sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:36:b6:52:d2:5d:03:9a:75:52:c5:a4:69:31:80:cd:fd:05 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:b6:52:d2:5d:03:9a:75:52:c5:a4:69:31:80:cd:fd:05
Serial Number (int): 279954455139262022575954769941180585999621
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8b:5d:08:d1:e6:a3:e6:c8:6d:b4:04:c2:68:ae:1b:61:86:8d:2b:9d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0d:ee:0f:4e:fa:69:99:42:9b:0e:e6:9d:c8:1c:c9:aa:99:d6:18:07
Fingerprint (sha256): 90:32:b4:32:90:d1:ef:86:8e:13:32:fa:4a:f0:6d:ca:8c:8d:b4:02:e0:b1:fc:4f:b8:96:2d:c1:b0:ca:65:54

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akaranacityrifleclub.co.nz
basketballhawkesbay.co.nz
bowlswaikato.co.nz
canterburywaterpolo.org.nz
cashmere.school.nz
countiesmanukaurugbyleague.co.nz
crossrecreationcentre.co.nz
cyclingsc.co.nz
eden.rugby
edenrugby.co.nz
feildingfarmersmarket.co.nz
feildingfarmersmarket.net.nz
feildingfarmersmarket.org.nz
glenfieldrugbyleague.co.nz
greenacrescountry.org.nz
hampsteadclub.co.nz
havelocknorth.rugby
hawkesbay.basketball
hawkesbaynetball.co.nz
hbmagpies.co.nz
hbnetball.co.nz
hbrugby.co.nz
highlightcam.co.nz
hockeymarlborough.org.nz
hokowhitubridge.org.nz
hpnc.org.nz
karakarugbyclub.co.nz
kjcc.org.nz
marsdensport.school.nz
membermanager.co.nz
merivalepap.co.nz
mountsports.co.nz
nzblackpowder.nz
nzssfootball.co.nz
ponsonbyrugby.co.nz
referees.co.nz
schoolsport.nz
schoolsportnz.co.nz
schoolsportnz.org.nz
sked.co.nz
southcanterbury.basketball
sportauckland.co.nz
sportauckland.org.nz
sporty.org.nz
taradaleint.school.nz
totaltouch.org.nz
turbotouch.co.nz
turbotouch.org.nz
waihibeachtennisclub.co.nz
waimakunited.org.nz
wellingtonsoftball.org.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)
sporty.org.nz
www.sportycrm.com
sporty.org.nz
sporty.org.nz
www.giafc.co.nz
sportycrm.com
sporty.org.nz
fdmc.school.nz
arrowtownrugby.co.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
sporty.org.nz
sporty.org.nz

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEv50975JmHaHadgRIPS
cR2hLpx7H51yiQ/Uak5UO1FD+uaYmmgIXQ8yjFaj2tw4UZNrmNUz49sywogDsvFW
pPKo+Db8i3/MOw5TdBSjw8575eMcTrCZQeHg3C76g8Xx3L/yrYwZnHGAbwim15pD
tv5r68qusu6wd7zHZ95ox1CzG5Fof7tzHAkyL2aCG/+mKSO+VMnZzEe+eQooxAac
0KHJ7Em6+c5P9nvIWNX/J8rK3zPzIHP/tShQFj27Zc7+GVy3olkMojtuTqK2MoSd
alYJ8Pvei/I3ns54wivQPxTmlda+Og3Q+TfWcHcOiTHyTV5HMl1WBqpZ2MG9KMGC
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279954455139262022575954769941180585999621
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 00:15:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 00:15:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24780172880628428541254126599629721593908031006503272329670156179572488343196604315378278472594619287129801438281158310248899887163167825038104558696584657996041805409863043511245517004167543922688655821322058092607937691762527418622256460410332431073830174088845510656914906717040521533589375376174925332931477943902163657179379926430353972465470475600341983465938172941696817644094424292131887645868676650578345062043726159861672042140252128725921371157800231268264643498271110705081282060551335965897965414855712451429214939756668008891776485652016506767041679586881768355480526531212225531129209918513684911587917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b5d08d1e6a3e6c86db404c268ae1b61868d2b9d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cfb3caaa90000040300483046022100b831863c2a46868df5e1af07aece653ca61710764234f38dede42775dca3af08022100b882df8555d21dbbae7477d7a2cf5ab4e27a2ee0311724338c902abcddd0fba700770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cfb3caae20000040300483046022100fe92be06f4232bdf737493769dfe9ca7ffc9c4011a6b1063ee7188cb6d6bc5eb022100ba4ae0644b89fbe89b3476ca65b8e5fcf19360bb7c7e8a689ad4d75d6fa86775
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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