www.sportsground.com

Issued by R3

About this certificate

This digital certificate with serial number 04:16:2c:03:57:fe:22:35:c2:97:6e:93:30:58:1a:6c:f3:7f was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sportsground.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:16:2c:03:57:fe:22:35:c2:97:6e:93:30:58:1a:6c:f3:7f
Serial Number (int): 355993859192710920964233850212786820150143
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:88:5f:1d:04:fb:8b:69:fe:69:1b:10:92:ca:4b:d1:91:a7:5f:2b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f5:62:7f:51:91:8b:7e:8f:1e:89:a6:08:4b:7b:52:be:22:11:39:14
Fingerprint (sha256): 87:ec:10:65:66:3c:0b:01:4d:1b:4b:87:8b:f0:92:84:d3:f5:f1:07:8e:24:1a:e0:ca:48:62:47:cf:dd:bf:a5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sportsground.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sportsground.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ardmoremarist.co.nz
www.aucklandservicerifle.org.nz
www.bowlssouthland.co.nz
www.bowlswestcoast.org.nz
www.brooklyncroquetclub.org
www.capitalfootball.org.nz
www.centralfootball.co.nz
www.centralfootball.org.nz
www.cmsport.co.nz
www.footballsouth.co.nz
www.greenhithefootball.org
www.hbcc.org.nz
www.hendersonsquash.co.nz
www.howicksailingclub.co.nz
www.hrc.org.nz
www.karakasportspark.co.nz
www.linfield.co.nz
www.maoribasketball.co.nz
www.marlborough-touch.co.nz
www.marlboroughfootball.co.nz
www.mountfortwaterpolo.nz
www.myfootball.co.nz
www.nelsonbaysfootball.co.nz
www.nelsonnetball.co.nz
www.newplymouthcroquetclub.co.nz
www.nhbmx.org.nz
www.nzsra.org.nz
www.oratiaunited.co.nz
www.osssa.org.nz
www.ravensbourne.co.nz
www.rosegardenscroquetclub.org.nz
www.royaloakracquets.co.nz
www.schoolground.co.nz
www.schoolground.nz
www.southlandbmxclub.co.nz
www.sportsground.co.nz
www.sportsground.com
www.sportsportal.co.nz
www.sportwaitakere.co.nz
www.sportwaitakere.nz
www.turbotouch.org.nz
www.ulyssesnelson.org.nz
www.upperhuttrifleclub.co.nz
www.waibopfootball.co.nz
www.waihekeunited.org.nz
www.waihibeachtennisclub.co.nz
www.waihoraclaytarget.co.nz
www.waitakererugby.co.nz
www.westernafc.com
www.whangaroasportfishingclub.co.nz
www.woolstonparkindoorbowls.org.nz

Other certificates including the domain name sportsground.com

(limited to 100 certificates)
www.nelsoncarclub.co.nz
www.blenheimgolfclub.co.nz
www.sportsground.com
sporty.co.nz
support.sportsground.com
www.tabletennis.org.nz
sporty.co.nz
www.sportsground.com
support.sportsground.com
www.sportsground.com
support.sportsground.com
northcanterburyrugby.co.nz
support.sportsground.com
www.nztua.com
www.sportsground.com
www.schoolground.com
support.sportsground.com
support.sportsground.com
hastings-central.school.nz
ultrarunner.org.nz
www.sportsground.com
www.oacnz.org
www.sportsground.com
sporty.co.nz
aafl.co.nz
support.sportsground.com
sporty.co.nz
support.sportsground.com
sporty.co.nz
northharbourtag.co.nz
trenthamrifleclub.co.nz
www.sportsground.com
support.sportsground.com
support.sportsground.com
sporty.co.nz
aucklandmarist.co.nz
support.sportsground.com
www.wmsc.org.nz
support.sportsground.com
www.sportsground.com
support.sportsground.com
support.sportsground.com
lucknow.school.nz
www.badmintonhb.co.nz
pioneerbasketballclub.co.nz
www.melrosetargetshooting.co.nz
www.sportsground.com
basketballtaranaki.co.nz
sporty.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for www.sportsground.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg9toFVjsPOsy/qqn6bH
8CzpW8Em89krclXDiWGDXmbf9xmat1nZ+nRL4+MS7RRY7tK3Na32I0PItSB9nfDC
UkdPTH6LmzgVfZoO0Tm8p/nwbQtqz0Ot1Yo9lUdkIxyMWVtTKzC9/A/dDVrj1h9d
hyc+21pM5erztbjhhHErvYSkqpA8f6ctAFEUp3Gmdq0+DW/5gdxwubPGBSrTIyo3
RTLinnPVEY8AiAndZtFJrsbyDSKGqsGyefVHzHXS43JOMUQTHDP2EK8CJoY8/Rjs
KmaClgk9UDWGa6jBFDTzxgSFWdFHngYQeqNcabkhQmzownp/xCasKJWiH0LBFide
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355993859192710920964233850212786820150143
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 18:29:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-08 18:29:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sportsground.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20963166567019118694720680905952429111505773475852683852531411884908240376950777059694025110968540249111469996745208058242973262592606714654088352890874464799396988988347783083705012844612760580508945980415338701889440464718215424082412283328259036831835833521765443444543894560743307658565863980958572050105947530522237824078272836838573050133475973819504702749907125811489302315669731576817537285754775418427240394415703843336921434336677421248751070033792693832020290589943484125228840352180695053599261158544812273098479505238080695963316150735124662597370450175088745960473187216653935344425839811473184951590441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6885f1d04fb8b69fe691b1092ca4bd191a75f2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1329 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cefb3630300000403004730450220110ff1fa0b5f082b1d6489fb3dbcbe7a38f0799a05f6ad1c2b05edc6fc694c7a022100b0dccda8d5772b82d831696de43cc994d28551a5d77b3deee9a66036aa1eacd200760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cefb3637e0000040300473045022100e9c0ae6b8123678c7e10a3a8595b144afde6fe52cebe2f0d1a819e20b979dc8602205aa53177ff22e9865237201f4c5585ab837864d08852e3ee47c859d29c32581d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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