nyg.co

Issued by R3

About this certificate

This digital certificate with serial number 03:0f:47:19:4c:79:02:d3:7d:52:4f:60:b2:3f:8d:3e:a5:65 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nyg.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0f:47:19:4c:79:02:d3:7d:52:4f:60:b2:3f:8d:3e:a5:65
Serial Number (int): 266535599845267621476423882768728490681701
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 55:bf:45:e9:41:59:02:02:2c:5e:93:fd:16:dc:5e:1d:c0:ed:9c:27
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4f:18:68:45:fb:3a:48:f6:a7:91:b6:1a:fe:b8:a3:50:51:5f:45:4f
Fingerprint (sha256): 9f:d5:93:74:77:aa:66:16:82:0d:e2:4a:f9:af:78:be:9d:58:91:23:c0:ec:3e:2e:fe:9d:3c:5b:5f:2c:da:03

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nyg.co

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nyg.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alcorex.com
came.life
camerieri.co
christianmarketingcompany.com
comisionista.co
designercollection.in
divination.in
nyg.co
ofstudents.com
qchg.in
shessocozy.com
teccoluxury.com
vazhaifoundation.in
whatsleft.win
www.alcorex.com
www.came.life
www.camerieri.co
www.christianmarketingcompany.com
www.comisionista.co
www.designercollection.in
www.divination.in
www.nyg.co
www.ofstudents.com
www.qchg.in
www.shessocozy.com
www.teccoluxury.com
www.vazhaifoundation.in
www.whatsleft.win
www.xn--vuq861boxb8x1c.co
xn--vuq861boxb8x1c.co

Other certificates including the domain name nyg.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for nyg.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgISAw9HGUx5AtN9Uk9gsj+NPqVlMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MTUwNjIyMTNaFw0yMzEwMTMwNjIyMTJaMBExDzANBgNVBAMT
Bm55Zy5jbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMXRS28gBlQl
EIGxdu4DTPuJlbbkbTxHXQ+mRCovmAqNHv4L1crpCGQZatk+J12Ihky3E/U4FDdH
IlYmLeDyiOhYSqrViTmgsjN/ZbDlBmaG05D7wJ+GPwCu5sSZvOaZzlZVWEGvwk2h
CZ9fK25aCJlzs/GnCbfWzwgAD2AjuJR9qfxqCadBk/f47NE/dbC6TBRLMzGq1J2z
Majs1sx5e+//TM6Yy7qFkq5JQ4LpoElWyz7/KlI0pg0gBnIpMlidFTumJwTy1eSW
8Fz1tW492xpLrK1ggKLw1Du/IKRH8YdCI5cO8kL+VV7qCGQCAEjml+XNLz48pNy/
wSy3QxhI2xECAwEAAaOCBDUwggQxMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUVb9F
6UFZAgIsXpP9FtxeHcDtnCcwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsU
wsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5j
ci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggI7BgNV
HREEggIyMIICLoILYWxjb3JleC5jb22CCWNhbWUubGlmZYIMY2FtZXJpZXJpLmNv
gh1jaHJpc3RpYW5tYXJrZXRpbmdjb21wYW55LmNvbYIPY29taXNpb25pc3RhLmNv
ghVkZXNpZ25lcmNvbGxlY3Rpb24uaW6CDWRpdmluYXRpb24uaW6CBm55Zy5jb4IO
b2ZzdHVkZW50cy5jb22CB3FjaGcuaW6CDnNoZXNzb2NvenkuY29tgg90ZWNjb2x1
eHVyeS5jb22CE3ZhemhhaWZvdW5kYXRpb24uaW6CDXdoYXRzbGVmdC53aW6CD3d3
dy5hbGNvcmV4LmNvbYINd3d3LmNhbWUubGlmZYIQd3d3LmNhbWVyaWVyaS5jb4Ih
d3d3LmNocmlzdGlhbm1hcmtldGluZ2NvbXBhbnkuY29tghN3d3cuY29taXNpb25p
c3RhLmNvghl3d3cuZGVzaWduZXJjb2xsZWN0aW9uLmlughF3d3cuZGl2aW5hdGlv
bi5pboIKd3d3Lm55Zy5jb4ISd3d3Lm9mc3R1ZGVudHMuY29tggt3d3cucWNoZy5p
boISd3d3LnNoZXNzb2NvenkuY29tghN3d3cudGVjY29sdXh1cnkuY29tghd3d3cu
dmF6aGFpZm91bmRhdGlvbi5pboIRd3d3LndoYXRzbGVmdC53aW6CGXd3dy54bi0t
dnVxODYxYm94Yjh4MWMuY2+CFXhuLS12dXE4NjFib3hiOHgxYy5jbzATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AHoyjFTYty22
IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiVhtulkAAAQDAEgwRgIhAPGa7XdL
En61zyqLMsTvMu+3earydpVOEpX5ZPMJ6z5hAiEA9qOgH2ITqbQ4FE5KdeEVep8k
DQsBQTe71D3Cj+H984IAdgCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yC
igAAAYlYbbqEAAAEAwBHMEUCIF+C0Br73QTc/NZsxaNmP56x0V6u60ctS4PRp6oH
jEs4AiEAvY0/TA+A47tRz6QJRXNltIc/FrpR6w2VtLRIQnY2apIwDQYJKoZIhvcN
AQELBQADggEBAJQpdLHGoXqtajBhIt8Swe+OQyhJLyumy3dC6mCi11+06hkE0KhA
B4PbX4tmx9q9REipAvPTd/ucpkTzbj/mrsMnddLo6rPSE5hmE0I+FVpa5OS2FtPn
0P496Va7+PnA+2Y9uSyeDSFyEGMlVCsY6GRn1+RlYomEcCUD6vNtocAS4ZRbsshX
3lRq+SecCVoAequiZofV9bFncMMqosmkhvex+KmbpKKMQ8etRgTclWPdhxsYBcMu
qM5asXVwtSxLwJE2s8Q3Ib5nr7Np5pEDJhKkGZ+PwOfU9l1Wl+BDripNAyc6/jLG
B7St0jsD9fJjRujV+O9yDVkwvpTudWNnauQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdFLbyAGVCUQgbF27gNM
+4mVtuRtPEddD6ZEKi+YCo0e/gvVyukIZBlq2T4nXYiGTLcT9TgUN0ciViYt4PKI
6FhKqtWJOaCyM39lsOUGZobTkPvAn4Y/AK7mxJm85pnOVlVYQa/CTaEJn18rbloI
mXOz8acJt9bPCAAPYCO4lH2p/GoJp0GT9/js0T91sLpMFEszMarUnbMxqOzWzHl7
7/9MzpjLuoWSrklDgumgSVbLPv8qUjSmDSAGcikyWJ0VO6YnBPLV5JbwXPW1bj3b
GkusrWCAovDUO78gpEfxh0Ijlw7yQv5VXuoIZAIASOaX5c0vPjyk3L/BLLdDGEjb
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266535599845267621476423882768728490681701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 06:22:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 06:22:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nyg.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24972153123900766538506199286528460270167019566206593084312721637812191215159602992722143005576915834698436953955391613561043771930002939956974527659492830594653057401122576518084369286876189590210723605643177152935764523643658271928324032659678557832278886429136624521807155495288691578187863639717349258519855795391996374713689562312070699532045154455007852500614910322441430439551224537514100163823540841844036301619693787617473033640428890699152947835983373819589827599776747361784907238650168430311664254931025156679319691350766866479500332931632749317612867719861438355858286806423342294332131154224128627104529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55bf45e9415902022c5e93fd16dc5e1dc0ed9c27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (562 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alcorex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'came.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camerieri.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianmarketingcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comisionista.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designercollection.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divination.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyg.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofstudents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qchg.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shessocozy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teccoluxury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vazhaifoundation.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsleft.win'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcorex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.came.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camerieri.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christianmarketingcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comisionista.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.designercollection.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divination.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyg.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofstudents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qchg.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shessocozy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teccoluxury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vazhaifoundation.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whatsleft.win'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--vuq861boxb8x1c.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--vuq861boxb8x1c.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189586dba590000040300483046022100f19aed774b127eb5cf2a8b32c4ef32efb779aaf276954e1295f964f309eb3e61022100f6a3a01f6213a9b438144e4a75e1157a9f240d0b014137bbd43dc28fe1fdf382007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189586dba84000004030047304502205f82d01afbdd04dcfcd66cc5a3663f9eb1d15eaeeb472d4b83d1a7aa078c4b38022100bd8d3f4c0f80e3bb51cfa409457365b4873f16ba51eb0d95b4b4484276366a92
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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