www.groundwater.tv

Issued by R3

About this certificate

This digital certificate with serial number 03:f5:75:04:3c:88:ba:92:f0:f3:ed:97:d8:64:92:16:f7:c4 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.groundwater.tv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f5:75:04:3c:88:ba:92:f0:f3:ed:97:d8:64:92:16:f7:c4
Serial Number (int): 344861579363382280958742981233679890053060
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:9a:33:17:a7:4d:49:85:4b:07:b0:03:09:13:7e:ec:ef:62:9e:36
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3e:25:ee:8e:0a:4d:b8:b1:80:1f:b2:ec:e6:59:eb:df:5e:86:c0:a8
Fingerprint (sha256): a0:2a:63:5c:93:83:79:f2:03:33:46:3d:60:1b:19:56:56:79:bd:7e:36:26:3b:e8:7c:50:0b:ab:1a:f1:20:52

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.groundwater.tv

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.groundwater.tv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1800.bz
bambooremoval.expert
bloom.community
bluewhale.agency
bullmarketanalytics.com
crisis.directory
equalifecoaching.net
gevorgyan.net
groundwater.tv
inglesgratis.net
leet.energy
smokedruid.eu
van.delivery
www.1800.bz
www.bambooremoval.expert
www.bloom.community
www.bluewhale.agency
www.bullmarketanalytics.com
www.crisis.directory
www.equalifecoaching.net
www.gevorgyan.net
www.groundwater.tv
www.inglesgratis.net
www.leet.energy
www.smokedruid.eu
www.van.delivery
www.xcluded.tv
www.xn--xhqp74a1vhb74b.co
xcluded.tv
xn--xhqp74a1vhb74b.co

Other certificates including the domain name groundwater.tv

(limited to 100 certificates)
www.chuadanga.city
www.groundwater.tv

Certificate

The complete raw certificate details for www.groundwater.tv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHIjCCBgqgAwIBAgISA/V1BDyIupLw8+2X2GSSFvfEMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MTYwMTM5MjRaFw0yMzEwMTQwMTM5MjNaMB0xGzAZBgNVBAMT
End3dy5ncm91bmR3YXRlci50djCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOVejGT7MvBJv4PWeHBGCF/XQxX0T3z1+ERy5fOEKkaYI9/ISlkZ8H/yKSk6
jIFGQi5xv2AL/GVMKwl3tA1qoYc2jbCdVOk+IIi8n01Cxk1VEua2uzd9lyN3weMP
7Tku49gawzYDLNfZ8/gQcbI1V5o9xEDXYAn7HNsZhh25TzmT6fpk1+9iODvLQOck
+x4Qp3CnjoYw1815TP2MhXrcZfJxfokNApawnrF5V9G9Rvv3+Wrt5ujPut+ufI9u
OherpCp2su7UrsJqsIngEXNfZOfkmxn7Zk/skBIllIl+oV4V6wQtdOUlSsHKSwIc
Av81BtaQQevnaVvS7JKQiEbCsCMCAwEAAaOCBEUwggRBMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUVJozF6dNSYVLB7ADCRN+7O9injYwHwYDVR0jBBgwFoAUFC6zF7dY
VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw
Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy
Lm9yZy8wggJLBgNVHREEggJCMIICPoIHMTgwMC5ieoIUYmFtYm9vcmVtb3ZhbC5l
eHBlcnSCD2Jsb29tLmNvbW11bml0eYIQYmx1ZXdoYWxlLmFnZW5jeYIXYnVsbG1h
cmtldGFuYWx5dGljcy5jb22CEGNyaXNpcy5kaXJlY3RvcnmCFGVxdWFsaWZlY29h
Y2hpbmcubmV0gg1nZXZvcmd5YW4ubmV0gg5ncm91bmR3YXRlci50doIQaW5nbGVz
Z3JhdGlzLm5ldIILbGVldC5lbmVyZ3mCDXNtb2tlZHJ1aWQuZXWCDHZhbi5kZWxp
dmVyeYILd3d3LjE4MDAuYnqCGHd3dy5iYW1ib29yZW1vdmFsLmV4cGVydIITd3d3
LmJsb29tLmNvbW11bml0eYIUd3d3LmJsdWV3aGFsZS5hZ2VuY3mCG3d3dy5idWxs
bWFya2V0YW5hbHl0aWNzLmNvbYIUd3d3LmNyaXNpcy5kaXJlY3RvcnmCGHd3dy5l
cXVhbGlmZWNvYWNoaW5nLm5ldIIRd3d3Lmdldm9yZ3lhbi5uZXSCEnd3dy5ncm91
bmR3YXRlci50doIUd3d3LmluZ2xlc2dyYXRpcy5uZXSCD3d3dy5sZWV0LmVuZXJn
eYIRd3d3LnNtb2tlZHJ1aWQuZXWCEHd3dy52YW4uZGVsaXZlcnmCDnd3dy54Y2x1
ZGVkLnR2ghl3d3cueG4tLXhocXA3NGExdmhiNzRiLmNvggp4Y2x1ZGVkLnR2ghV4
bi0teGhxcDc0YTF2aGI3NGIuY28wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgor
BgEEAdZ5AgQCBIH2BIHzAPEAdgC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmB
Je20mQAAAYlckShUAAAEAwBHMEUCIQDxQCHh1AH4a9NgW4ZRD3l/90ECjx6A18VQ
Z6x7yNAfOwIgHxq/C6oQoovr6c5XTnku4fHZCexRcAdCK1CyaMT0vCUAdwDoPtDa
PvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYlckShTAAAEAwBIMEYCIQDK
YmkoM2v6d0V6TR/KMUCaS5oXSB/oQIjVJF1uRuw92AIhAKFqQlGBV/5tH+IP7dmV
kEDi9+G4YGnT7h1tdcCSaqrTMA0GCSqGSIb3DQEBCwUAA4IBAQBk6GFulOTLqKWj
7irS8eVZ/8WAKb5TYhsd3cv6I3pE91AEZgxf6aeDo2y3s0QQEpHwbpFOQdofqmmj
Z73KijSNgGxcDjn66GPJn0ogJFI5wb7VFGJBaRXBskyEvmGteBSFpmykcrsH7P25
astuvT0i3VPT/OSaJhLij+fxjeBaWwALKRQvDlw1aFvV8jgdHT0efRL2laIH7Yv+
YKiMMmHDCG6zX6ff/LTc17afmnyiI1ovQjo1DMfsDQ5Je4y8NirmExp0qaABo5Kv
bsuqQkoOL274I9WqfIN3P2mTzwQ6pilsHQ62Ad5suRYoDMA6dvBF9k2+mMw4GxYa
QsCDnprb
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5V6MZPsy8Em/g9Z4cEYI
X9dDFfRPfPX4RHLl84QqRpgj38hKWRnwf/IpKTqMgUZCLnG/YAv8ZUwrCXe0DWqh
hzaNsJ1U6T4giLyfTULGTVUS5ra7N32XI3fB4w/tOS7j2BrDNgMs19nz+BBxsjVX
mj3EQNdgCfsc2xmGHblPOZPp+mTX72I4O8tA5yT7HhCncKeOhjDXzXlM/YyFetxl
8nF+iQ0ClrCesXlX0b1G+/f5au3m6M+63658j246F6ukKnay7tSuwmqwieARc19k
5+SbGftmT+yQEiWUiX6hXhXrBC105SVKwcpLAhwC/zUG1pBB6+dpW9LskpCIRsKw
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344861579363382280958742981233679890053060
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-16 01:39:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-14 01:39:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.groundwater.tv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28955195398767750469113951729405438328073049569548622972136619584305168594239301368718406155242786827152428530784612266008149486415952508806248764964382455953952632099379398397368551910067173194989700607047681904485911417267408620915286110199398469057820515480503277623499070321437964078402300749395438096141738051281375506889977441328317068171083323922999591655084914643673129334154322391316005345974959141682423703278931698723845594204374994365510248264909381552184626345461509443189767594471684820426166320673995412123181385149969397226765999129009326244434567904259591585022698301532126650501430352176892031971363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							549a3317a74d49854b07b00309137eecef629e36
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (578 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1800.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bambooremoval.expert'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloom.community'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluewhale.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullmarketanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crisis.directory'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equalifecoaching.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gevorgyan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groundwater.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inglesgratis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leet.energy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smokedruid.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'van.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1800.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bambooremoval.expert'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloom.community'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluewhale.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullmarketanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crisis.directory'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalifecoaching.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gevorgyan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groundwater.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inglesgratis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leet.energy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smokedruid.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.van.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xcluded.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--xhqp74a1vhb74b.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xcluded.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--xhqp74a1vhb74b.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001895c9128540000040300473045022100f14021e1d401f86bd3605b86510f797ff741028f1e80d7c55067ac7bc8d01f3b02201f1abf0baa10a28bebe9ce574e792ee1f1d909ec517007422b50b268c4f4bc25007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001895c9128530000040300483046022100ca626928336bfa77457a4d1fca31409a4b9a17481fe84088d5245d6e46ec3dd8022100a16a42518157fe6d1fe20fedd9959040e2f7e1b86069d3ee1d6d75c0926aaad3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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