www.rozafinance.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c4:b1:fa:ef:a3:8e:06:f3:5f:c3:f6:83:65:4b:b1:20:d7 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.rozafinance.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:b1:fa:ef:a3:8e:06:f3:5f:c3:f6:83:65:4b:b1:20:d7
Serial Number (int): 328268778001707283631929711719130116202711
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:70:ff:2b:0b:95:df:b8:cf:db:0a:50:a6:6e:52:fa:25:4f:0c:eb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1b:b3:5e:b0:c4:03:9d:af:02:33:33:2f:78:40:f5:f8:ad:d0:22:c4
Fingerprint (sha256): 8b:fc:bd:29:b6:8d:a5:18:84:56:6c:94:e4:7f:48:02:4b:bb:3c:3f:62:77:9d:39:63:34:fb:3a:79:37:2f:09

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.rozafinance.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rozafinance.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

anchoragesportsmedicine.com
backyardbbqcatering.com
blackwoodsconsulting.com
commercialbuildinginsurance.com
easeyoursuffering.com
freemarketsite.com
hugeranking.com
instaroad.com
kaizenhealthsystemsinc.com
lifeovereverything.com
mischtrucking.com
palmafood.com
pavland.com
rozafinance.com
www.anchoragesportsmedicine.com
www.backyardbbqcatering.com
www.blackwoodsconsulting.com
www.commercialbuildinginsurance.com
www.easeyoursuffering.com
www.freemarketsite.com
www.hugeranking.com
www.instaroad.com
www.kaizenhealthsystemsinc.com
www.lifeovereverything.com
www.mischtrucking.com
www.palmafood.com
www.pavland.com
www.rozafinance.com
www.xn--nebig.com
xn--nebig.com

Other certificates including the domain name rozafinance.com

(limited to 100 certificates)
antonellabarba.com
www.rozafinance.com
www.xn--7dbeao6ae.com

Certificate

The complete raw certificate details for www.rozafinance.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHnjCCBoagAwIBAgISA8Sx+u+jjgbzX8P2g2VLsSDXMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MTMwOTQ1MjZaFw0yMzEwMTEwOTQ1MjVaMB4xHDAaBgNVBAMT
E3d3dy5yb3phZmluYW5jZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqwVcvfPfA04XybHRrUEthRco097DCT5wjQOrSdZL4MEM/4sprjhqBwmTt
fhYSrcuv3ejgpsQ1QPcp4oOhYyqY1gYnGMd2pLrO1DkmJvfCZfiy2M3PtXwZFmNq
cE4Iw4/7pl/v6Y3fhvBZX23LCK9VoxcsR6C7bwLhE66Ex9qGPLpqtj2F10XkTE/p
XBM802/vh5nz57HnZuEkiiKnxX/qfoo5WCE1Fvg5YZaxXLPVzSb+k2Bpq8O5opu2
M2tvEXqTe4EHGNbcHIqGStELrd/uNG8YcuJ10TRkI1cZL22pFqjmjbGFKsB9MxcY
sjMDEvmUFs5DYprbP6hHbuCuHDMNAgMBAAGjggTAMIIEvDAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFM9w/ysLld+4z9sKUKZuUvolTwzrMB8GA1UdIwQYMBaAFBQusxe3
WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0
cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j
ci5vcmcvMIICxwYDVR0RBIICvjCCArqCG2FuY2hvcmFnZXNwb3J0c21lZGljaW5l
LmNvbYIXYmFja3lhcmRiYnFjYXRlcmluZy5jb22CGGJsYWNrd29vZHNjb25zdWx0
aW5nLmNvbYIfY29tbWVyY2lhbGJ1aWxkaW5naW5zdXJhbmNlLmNvbYIVZWFzZXlv
dXJzdWZmZXJpbmcuY29tghJmcmVlbWFya2V0c2l0ZS5jb22CD2h1Z2VyYW5raW5n
LmNvbYINaW5zdGFyb2FkLmNvbYIaa2FpemVuaGVhbHRoc3lzdGVtc2luYy5jb22C
FmxpZmVvdmVyZXZlcnl0aGluZy5jb22CEW1pc2NodHJ1Y2tpbmcuY29tgg1wYWxt
YWZvb2QuY29tggtwYXZsYW5kLmNvbYIPcm96YWZpbmFuY2UuY29tgh93d3cuYW5j
aG9yYWdlc3BvcnRzbWVkaWNpbmUuY29tght3d3cuYmFja3lhcmRiYnFjYXRlcmlu
Zy5jb22CHHd3dy5ibGFja3dvb2RzY29uc3VsdGluZy5jb22CI3d3dy5jb21tZXJj
aWFsYnVpbGRpbmdpbnN1cmFuY2UuY29tghl3d3cuZWFzZXlvdXJzdWZmZXJpbmcu
Y29tghZ3d3cuZnJlZW1hcmtldHNpdGUuY29tghN3d3cuaHVnZXJhbmtpbmcuY29t
ghF3d3cuaW5zdGFyb2FkLmNvbYIed3d3LmthaXplbmhlYWx0aHN5c3RlbXNpbmMu
Y29tghp3d3cubGlmZW92ZXJldmVyeXRoaW5nLmNvbYIVd3d3Lm1pc2NodHJ1Y2tp
bmcuY29tghF3d3cucGFsbWFmb29kLmNvbYIPd3d3LnBhdmxhbmQuY29tghN3d3cu
cm96YWZpbmFuY2UuY29tghF3d3cueG4tLW5lYmlnLmNvbYINeG4tLW5lYmlnLmNv
bTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2
AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABiU7bDiwAAAQDAEcw
RQIhAOhA00MuvMYTNCd2pjbqjqedJG0lnSI7Z8/6rumpxfDlAiAURYUc7qQppBOl
o26T076ARoDK2ld/w0Um5RtQM4VuSwB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81
xJ4dCYEl7bSZAAABiU7bDpcAAAQDAEcwRQIhALaWK+uBeFuAIitm/HgJ7oZzCHPv
XZai04dZ2wFXqdMoAiBXoMgISSIlKnqMMvskPdR7vkRvZsdkx2beZ7ovdlp3OzAN
BgkqhkiG9w0BAQsFAAOCAQEAkFHgAGL9jABw6Bb+JoJYHRpi77VzjOTmMsYjRevw
Xyv7uzNGYXzRSQCVEVWOQiuFINlWsTBnWAOoRZwXViqfkdHyKMo+9LnPfU4Gde8T
Gaf0npRfmdvuf13T9G8AJ6n4NAkcOzEjusTzx5x82UdlgtlKvafFqNcHGw5tGz/o
dwk0lwT06PIffvjDoyV+UlWfIBC/5ks3AevZjUv60JGhK0PCSX0wcfPJ/KNhQbdA
/IrC9/BkHT5CSyvVmmByrwgPe0Jsdz9BmtH3n4c3Y52lQTLAeVMPbkMYRCmO9SQU
d1TCqAqozldlgOaQfTffdPak4czK0qs20pQF9lT2X9F6PQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsFXL3z3wNOF8mx0a1BL
YUXKNPewwk+cI0Dq0nWS+DBDP+LKa44agcJk7X4WEq3Lr93o4KbENUD3KeKDoWMq
mNYGJxjHdqS6ztQ5Jib3wmX4stjNz7V8GRZjanBOCMOP+6Zf7+mN34bwWV9tywiv
VaMXLEegu28C4ROuhMfahjy6arY9hddF5ExP6VwTPNNv74eZ8+ex52bhJIoip8V/
6n6KOVghNRb4OWGWsVyz1c0m/pNgaavDuaKbtjNrbxF6k3uBBxjW3ByKhkrRC63f
7jRvGHLiddE0ZCNXGS9tqRao5o2xhSrAfTMXGLIzAxL5lBbOQ2Ka2z+oR27grhwz
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328268778001707283631929711719130116202711
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 09:45:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 09:45:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rozafinance.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21555851631851689423490831011656724868447876088348477231278484037340998374319886222063417123442676921709918929554581227197900124427450731847065675329937512556654110567505915363066246364369635181035427053536140769097049522940607623858627813440030863921253773232511686613302923918959735697067874135031276323991483268949837424828943223306932249013415318567017341092653011503317863345264201957388064320256603127505041311110519238410498763078206464856374919918707111382244980531175597586463228520837384257600358042407704246226645668175409372927555333230109291432349185309241311545365904320156380222998072658645117812093709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf70ff2b0b95dfb8cfdb0a50a66e52fa254f0ceb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (702 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anchoragesportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backyardbbqcatering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackwoodsconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercialbuildinginsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easeyoursuffering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freemarketsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugeranking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instaroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaizenhealthsystemsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeovereverything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mischtrucking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmafood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pavland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rozafinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anchoragesportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backyardbbqcatering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackwoodsconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercialbuildinginsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easeyoursuffering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freemarketsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hugeranking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.instaroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaizenhealthsystemsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeovereverything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mischtrucking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palmafood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pavland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rozafinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--nebig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nebig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001894edb0e2c0000040300473045022100e840d3432ebcc613342776a636ea8ea79d246d259d223b67cffaaee9a9c5f0e502201445851ceea429a413a5a36e93d3be804680cada577fc34526e51b5033856e4b007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001894edb0e970000040300473045022100b6962beb81785b80222b66fc7809ee86730873ef5d96a2d38759db0157a9d328022057a0c8084922252a7a8c32fb243dd47bbe446f66c764c766de67ba2f765a773b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009051e00062fd8c0070e816fe2682581d1a62efb5738ce4e632c62345ebf05f2bfbbb3346617cd149009511558e422b8520d956b130675803a8459c17562a9f91d1f228ca3ef4b9cf7d4e0675ef1319a7f49e945f99dbee7f5dd3f46f0027a9f834091c3b3123bac4f3c79c7cd9476582d94abda7c5a8d7071b0e6d1b3fe87709349704f4e8f21f7ef8c3a3257e52559f2010bfe64b3701ebd98d4bfad091a12b43c2497d3071f3c9fca36141b740fc8ac2f7f0641d3e424b2bd59a6072af080f7b426c773f419ad1f79f8737639da54132c079530f6e431844298ef524147754c2a80aa8ce576580e6907d37df74f6a4e1cccad2ab36d29405f654f65fd17a3d