aupasseurdelumiere.fr
Issued by R3
About this certificate
This digital certificate with serial number 03:4d:9e:5a:ae:fa:7c:8d:5e:e7:ba:a1:f9:e2:58:c5:f8:54 was issued on by Let's Encrypt.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=aupasseurdelumiere.fr
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4d:9e:5a:ae:fa:7c:8d:5e:e7:ba:a1:f9:e2:58:c5:f8:54Serial Number (int): 287749088927229145180849158731967689521236
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f8:e4:ff:1f:e5:15:84:b9:88:25:ff:3d:35:b4:4f:5f:9e:98:60:fb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 4f:83:9c:aa:5a:c7:6d:dc:cd:0b:90:25:d9:77:87:78:aa:11:7f:00
Fingerprint (sha256): 85:ae:4c:48:d3:aa:e7:f7:4b:9f:6b:fc:25:23:b3:f4:f3:00:a6:b9:1a:75:68:6f:81:a3:0c:86:5d:55:a3:c9
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate aupasseurdelumiere.fr
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aupasseurdelumiere.fr
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aupasseurdelumiere.fr
billet-de-train-pas-cher.fr
mrpat.fr
noemie-riom.fr
o2concept.fr
parentheses-castres.fr
ravalement-devis.fr
restaurant-le-grand-joly.fr
schaeffer-dufour.fr
son-meditation.fr
www.aupasseurdelumiere.fr
www.billet-de-train-pas-cher.fr
www.mrpat.fr
www.noemie-riom.fr
www.o2concept.fr
www.parentheses-castres.fr
www.ravalement-devis.fr
www.restaurant-le-grand-joly.fr
www.schaeffer-dufour.fr
www.son-meditation.fr
billet-de-train-pas-cher.fr
mrpat.fr
noemie-riom.fr
o2concept.fr
parentheses-castres.fr
ravalement-devis.fr
restaurant-le-grand-joly.fr
schaeffer-dufour.fr
son-meditation.fr
www.aupasseurdelumiere.fr
www.billet-de-train-pas-cher.fr
www.mrpat.fr
www.noemie-riom.fr
www.o2concept.fr
www.parentheses-castres.fr
www.ravalement-devis.fr
www.restaurant-le-grand-joly.fr
www.schaeffer-dufour.fr
www.son-meditation.fr
Other certificates including the domain name aupasseurdelumiere.fr
(limited to 100 certificates)
Certificate
The complete raw certificate details for aupasseurdelumiere.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHqTCCBpGgAwIBAgISA02eWq76fI1e57qh+eJYxfhUMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA4MjMyMzQ1MTlaFw0yMzExMjEyMzQ1MThaMCAxHjAcBgNVBAMT FWF1cGFzc2V1cmRlbHVtaWVyZS5mcjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC AgoCggIBAKoft417xZZ0UcvnB8oNM9NbwLlQKNJDos/040m6Nr+Q/q40qLqVAM7u jGStNMGr+oS+/HouwEYWS67UwJ8Nx8lQVS0HuWMURjrBnm/2QUcBdnhuqnHV6vid ucxkWwOLagXHgrC3eQGetOKmzrBxgMBJiVaOt3siTOVQqko6vcVnLTcgo9JC3xp5 wt1ystXawOfduHq78U3X5coLBSuZXuGPaH95wE0A0pYN7RyFRGJZCoXPPzCY/Ysk B1d/TvuZjQYpovDJFON4YcLfWDsWjn4tnUkv25DMM65zxPVNjQ+MbBr866iq9KTH tykk/3Bm2dQlprjBEGtJpFA4W5YgoYEatMwJfjI+Bns9UIpHc7sVLlmm0SFRGqNI PfIb87GLll4yGPDPIB24h/yulzoZv60AdGlLiaGrKI2srcNpXTgogN/gc1ytjYRB m0DpeyNaYA1f4CV4nBpt5OYv1AoEavnBywvbCCjPRyQKyd9rpmetQEa1fw1NCLGO jMTgTCDNwmclRLdLce0OBRL02lPHjzeU/5cXPK8F40DMkm0Ht0n+6WVGYfErSlgV S6e6T3s+RJleISSWwLwQzqF+hBKvMYaXjm7EnL007C3AJAToCcDTdNheC+0y9xrL KkHNcs2QQLR/OETbrXDHsgjOgSFIlcsX+r2dJpFpNI6LjrT0lu1JAgMBAAGjggPJ MIIDxTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPjk/x/lFYS5iCX/PTW0T1+emGD7 MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkw RzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAC hhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIB0QYDVR0RBIIByDCCAcSCFWF1cGFz c2V1cmRlbHVtaWVyZS5mcoIbYmlsbGV0LWRlLXRyYWluLXBhcy1jaGVyLmZygght cnBhdC5mcoIObm9lbWllLXJpb20uZnKCDG8yY29uY2VwdC5mcoIWcGFyZW50aGVz ZXMtY2FzdHJlcy5mcoITcmF2YWxlbWVudC1kZXZpcy5mcoIbcmVzdGF1cmFudC1s ZS1ncmFuZC1qb2x5LmZyghNzY2hhZWZmZXItZHVmb3VyLmZyghFzb24tbWVkaXRh dGlvbi5mcoIZd3d3LmF1cGFzc2V1cmRlbHVtaWVyZS5mcoIfd3d3LmJpbGxldC1k ZS10cmFpbi1wYXMtY2hlci5mcoIMd3d3Lm1ycGF0LmZyghJ3d3cubm9lbWllLXJp b20uZnKCEHd3dy5vMmNvbmNlcHQuZnKCGnd3dy5wYXJlbnRoZXNlcy1jYXN0cmVz LmZyghd3d3cucmF2YWxlbWVudC1kZXZpcy5mcoIfd3d3LnJlc3RhdXJhbnQtbGUt Z3JhbmQtam9seS5mcoIXd3d3LnNjaGFlZmZlci1kdWZvdXIuZnKCFXd3dy5zb24t bWVkaXRhdGlvbi5mcjATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkC BAIEgfQEgfEA7wB1AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAAB iiUAu5kAAAQDAEYwRAIgL/m/OH1sQMdKoU/EHCgcR6GtNVBbtFDCllbo3RPhy4gC IBlYzKwVp6ST8XyQOlccGo5CWM4Z5dZi5CSuj9P3nteXAHYArfe++nz/EMiLnT2c Hj4YarRnKV3PsQwkyoWGNOvcgooAAAGKJQC7/AAABAMARzBFAiEA/98SkceaYOCO G7NsDbQPJ4m556ueSNC9KmyUk6Fn7I0CIAz217YqUfgoYa69JoFd5OVNQtrw1VQ6 uP2iA0kFnhI+MA0GCSqGSIb3DQEBCwUAA4IBAQAnWSrU/LJPhfRfgqIP3NkIXYRH 9kt53drzsM2eVBWjmXlMV9YFeLLA46d1P5u/grTBfdjcUDTLi3QPFIM8AyNazHRR vjs6A8ProsSstWErPR27KETorekfgWDnV9yDKm9Vej1OeFBiCyCwfPQzZLqTWGqM FhgBtXZE2G+cr1os6GJSGNU3vV9XLcN8wyu79oKMXChxzxbEoy9w1qpERxYQf7q2 H0L/iBwXPcAYMmNpepD5lF6ZCcINoqZNgKWOy7go8DcQfts1KZvIHAAWrSXDWDve nBv9fku6elczJDK+d7u15VpPB8TYvt02iaOhjUA3jh+XB3sLevtCDTBahUXO -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqh+3jXvFlnRRy+cHyg0z 01vAuVAo0kOiz/TjSbo2v5D+rjSoupUAzu6MZK00wav6hL78ei7ARhZLrtTAnw3H yVBVLQe5YxRGOsGeb/ZBRwF2eG6qcdXq+J25zGRbA4tqBceCsLd5AZ604qbOsHGA wEmJVo63eyJM5VCqSjq9xWctNyCj0kLfGnnC3XKy1drA5924ervxTdflygsFK5le 4Y9of3nATQDSlg3tHIVEYlkKhc8/MJj9iyQHV39O+5mNBimi8MkU43hhwt9YOxaO fi2dSS/bkMwzrnPE9U2ND4xsGvzrqKr0pMe3KST/cGbZ1CWmuMEQa0mkUDhbliCh gRq0zAl+Mj4Gez1QikdzuxUuWabRIVEao0g98hvzsYuWXjIY8M8gHbiH/K6XOhm/ rQB0aUuJoasojaytw2ldOCiA3+BzXK2NhEGbQOl7I1pgDV/gJXicGm3k5i/UCgRq +cHLC9sIKM9HJArJ32umZ61ARrV/DU0IsY6MxOBMIM3CZyVEt0tx7Q4FEvTaU8eP N5T/lxc8rwXjQMySbQe3Sf7pZUZh8StKWBVLp7pPez5EmV4hJJbAvBDOoX6EEq8x hpeObsScvTTsLcAkBOgJwNN02F4L7TL3GssqQc1yzZBAtH84RNutcMeyCM6BIUiV yxf6vZ0mkWk0jouOtPSW7UkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 287749088927229145180849158731967689521236 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-23 23:45:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 23:45:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aupasseurdelumiere.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694044937194594743068226750345197886282496951763191398592303727375263890144260169853183050973705590993760770592914185853356194225635057768177635660569322973401205748052803295392659940964221643659499480758229105744842048511376276935626685089310707138605652421126870878673762611909013552613868454617502331360657241853132400459174190003520120811079191559887909808929472793077843786409854147411005865261237660362511847226952469623573056080548738066894058881459569051889001735067581375268124891526431126186642039749016514134612442652211861131395017920657236312683955453068670361597565279103483720144257531200234927237984406241996744352473996542044237614705277614280045314042316535692044736651514497845716048608469974006167335986528443369430239364166201556772660944616586114490865111818126150429614011905248040096674698674319374833479317266657944811765326414802483542021197129345473975028232828241847357413028577680458059947121087637769395529589480059714906256865149583091051378798095107549755043823766517520422527896258504164920490323610004874367057392056239065213293364412639821331054386812005281477169982475789944460077042034392295141783231812474440198731881735892830574370303584227599843674608614480104194690376578533023490131841445193 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f8e4ff1fe51584b98825ff3d35b44f5f9e9860fb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (456 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aupasseurdelumiere.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billet-de-train-pas-cher.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrpat.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noemie-riom.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o2concept.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parentheses-castres.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravalement-devis.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant-le-grand-joly.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schaeffer-dufour.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'son-meditation.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aupasseurdelumiere.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billet-de-train-pas-cher.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrpat.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noemie-riom.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.o2concept.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parentheses-castres.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravalement-devis.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant-le-grand-joly.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schaeffer-dufour.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.son-meditation.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a2500bb99000004030046304402202ff9bf387d6c40c74aa14fc41c281c47a1ad35505bb450c29656e8dd13e1cb8802201958ccac15a7a493f17c903a571c1a8e4258ce19e5d662e424ae8fd3f79ed797007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a2500bbfc0000040300473045022100ffdf1291c79a60e08e1bb36c0db40f2789b9e7ab9e48d0bd2a6c9493a167ec8d02200cf6d7b62a51f82861aebd26815de4e54d42daf0d5543ab8fda20349059e123e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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