www.avgcargo.duy7.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:14:4c:7a:e8:2d:af:a9:70:47:f6:85:c9:c7:b4:b2:54:34 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.avgcargo.duy7.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:4c:7a:e8:2d:af:a9:70:47:f6:85:c9:c7:b4:b2:54:34
Serial Number (int): 268244164630734564140194773256994401965108
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 83:ed:f4:25:63:b1:77:4c:08:f4:4c:98:58:92:d8:36:0f:f8:fa:ec
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 19:d9:13:8b:da:91:e2:db:e1:d4:68:82:f0:9c:f1:0f:dc:04:45:2d
Fingerprint (sha256): 93:c9:f4:c0:57:1f:29:1f:65:07:fb:6c:70:f1:bc:a5:1c:4f:9e:34:30:95:18:01:8f:3e:da:3b:20:56:2f:69

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.avgcargo.duy7.name.vn

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.avgcargo.duy7.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeresort.duy7.name.vn
athena.duy7.name.vn
avgcargo.duy7.name.vn
byluunhattuan.duy7.name.vn
byluunhattuan.vn
chudoso.duy7.name.vn
knlogistics.duy7.name.vn
maydonggoistc.com
maydonggoistc.duy7.name.vn
tongkhosonbacninh.duy7.name.vn
vasa.duy7.name.vn
vieclambacninhbacgiang.duy7.name.vn
www.aeresort.duy7.name.vn
www.athena.duy7.name.vn
www.avgcargo.duy7.name.vn
www.byluunhattuan.duy7.name.vn
www.byluunhattuan.vn
www.chudoso.duy7.name.vn
www.knlogistics.duy7.name.vn
www.maydonggoistc.duy7.name.vn
www.tongkhosonbacninh.duy7.name.vn
www.vasa.duy7.name.vn
www.vieclambacninhbacgiang.duy7.name.vn

Other certificates including the domain name duy7.name.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.avgcargo.duy7.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHUjCCBjqgAwIBAgISAxRMeugtr6lwR/aFyce0slQ0MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMjQxMzU2NTVaFw0yNDA0MjMxMzU2NTRaMCQxIjAgBgNVBAMT
GXd3dy5hdmdjYXJnby5kdXk3Lm5hbWUudm4wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCbGp+i9K8EfOmmzbWN5ZHuCrp5ptua0zcLu9nR2w/4a3Xs8KNo
JwRULQ42EChThn433n5V01vDnL0Qt21QkYUkqSymseVU3NkdB/rp7XWFv9O0joQI
En1eqqzf2dwYUjvmJS872T/WBhKGZ6AZw5VRC+ZNZqgi+27xGgizl2fZgAVT+EDq
k9RUVObZY9Q55YMeAwprSsEmkyOgYZnH0ipYUnlRbgsdAaailu8ybSX2iS3zIVhv
xSUPZfoslDiE+SCGdVInIna7qkV4XcGRTkHoEWg7K7+Kui58nVZ/b1gkD4HTUeC8
j9IRinm5UMQLs6gAIAfTv5zMegqugm/aTI+RAgMBAAGjggRuMIIEajAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFIPt9CVjsXdMCPRMmFiS2DYP+PrsMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIICdgYDVR0RBIICbTCCAmmCFWFlcmVzb3J0LmR1eTcubmFt
ZS52boITYXRoZW5hLmR1eTcubmFtZS52boIVYXZnY2FyZ28uZHV5Ny5uYW1lLnZu
ghpieWx1dW5oYXR0dWFuLmR1eTcubmFtZS52boIQYnlsdXVuaGF0dHVhbi52boIU
Y2h1ZG9zby5kdXk3Lm5hbWUudm6CGGtubG9naXN0aWNzLmR1eTcubmFtZS52boIR
bWF5ZG9uZ2dvaXN0Yy5jb22CGm1heWRvbmdnb2lzdGMuZHV5Ny5uYW1lLnZugh50
b25na2hvc29uYmFjbmluaC5kdXk3Lm5hbWUudm6CEXZhc2EuZHV5Ny5uYW1lLnZu
giN2aWVjbGFtYmFjbmluaGJhY2dpYW5nLmR1eTcubmFtZS52boIZd3d3LmFlcmVz
b3J0LmR1eTcubmFtZS52boIXd3d3LmF0aGVuYS5kdXk3Lm5hbWUudm6CGXd3dy5h
dmdjYXJnby5kdXk3Lm5hbWUudm6CHnd3dy5ieWx1dW5oYXR0dWFuLmR1eTcubmFt
ZS52boIUd3d3LmJ5bHV1bmhhdHR1YW4udm6CGHd3dy5jaHVkb3NvLmR1eTcubmFt
ZS52boIcd3d3LmtubG9naXN0aWNzLmR1eTcubmFtZS52boIed3d3Lm1heWRvbmdn
b2lzdGMuZHV5Ny5uYW1lLnZugiJ3d3cudG9uZ2tob3NvbmJhY25pbmguZHV5Ny5u
YW1lLnZughV3d3cudmFzYS5kdXk3Lm5hbWUudm6CJ3d3dy52aWVjbGFtYmFjbmlu
aGJhY2dpYW5nLmR1eTcubmFtZS52bjATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMG
CisGAQQB1nkCBAIEgfQEgfEA7wB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7
v6s52IRzAAABjTv5Yp8AAAQDAEYwRAIgU0PEFoNsjparj12vh+esYMOneFQQbYzR
ijXsa4OjfX0CIDp+IQHor3+oNcVjLZGKzK5pvU/fsguorRZwBFZ3kNPcAHYAO1N3
dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGNO/lingAABAMARzBFAiEA
oxTQoxgJz4jq2A27pAV2PuoaPC2ILN2pXSOAZ3uHyzsCIBK14oF/EMlv8LynbmDt
V1qLsQGle0OMVk0lxWNJZOa5MA0GCSqGSIb3DQEBCwUAA4IBAQA5XDSAEZ7t+MDf
0ngApQNNKPcYAkk2cdUhUgCjNTGwqLa96iei6g4aXWYthxgBzf603xUwl8vys+fF
WPaFMsF4ej6DmR+322JD7rbwkIGnzCXB7RIr1AoNd09711dWNqtsNgawDM7QAYvc
MO+H0WkWJOyOqPrwZ/nP/gcUHMtuzIs6oKWAlM4tDzyqYkekEIZbo9L81c80U5Pc
4xfaMlCxkZFXknV4XmvDWBreimjG76WrNdsr5daoZVGybFCb5PvOdSauBTeUL5wf
PqreqwtRGs0P3pnlEfL8EZWJot2q/VUjjFX8oDq5NGDFlCh/AYS5EUizQJDvcaCg
jLSl7bXs
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxqfovSvBHzpps21jeWR
7gq6eabbmtM3C7vZ0dsP+Gt17PCjaCcEVC0ONhAoU4Z+N95+VdNbw5y9ELdtUJGF
JKksprHlVNzZHQf66e11hb/TtI6ECBJ9Xqqs39ncGFI75iUvO9k/1gYShmegGcOV
UQvmTWaoIvtu8RoIs5dn2YAFU/hA6pPUVFTm2WPUOeWDHgMKa0rBJpMjoGGZx9Iq
WFJ5UW4LHQGmopbvMm0l9okt8yFYb8UlD2X6LJQ4hPkghnVSJyJ2u6pFeF3BkU5B
6BFoOyu/iroufJ1Wf29YJA+B01HgvI/SEYp5uVDEC7OoACAH07+czHoKroJv2kyP
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268244164630734564140194773256994401965108
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 13:56:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 13:56:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.avgcargo.duy7.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19580065846473116689266027292621191636801867522363076658491955379382662240324878149731187210375685035777653083369658466241492667909342803723860398009348253900842445249597596395548465915019424370232859589600980295244011170875057697004588620185709447437496237337388668369837921614012128287516832015248306293020310602861062265555497644808098442581671157540439822901988582258268633961228687618053227988988413647768795058539648917117269369606954944240471889459029494376826488729212622131491820641121510075283045161641407012647949677593957762546777660014603190549326974083680580575407462018043077189063051421347996916027281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83edf42563b1774c08f44c985892d8360ff8faec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (621 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeresort.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athena.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avgcargo.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byluunhattuan.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byluunhattuan.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chudoso.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knlogistics.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maydonggoistc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maydonggoistc.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tongkhosonbacninh.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vasa.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vieclambacninhbacgiang.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aeresort.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athena.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avgcargo.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.byluunhattuan.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.byluunhattuan.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chudoso.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knlogistics.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maydonggoistc.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tongkhosonbacninh.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vasa.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vieclambacninhbacgiang.duy7.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d3bf9629f000004030046304402205343c416836c8e96ab8f5daf87e7ac60c3a77854106d8cd18a35ec6b83a37d7d02203a7e2101e8af7fa835c5632d918accae69bd4fdfb20ba8ad167004567790d3dc0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d3bf9629e0000040300473045022100a314d0a31809cf88ead80dbba405763eea1a3c2d882cdda95d2380677b87cb3b022012b5e2817f10c96ff0bca76e60ed575a8bb101a57b438c564d25c5634964e6b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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