bejih.com

Issued by R3

About this certificate

This digital certificate with serial number 03:8f:2b:20:09:c2:c8:d2:96:ba:86:5f:b2:5c:07:2b:55:dd was issued on by Let's Encrypt.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bejih.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8f:2b:20:09:c2:c8:d2:96:ba:86:5f:b2:5c:07:2b:55:dd
Serial Number (int): 310054559420267266260967696926348818470365
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:fd:9c:5c:25:27:f7:3d:a7:63:fa:00:6a:0c:82:e1:98:41:d4:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a4:9e:b8:1f:47:e7:ff:b3:ad:fe:c6:61:0d:59:f5:ec:92:f7:34:34
Fingerprint (sha256): 9a:5f:78:bb:c2:83:bf:82:c5:e5:ad:ce:ae:1f:60:14:a3:3a:e0:91:5c:11:09:c6:a4:22:ec:e0:6d:a8:55:7c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bejih.com

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bejih.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aasdsloth.gsm.cornell.edu
accreditation-dev.gatewaycc.edu
activityreport.msf.org
apidevdocs.trinet.com
barber.elitelearning.com
bejih.com
c10.nrostatic.com
cactqa.rutgers.edu
cams.elitelearning.com
ci.boulder.co.us
climdyn.usc.edu
communitytestsite5.uaf.edu
coronavirus.dev.purdue.edu
coronavirus.purdue.edu
coronavirus.vi.gov
dev-national-review.pantheon.io
developers.banorte.com
dp-homepage.usc.edu
ectvf.rice.edu
enrollment.honors.uga.edu
entrepreneurship.umd.edu
events.parchment.com
gameon.johnsoncontrols.com
harvardheroes.harvard.edu
healthtalks.baptisthealth.com
idea.ipi-singapore.org
interuss.lfprojects3.linuxfoundation.org
joukowsky.brown.edu
ktes.nationalchickencouncil.org
learn.healthgrades.com
m.beready2retire.com
mc-staging-library.web.viu.ca
nolimitcity.gsm.cornell.edu
nrostatic.com
one.toronto.edu
president-search-staging.sfsu.edu
protect.dev.purdue.edu
protect.test.purdue.edu
rd.lls.edu
redesign-mexico.burtsbees.com
stage.nationalparks.org
staging-experiences.acg.aaa.com
summitbrewing.com
test-blog.nobelbiocare.com
test-uwbwww.site1.uwb.edu
tornado-staging.sfsu.edu
tornado.sfsu.edu
www-ccd.usc.edu
www-dev.gccaz.edu
www.bienpartir.nestle.ca
www.harvardheroes.harvard.edu
ying77.krtv.com
zbane.gsm.cornell.edu

Other certificates including the domain name bejih.com

(limited to 100 certificates)
bejih.com
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
aasdsloth.gsm.cornell.edu
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com

Certificate

The complete raw certificate details for bejih.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310054559420267266260967696926348818470365
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 20:11:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 20:11:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bejih.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9afd9c5c2527f73da763fa006a0c82e19841d49a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1295 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aasdsloth.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accreditation-dev.gatewaycc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activityreport.msf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidevdocs.trinet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barber.elitelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bejih.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c10.nrostatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cactqa.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cams.elitelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.boulder.co.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climdyn.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communitytestsite5.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirus.dev.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirus.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirus.vi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-national-review.pantheon.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.banorte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-homepage.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ectvf.rice.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrollment.honors.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entrepreneurship.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.parchment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameon.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvardheroes.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthtalks.baptisthealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idea.ipi-singapore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interuss.lfprojects3.linuxfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joukowsky.brown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ktes.nationalchickencouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.healthgrades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beready2retire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mc-staging-library.web.viu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nolimitcity.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrostatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.toronto.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'president-search-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protect.dev.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protect.test.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.lls.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redesign-mexico.burtsbees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nationalparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-experiences.acg.aaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summitbrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-blog.nobelbiocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-uwbwww.site1.uwb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tornado-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tornado.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ccd.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.gccaz.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bienpartir.nestle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harvardheroes.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ying77.krtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zbane.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b2094cc0b0000040300483046022100a32a78833db14dfee6a2aadc9c3efd38fd947779b586a900efd6f7ab65799d32022100b3448743abfca84b0c8e15044057bf9fe6eb3acf6f4864ff45f969235537aa08007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b2094cc390000040300473045022100c66ef987c67fbcfd22faf5e85dea3930388d7efa24dbe3a54a8e33bc59c0d0bf0220574136e613f6428f00ed4b491d45ed8977b3a8dbd30f4ab36aa1032b47fe3d44
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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