www.vancleefarpels.com

Issued by R3

About this certificate

This digital certificate with serial number 04:54:37:bd:b8:b1:ef:71:2c:01:55:d0:e7:f7:83:46:cd:3a was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.vancleefarpels.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:54:37:bd:b8:b1:ef:71:2c:01:55:d0:e7:f7:83:46:cd:3a
Serial Number (int): 377106955178335106543556386059071024188730
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 48:63:d7:bb:11:eb:4f:21:ae:03:9c:37:ba:66:a0:dd:72:22:a4:93
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b5:95:ad:9e:67:a8:b4:44:ac:1f:36:2e:f2:c5:b2:36:e2:c2:b7:20
Fingerprint (sha256): 9e:e4:c7:0d:0f:85:d2:7a:a6:ef:61:86:5c:cc:b7:85:dd:c6:01:73:28:1b:9e:7c:5b:5c:2f:10:b7:60:de:27

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.vancleefarpels.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vancleefarpels.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.weboutique.vancleefarpels.cn
api.weboutique.vancleefarpels.com
assets.vancleefarpels.cn
assets.vancleefarpels.com
bjexpo.vancleefarpels.com
blob-video.vancleefarpels.cn
booking.vancleefarpels-event.com
c-video.vancleefarpels.cn
ca-video.vancleefarpels.cn
careers.vancleefarpels.com
cn.vancleefarpels.com
d-video.vancleefarpels.cn
demainsenmains.vancleefarpels.com
diamondcheck.vancleefarpels.com
e-video.vancleefarpels.cn
i-video.vancleefarpels.cn
maisonstory.vancleefarpels.cn
media.weboutique.vancleefarpels.cn
media.weboutique.vancleefarpels.com
mediastorage.vancleefarpels.com
payment.vancleefarpels.com
smartag.vancleefarpels.com
the-collection.vancleefarpels.com
time-nature-love-riyadh.vancleefarpels.com
tracking.vancleefarpels.com
vancleefarpels.com
vcaballet.vancleefarpels.com
vod-video.vancleefarpels.cn
weboutique.vancleefarpels.cn
weboutique.vancleefarpels.com
whenelegancemeetsart.vancleefarpels.com
www.dancereflections-vancleefarpels.cn
www.dancereflections-vancleefarpels.com
www.dancereflections.vancleefarpels.cn
www.lecolevancleefarpels.cn
www.lecolevancleefarpels.com
www.vancleefarpels-event.com
www.vancleefarpels.cn
www.vancleefarpels.com

Other certificates including the domain name vancleefarpels.com

(limited to 100 certificates)
secure.cn.vancleefarpels.com
intranet.richemont.com
intranet.richemont.com
weboutique.quality.vancleefarpels.com
intranet.richemont.com
weboutique.quality.vancleefarpels.com
dam.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
presslounge.vancleefarpels.com
linemedia.preprod.richemont.com
media.richemont.com
www.vancleefarpels.com
www.preprod2.vancleefarpels.cn
diamondcheck.vancleefarpels.com
intranet.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
intranet.richemont.com
www.vancleefarpels.com
www.quality.alange-soehne.com
vcaballet.vancleefarpels.com
weboutique.dev.vancleefarpels.com
linemedia.preprod.richemont.com
sihh2014.vancleefarpels.com
intranet.preprod.richemont.com
api.weboutique.quality.iwc.cn
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
vcaballet.vancleefarpels.com
www.quality.alange-soehne.com
media.richemont.com
vcaballet.vancleefarpels.com
weboutique.vancleefarpels.com
vcaballet.vancleefarpels.com
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
vcaballet.vancleefarpels.com
diamondcheck.vancleefarpels.com
www.quality.alange-soehne.com
intranet.staging.richemont.com
www.lecolevancleefarpels.com
intranet.quality.richemont.com
vcaballet.vancleefarpels.com
secure-www.vancleefarpels.com
weboutique.dev.vancleefarpels.com
intranet.dev.richemont.com
www.vancleefarpels.com
intranet.staging.richemont.com
8-seconds-of-luck.vancleefarpels.com
vcs.richemont.com
diamondcheck.vancleefarpels.com
intranet.richemont.com
linemedia.preprod.richemont.com
intranet.dev.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
sihh2014.vancleefarpels.com
media.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
yps.vancleefarpels.com
vcaballet.vancleefarpels.com
sihh2016.vancleefarpels.com
sihh2014.vancleefarpels.com
secure.www.vancleefarpels.com
intranet.richemont.com
vcaballet.vancleefarpels.com
weboutique.quality.vancleefarpels.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
org-timenaturelove.vancleefarpels.com
intranet.staging.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
sihh2014.vancleefarpels.com
sihh2014.vancleefarpels.com
sihh2014.vancleefarpels.com
intranet.richemont.com
www.quality.alange-soehne.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
intranet.richemont.com
www.vancleefarpels.com
linemedia.preprod.richemont.com
whenelegancemeetsart.quality.vancleefarpels.com
sihh2016.vancleefarpels.com
intranet.richemont.com
presslounge.vancleefarpels.com
api.weboutique.quality.iwc.cn
sihh2014.vancleefarpels.com
intranet.richemont.com
wwsip.richemont.com
sihh2016.vancleefarpels.com

Certificate

The complete raw certificate details for www.vancleefarpels.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufjQ2fm6jvvRXvJ0Npq6
Lrrdo/UQ2llYZdtpxfvW2pCWY5RRH5q1oyD6APAB28RD+cNjvOzwskHnNSs9pvg2
jC/s4RuNh3mnckWuYIKq5Gs8t8vzYSy15RXHbhzUDOfhBkAMjU7fdXN01CQObEPn
m7o41i9jvIYDVRDTwlOpNVavAL3PTknM1q0Lb16JidRqeUhNo+wvRT5QoMSJEIMh
EjwNxRrTuRWDZWwcUe7LhMoMU/OL4ObdKyUA3tq3Nn7EGnM1+I1ltgNdOZ3AxDTB
P8LGhgZ7dT6/9CsrGmVhn4CXML5teMewaubcqnVF7gVSmHOsDpqiDqIKdNyrM0CC
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377106955178335106543556386059071024188730
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 10:29:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 10:29:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vancleefarpels.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23476782075472015102640065016628933893956943382132275208364009510336592881637611025104639181450403149727223030365936223105840527990553848198492990595618221600508410331451195139989006460644196605840670795336029820561959742350388987526686585698025554119438027828714361411988845254690196073131980857816976801591752870098337347774274821914386633893631879214373156999109393164676681493362726270136634072739673575899318246107563614805344807748196106917432246433810556376600293716796506749211658621537097809336894872995046185372217055341432173260671310917198942799663069009831503610442435491090417728752599249589553202233923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4863d7bb11eb4f21ae039c37ba66a0dd7222a493
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1211 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjexpo.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blob-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.vancleefarpels-event.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demainsenmains.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondcheck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maisonstory.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediastorage.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartag.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-collection.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time-nature-love-riyadh.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcaballet.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vod-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whenelegancemeetsart.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dancereflections-vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dancereflections-vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dancereflections.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lecolevancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vancleefarpels-event.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vancleefarpels.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b3d65d81d0000040300473045022004f1af391eec6930f69a661c690c89e03ed4c3ce0ccb14c3045bfc0e8742c2cb022100f6345f13c051393c2cdb75f5bfbf0cc8693d2b039e3bcb0d660e60da4c6935e200760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b3d65d8710000040300473045022100d93f17374419c24a38c11f00ec0e991237e97125a5878d140bd75c52d4a1035a02201da030b0b7c58f6334f12249060394458ce556f36fa8cf4ccad28120e1a829d8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006cb73c534fee9e03ba9394f24071dfc7f2917a00db657e64255b2097bcfe29eb40d612985220da132b6f7d21fb84b284ea506face9e96469c24b0d616a42879c7dbfc576be8354807dc5e6c8a95cb0b3a193a78ebbfd09571fad9c80914de901c39be4c87876ed4d8a5d664b80bab5fd0ef2fe1916c5f3bad4d0f3d2e62f2bad576bb743f1c86df1ba032f17d1845b732420f8bb9c276a29a1bca9e645fde483365c90d2e156eb45bcbac5f86cd6d7beb3b1a7da7506eaaf7a18652bca60435fef5a89b0b6cfd45e183b48b2fe909f324580037983fe757a0b2516e6181ba5e5eeeb88b54650114fa816b3b8014ba68e301632553edd5f35dc82464526dd6aed