nyg.co
Issued by R3
About this certificate
This digital certificate with serial number 03:0f:47:19:4c:79:02:d3:7d:52:4f:60:b2:3f:8d:3e:a5:65 was issued on by Let's Encrypt.
With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=nyg.co
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:0f:47:19:4c:79:02:d3:7d:52:4f:60:b2:3f:8d:3e:a5:65Serial Number (int): 266535599845267621476423882768728490681701
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 55:bf:45:e9:41:59:02:02:2c:5e:93:fd:16:dc:5e:1d:c0:ed:9c:27
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 4f:18:68:45:fb:3a:48:f6:a7:91:b6:1a:fe:b8:a3:50:51:5f:45:4f
Fingerprint (sha256): 9f:d5:93:74:77:aa:66:16:82:0d:e2:4a:f9:af:78:be:9d:58:91:23:c0:ec:3e:2e:fe:9d:3c:5b:5f:2c:da:03
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate nyg.co
30
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nyg.co
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
alcorex.com
came.life
camerieri.co
christianmarketingcompany.com
comisionista.co
designercollection.in
divination.in
nyg.co
ofstudents.com
qchg.in
shessocozy.com
teccoluxury.com
vazhaifoundation.in
whatsleft.win
www.alcorex.com
www.came.life
www.camerieri.co
www.christianmarketingcompany.com
www.comisionista.co
www.designercollection.in
www.divination.in
www.nyg.co
www.ofstudents.com
www.qchg.in
www.shessocozy.com
www.teccoluxury.com
www.vazhaifoundation.in
www.whatsleft.win
www.xn--vuq861boxb8x1c.co
xn--vuq861boxb8x1c.co
came.life
camerieri.co
christianmarketingcompany.com
comisionista.co
designercollection.in
divination.in
nyg.co
ofstudents.com
qchg.in
shessocozy.com
teccoluxury.com
vazhaifoundation.in
whatsleft.win
www.alcorex.com
www.came.life
www.camerieri.co
www.christianmarketingcompany.com
www.comisionista.co
www.designercollection.in
www.divination.in
www.nyg.co
www.ofstudents.com
www.qchg.in
www.shessocozy.com
www.teccoluxury.com
www.vazhaifoundation.in
www.whatsleft.win
www.xn--vuq861boxb8x1c.co
xn--vuq861boxb8x1c.co
Other certificates including the domain name nyg.co
(limited to 100 certificates)
Certificate
The complete raw certificate details for nyg.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHBjCCBe6gAwIBAgISAw9HGUx5AtN9Uk9gsj+NPqVlMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA3MTUwNjIyMTNaFw0yMzEwMTMwNjIyMTJaMBExDzANBgNVBAMT Bm55Zy5jbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMXRS28gBlQl EIGxdu4DTPuJlbbkbTxHXQ+mRCovmAqNHv4L1crpCGQZatk+J12Ihky3E/U4FDdH IlYmLeDyiOhYSqrViTmgsjN/ZbDlBmaG05D7wJ+GPwCu5sSZvOaZzlZVWEGvwk2h CZ9fK25aCJlzs/GnCbfWzwgAD2AjuJR9qfxqCadBk/f47NE/dbC6TBRLMzGq1J2z Majs1sx5e+//TM6Yy7qFkq5JQ4LpoElWyz7/KlI0pg0gBnIpMlidFTumJwTy1eSW 8Fz1tW492xpLrK1ggKLw1Du/IKRH8YdCI5cO8kL+VV7qCGQCAEjml+XNLz48pNy/ wSy3QxhI2xECAwEAAaOCBDUwggQxMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUVb9F 6UFZAgIsXpP9FtxeHcDtnCcwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsU wsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5j ci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggI7BgNV HREEggIyMIICLoILYWxjb3JleC5jb22CCWNhbWUubGlmZYIMY2FtZXJpZXJpLmNv gh1jaHJpc3RpYW5tYXJrZXRpbmdjb21wYW55LmNvbYIPY29taXNpb25pc3RhLmNv ghVkZXNpZ25lcmNvbGxlY3Rpb24uaW6CDWRpdmluYXRpb24uaW6CBm55Zy5jb4IO b2ZzdHVkZW50cy5jb22CB3FjaGcuaW6CDnNoZXNzb2NvenkuY29tgg90ZWNjb2x1 eHVyeS5jb22CE3ZhemhhaWZvdW5kYXRpb24uaW6CDXdoYXRzbGVmdC53aW6CD3d3 dy5hbGNvcmV4LmNvbYINd3d3LmNhbWUubGlmZYIQd3d3LmNhbWVyaWVyaS5jb4Ih d3d3LmNocmlzdGlhbm1hcmtldGluZ2NvbXBhbnkuY29tghN3d3cuY29taXNpb25p c3RhLmNvghl3d3cuZGVzaWduZXJjb2xsZWN0aW9uLmlughF3d3cuZGl2aW5hdGlv bi5pboIKd3d3Lm55Zy5jb4ISd3d3Lm9mc3R1ZGVudHMuY29tggt3d3cucWNoZy5p boISd3d3LnNoZXNzb2NvenkuY29tghN3d3cudGVjY29sdXh1cnkuY29tghd3d3cu dmF6aGFpZm91bmRhdGlvbi5pboIRd3d3LndoYXRzbGVmdC53aW6CGXd3dy54bi0t dnVxODYxYm94Yjh4MWMuY2+CFXhuLS12dXE4NjFib3hiOHgxYy5jbzATBgNVHSAE DDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AHoyjFTYty22 IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiVhtulkAAAQDAEgwRgIhAPGa7XdL En61zyqLMsTvMu+3earydpVOEpX5ZPMJ6z5hAiEA9qOgH2ITqbQ4FE5KdeEVep8k DQsBQTe71D3Cj+H984IAdgCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yC igAAAYlYbbqEAAAEAwBHMEUCIF+C0Br73QTc/NZsxaNmP56x0V6u60ctS4PRp6oH jEs4AiEAvY0/TA+A47tRz6QJRXNltIc/FrpR6w2VtLRIQnY2apIwDQYJKoZIhvcN AQELBQADggEBAJQpdLHGoXqtajBhIt8Swe+OQyhJLyumy3dC6mCi11+06hkE0KhA B4PbX4tmx9q9REipAvPTd/ucpkTzbj/mrsMnddLo6rPSE5hmE0I+FVpa5OS2FtPn 0P496Va7+PnA+2Y9uSyeDSFyEGMlVCsY6GRn1+RlYomEcCUD6vNtocAS4ZRbsshX 3lRq+SecCVoAequiZofV9bFncMMqosmkhvex+KmbpKKMQ8etRgTclWPdhxsYBcMu qM5asXVwtSxLwJE2s8Q3Ib5nr7Np5pEDJhKkGZ+PwOfU9l1Wl+BDripNAyc6/jLG B7St0jsD9fJjRujV+O9yDVkwvpTudWNnauQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdFLbyAGVCUQgbF27gNM +4mVtuRtPEddD6ZEKi+YCo0e/gvVyukIZBlq2T4nXYiGTLcT9TgUN0ciViYt4PKI 6FhKqtWJOaCyM39lsOUGZobTkPvAn4Y/AK7mxJm85pnOVlVYQa/CTaEJn18rbloI mXOz8acJt9bPCAAPYCO4lH2p/GoJp0GT9/js0T91sLpMFEszMarUnbMxqOzWzHl7 7/9MzpjLuoWSrklDgumgSVbLPv8qUjSmDSAGcikyWJ0VO6YnBPLV5JbwXPW1bj3b GkusrWCAovDUO78gpEfxh0Ijlw7yQv5VXuoIZAIASOaX5c0vPjyk3L/BLLdDGEjb EQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 266535599845267621476423882768728490681701 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 06:22:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 06:22:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nyg.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24972153123900766538506199286528460270167019566206593084312721637812191215159602992722143005576915834698436953955391613561043771930002939956974527659492830594653057401122576518084369286876189590210723605643177152935764523643658271928324032659678557832278886429136624521807155495288691578187863639717349258519855795391996374713689562312070699532045154455007852500614910322441430439551224537514100163823540841844036301619693787617473033640428890699152947835983373819589827599776747361784907238650168430311664254931025156679319691350766866479500332931632749317612867719861438355858286806423342294332131154224128627104529 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 55bf45e9415902022c5e93fd16dc5e1dc0ed9c27 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (562 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alcorex.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'came.life' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camerieri.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianmarketingcompany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comisionista.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designercollection.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divination.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyg.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofstudents.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qchg.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shessocozy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teccoluxury.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vazhaifoundation.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsleft.win' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcorex.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.came.life' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camerieri.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christianmarketingcompany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comisionista.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.designercollection.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divination.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyg.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofstudents.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qchg.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shessocozy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teccoluxury.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vazhaifoundation.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whatsleft.win' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--vuq861boxb8x1c.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--vuq861boxb8x1c.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189586dba590000040300483046022100f19aed774b127eb5cf2a8b32c4ef32efb779aaf276954e1295f964f309eb3e61022100f6a3a01f6213a9b438144e4a75e1157a9f240d0b014137bbd43dc28fe1fdf382007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189586dba84000004030047304502205f82d01afbdd04dcfcd66cc5a3663f9eb1d15eaeeb472d4b83d1a7aa078c4b38022100bd8d3f4c0f80e3bb51cfa409457365b4873f16ba51eb0d95b4b4484276366a92 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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