sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:50:0e:c3:5f:44:45:e3:31:15:ad:1f:c3:ec:83:a9:e7:4b was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:50:0e:c3:5f:44:45:e3:31:15:ad:1f:c3:ec:83:a9:e7:4b
Serial Number (int): 288579070771022276652063088600756039313227
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:72:89:44:31:e5:00:4b:27:e8:11:55:11:45:d2:d0:d1:d4:a6:95
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 62:0c:81:ef:a9:ff:9f:88:97:23:d7:04:eb:da:aa:21:2f:59:3f:55
Fingerprint (sha256): 9a:4a:7d:d6:af:d5:a5:46:65:c8:55:ea:f2:3d:9d:96:30:29:eb:00:da:f0:c9:f7:8b:bd:fa:d4:d5:9e:0b:63

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akaranacityrifleclub.co.nz
aurfc.co.nz
belfastrugby.co.nz
canterburywaterpolo.org.nz
cdcricket.co.nz
centralcitybaseball.org.nz
crossrecreationcentre.co.nz
edenrugby.co.nz
flaxmillbaymotel.co.nz
goodmanrural.co.nz
greenislandbadmintonclub.net.nz
hampsteadclub.co.nz
havelocknorthbridgeclub.co.nz
hawkesbayrugbyreferees.co.nz
hawkfootball.org.nz
hbcricket.co.nz
hbmagpies.co.nz
hbreds.nz
hbrfu.co.nz
hbru.co.nz
healthyfamiliesinvercargill.org.nz
highlightcam.co.nz
hillseekers.co.nz
hillseekers4wd.co.nz
hockeymarlborough.org.nz
hpnc.org.nz
huttaikido.org.nz
invercargillnetball.co.nz
karakarugbyclub.co.nz
kjcc.org.nz
magpies.co.nz
maristrugby.org.nz
marsdensport.school.nz
merivalepap.co.nz
mtsquashclub.co.nz
nelsonnetball.co.nz
netballsouthcanterbury.co.nz
northshorerugby.co.nz
nzblackpowder.nz
nzssfootball.co.nz
papakurarugbyleague.co.nz
photocard.co.nz
rangatiragolf.co.nz
schoolsportnz.org.nz
sportauckland.co.nz
sportauckland.org.nz
sporty.org.nz
totaltouch.org.nz
turbotouch.co.nz
turbotouch.org.nz
wellingtonsoftball.org.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)
sporty.org.nz
www.sportycrm.com
sporty.org.nz
sporty.org.nz
www.giafc.co.nz
sportycrm.com
sporty.org.nz
fdmc.school.nz
arrowtownrugby.co.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHjUv307aP4KSw/wgVMI
NwRqm1DVTcXrx82skFgX4vnfDw2tV9/QXcwr/NL5axXkQ6mq8PtxP5drh9IYcQ9a
W1Wyajb+gczxzRDJPKh8OYTUWw2H2LNcq3zOznQ07c4I987V7B6EMY59jy2cZKWW
XCemXlj7WgFV/XBQPhdJbaONNSbpGY+VaRBF9ewCgyQUnAKgS7YxHRClGC8Ndbqu
2Zxl4p4Z8GqPTtpvOjZAOFlZB/O5c+DOAwIvOTH9JM0rzQQGIU8hnKw16qLp/Wa+
jy2ofah6yBBHCKeD1LHpA104v8/LIkRsIfqgTbrWAcNVdiAhMnFMcHEcyWn4Os8l
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288579070771022276652063088600756039313227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 21:07:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-20 21:07:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25812198223025421137281303683007200539822984620185373255243288740787807185590522856869457126722682540161048484332474053396637747019991721987082729706765069701548371892325913324651159076487789088436610203830941689151337518946418116832675963941569182101982884639542400487604436502149326585526368491408659801122174582784051806262305270229404884199867991217984904497048222012663374584486735972928934743513299356031055914648258709542233199156505295109411750100798003631440685915891053330866501175624967633532473636438602134195159278397383813055586294929023415957083701680842819229339606787540984866305297329224127064516009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb72894431e5004b27e811551145d2d0d1d4a695
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1090 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfastrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018fa2584b160000040300473045022100f2d5a5373d04e77c7aec92fe8ad216f3e39d300619575968cc251753dfda4ac40220027e03bdedd2224238abc42f00c18440b3bbed8212e67ec0cf1aa3916ed7514700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fa2584b3c000004030046304402205275653256fe3ec908ebc5f7831b10d8fe799e7b96bdbd59069afb038ff0098d02207311848862877c9fbf30d7a4aa2e1331b1166a9bfc7a4296a8b7cf548a485229
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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