sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:79:86:8d:08:60:57:d5:57:fa:56:e3:40:14:bf:d3:f1:ce was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:79:86:8d:08:60:57:d5:57:fa:56:e3:40:14:bf:d3:f1:ce
Serial Number (int): 389802158959659136346329264139437444690382
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 22:0e:9d:63:47:51:18:8a:2d:09:6f:a3:d5:e4:99:67:af:c2:88:9e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1c:8d:71:bb:05:da:91:17:e2:fa:e5:8e:ac:be:24:ec:85:96:d6:d2
Fingerprint (sha256): 9f:2b:71:25:90:2d:22:1b:e1:c9:5c:f8:e3:d7:cc:09:30:d6:73:b5:f2:f5:04:11:f4:a0:a5:96:3d:30:cf:c0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aimsgames.co.nz
aucklandallstarsvolleyball.co.nz
aucklandcurling.nz
baseballfoundation.nz
basketballtaranaki.co.nz
baysathletics.co.nz
bowlsstadium.nz
cliftonrugbyclub.co.nz
cromwellfootballclub.co.nz
fbfc.co.nz
ferrymeadbaysfootball.co.nz
franklindirtkartclub.co.nz
gisbornespeedway.co.nz
hawkesbaymtb.co.nz
hbblades.com
hbcfct.org.nz
hbhockey.org.nz
kartsportcanterbury.co.nz
kartsportmarlborough.co.nz
kartsporttaranaki.co.nz
kartsportwhangarei.co.nz
kcac.org.nz
kcsh.co.nz
kcu.co.nz
kcu.nz
kelstongirls.school.nz
knowledgelibrary.co.nz
makesomenoise.nz
motuekahigh.school.nz
motuekanetball.co.nz
nelsonsuburbs.co.nz
northcitycricketclub.co.nz
ponekerugby.co.nz
poriruaindoorsports.co.nz
prebbletonrugby.co.nz
puketapuhb.school.nz
qpafc.co.nz
rollestoncollege.nz
sacredheartnapier.school.nz
softballcounties.co.nz
softballcounties.org.nz
softballfranklin.org.nz
sosouthland.org.nz
sporty.co.nz
stmaryshastings.school.nz
surftocity.co.nz
taurangarowingclub.co.nz
tsssa.org.nz
wheelblacks.com

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOpNn5SB1haYJtSY4C3y
Po6zBzEU7U+m2i6dTo/U+vr/j0sLU8FCc047V297HjYgxZH+EN9hdIshXyu9D3y2
/Q+9lBrc3PLwojw+TfEMWL+v2EuLh99MMebw0SIby6F2pTr32gN7/hGVC+9pWliu
5GCt2xm285fvGeoxgrQKqIOwsipH13LBceW+ZxHPzE9tSMTl+DxxqcLcpHfP+BoC
FYak4vi1Lj0TP1tVug8zuOURrQsRkCV3hm0d9v8FmwnA40oZBXp1IkymX76JpsV6
WuYBn9kbBiKpKzve6Pour/6rdfEiwb5Bx3iID1Q+1yM8Cx59NFzPKk5SlIoXg13t
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389802158959659136346329264139437444690382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 22:20:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-17 22:20:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24353293775621506035533319220899064943560440379138900085977699315326042393166053733186264380685173132790733104353390668443279190004062885136773579485567627270776578683513344250073913158073022714403256647299790536068575705956001354566847922259014310521344285286652183710941438626473652536370013178234500299718866336095861293248682671805177444526133603649958834999403987058324624399417850165169462805259113196333667250590673251615467451775944558814744524205508670844428276444135693682055719145532445138989477117902103890183259311968316429162648058801529851880167759695083265121750181057102911598759408357407707166010737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							220e9d634751188a2d096fa3d5e49967afc2889e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1047 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimsgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandallstarsvolleyball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandcurling.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballtaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baysathletics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsstadium.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliftonrugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cromwellfootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferrymeadbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklindirtkartclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisbornespeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaymtb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbblades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcfct.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsportcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsportmarlborough.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsporttaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsportwhangarei.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcac.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcsh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcu.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelstongirls.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledgelibrary.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makesomenoise.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motuekahigh.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motuekanetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonsuburbs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcitycricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponekerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poriruaindoorsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puketapuhb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qpafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollestoncollege.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartnapier.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballcounties.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballcounties.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballfranklin.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosouthland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryshastings.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surftocity.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taurangarowingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheelblacks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f9327d2170000040300483046022100bcc724fe44f6250f185f954e300708984e29f19e6e7c04c5ad3c5c3ed2dc23f1022100a45903664f740ed1650671b49876d19cd525e43911b27f4ea0191368694a597e00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f9327d22500000403004730450221008dcebdf700b72fb63c0d6e5505d8e6ba3d62503773ab18d302a3eb2a7a8b736202204d26c85c9dedccf794e284d036fae02ef55536939b51860d2da4c4dd573c8fc9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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