfx2+YEFj -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoglv9/zkjfpVVcSOU0+6 5vqqMWrYdb6MOmJzCXqbgEdFHTwgKVzUVzl0GX35MARHwks3w+9Na5+HhFJSUX5a xd01JPK6uPgCf6iFahhtZzGU6RlwJKVEpHoCyANHqA1cVjPZq0do5ELDSEpr+nje gmO6OZI2XZ19D33cDRY6aR7lV6/NXZO+rKLo1HLkh+ufuVU/s3Cz7pRd02i28wk/ KON/XZES4Ha+lv423Y0TK8MpVMAkuAOhac7e4SxasmcLn4L3kMF3mtDHCzkUrLQz TY13NL2Ak/g7EcJ6UzvDvlx66ECvovtU8zInSA8pN2gYk6OtYX5J8srxtgEmqXwS KQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316236632135180539371217919069959418574658 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 04:30:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 04:30:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alihankinta.tv' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20455259148914731160721915569646689476161961086182707052437519443930013457687434821731347363879201033646790937928074800493394646333397339669560626215774733248943039440210115215742590234648389633280728610373437758615861818494438438559669671911807658592578550727248881291072686346727355457626863650510664233212253250320652174477936712117245317995908909618815770405013268054721085678246844483382998644801185302564395883586556985061489742224289543525697586228430037308006266112294114307285622458615394851976066211317449057158939723153334072844217833854175224626274484171485618522904583143496715249117996588172342548238889 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a035532c2410adacea2873d455d37f4374870f7a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (568 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alihankinta.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiakaskokemuksenakatemia.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekspress.icareus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.icareus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.lampio.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fliigatv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurelab.icareus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heimotv.westendindians.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inez.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipsweden.icareus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirjastokino.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.icareus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.icareus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salibandytv.icareus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suite.icareus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiedekulmamedia.helsinki.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.lavis.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.eventmedia.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.inez.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.minifiddlers.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weontv.icareus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alihankinta.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asiakaskokemuksenakatemia.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fliigatv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinkikanava.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inez.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirjastokino.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midastv.ke' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018abb5e7a6100000403004730450220283bd7f943b9f3c1c8a286c042d6ed10aa3cae84f25d38754d0871dcf28a2527022100b3af18b71120a23921805d0d0f8368a0df7501d0f76ab2debcac588863d36ef9007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018abb5e7aa40000040300473045022100f94eb766088d3a98e675758a8c3ea2bc6942c8114660b1dc1d0a77a4b7de454902200238403d4a0beea1ea3e65c3e47c55a291e86e5ad3bcb4e6fcd3e5ae72510058 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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