fry.ntraq.de
Issued by R3
About this certificate
This digital certificate with serial number 04:8a:cc:0f:f7:ba:70:7d:79:cd:70:63:0c:6b:ac:5e:84:f8 was issued on by Let's Encrypt.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fry.ntraq.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:8a:cc:0f:f7:ba:70:7d:79:cd:70:63:0c:6b:ac:5e:84:f8Serial Number (int): 395679355782249919746567327709720110597368
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 4e:14:45:88:29:fe:e7:d0:3e:65:93:62:f9:d8:82:6b:47:d8:9f:85
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ba:4e:5b:3e:7f:61:ec:78:79:1e:9c:ff:1c:82:3f:4f:e1:14:58:ad
Fingerprint (sha256): a1:02:bd:30:14:9a:af:8b:e3:07:e6:72:ce:0e:8e:40:28:c6:eb:0c:d2:99:a3:0f:7d:0a:d8:91:16:6d:68:b1
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate fry.ntraq.de
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fry.ntraq.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.fry.ntraq.de
api.ntraq.de
api.ntraq.vtx.cloud
fry.ntraq.de
ntraq.com
ntraq.de
ntraq.net
ntraq.vtx.cloud
webtraq.de
api.ntraq.de
api.ntraq.vtx.cloud
fry.ntraq.de
ntraq.com
ntraq.de
ntraq.net
ntraq.vtx.cloud
webtraq.de
Other certificates including the domain name ntraq.de
(limited to 100 certificates)
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
fry.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
fry.ntraq.de
legacy.ntraq.de
fry.ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
fry.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
fry.ntraq.de
legacy.ntraq.de
fry.ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
Certificate
The complete raw certificate details for fry.ntraq.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgISBIrMD/e6cH15zXBjDGusXoT4MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MDgxODQ2MjRaFw0yMzEyMDcxODQ2MjNaMBcxFTATBgNVBAMT DGZyeS5udHJhcS5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALYf 0SeJwLwNXXLpoEqR4hfr4FfT0jddcNfb3y0pPCGsZCzdW/D6bRiB/ThrKNMqR+0u rxlrsjx3iykHSxRGiX2fVa9FMcMfAoUHub3YgzFuqJjFF7YNZTcfvDN7MogYnlr3 H5pNDPmeSFgbwKsy7EaBIyhCjHbLMbB1MyLUJsT2p5kgDU0OuXcMPPqm1KrsKmNC C5OCea0wl/C0tv0D0k1Dsg3qm+rYQwPbHpIRoswoxImV/I5nTbHhsKLWv80M4qGm vu/RPI/1Ms6p6qCp2z9MHAhg4wqOuqkidWgp+2dLidxRS02ALkiho3C6PR+cUh4a h8VoLyqTwb/FtWRkaZnHsanNvM/UUkhJjFybUMaclnQNdRveyhi+9ZIaCaA4yvx7 Jo/rH38t7kxXqRJgyNUQKOfsKGFV94lIUHF/5MZhp4Qs9yJa5N+LGYbdYk7uOqhB RBGf9zbjTUJP2sD0Ud8wklsZCgPaFtTi7DgsN59UpF2nJmqCmen2KSqeq/v1Wjwv XZfps+3BFAEJmv7+SCxu/g5JU5+z9XEP+rilK/Q8L0yvh/D/n8/js1l7Vq4ghs+f i3z/8EJ7dnUwt+1bajdxTiE0etbGwQ8s7jjSjU29oKtWCtRANh0lndp/LyDP2Azl fjOYINAIGgAXIvmnbGgGkMll6CMWbju8kEjUw6aNAgMBAAGjggKCMIICfjAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFE4URYgp/ufQPmWTYvnYgmtH2J+FMB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMIGLBgNVHREEgYMwgYCCEGFwaS5mcnkubnRyYXEuZGWC DGFwaS5udHJhcS5kZYITYXBpLm50cmFxLnZ0eC5jbG91ZIIMZnJ5Lm50cmFxLmRl ggludHJhcS5jb22CCG50cmFxLmRlggludHJhcS5uZXSCD250cmFxLnZ0eC5jbG91 ZIIKd2VidHJhcS5kZTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkC BAIEgfQEgfEA7wB1ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAAB inZUz+UAAAQDAEYwRAIgepUuKl2kT6uPHQNKyrNFxStlIp2Y/S+xoEDE57o7124C IGtxy6CHX1aQyfgGxMYSaRkZntKWdXwspyUypkOlmDMMAHYArfe++nz/EMiLnT2c Hj4YarRnKV3PsQwkyoWGNOvcgooAAAGKdlTQJAAABAMARzBFAiEA2R9Qu7RMgoVs OwKFx+HwDbKT29lZkoqKRJz1J64O5JcCIFp0v6UDePBJ6NZe3uU7AGi6x7hv81Ka pju3Chc23owNMA0GCSqGSIb3DQEBCwUAA4IBAQAwljjBOooirsCqLXibXEwFMCVD hxowOpym6NOxEC2ucLmFNFI7qefsjh7QElN6fqYo05OpMqkqKDDZu8OB40Lm93U6 iOlaBwL00hV6vgiMTVWhuHcSmhbnE9yjZlupjNyDvVnf1Lu9gWlGQe+ScvqhkW8i r0ralBI6EKU34Zg54wuSc8ZwjXy5oau8Zoj6HN4NJYu72Cn9IIfSOKFkzHVLcjtx 5BTv3zBuQcLzv7cXwwUdaNcNLoQBF8pAeMQEq0bQYUyFmvARu8WYNU/20Yu2e7sx ByeF7NjQUPqIBOLzrhGYr81ZCKnIK8PEkT/wyqHzt+B7nTlHN/2pANQ25Won -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAth/RJ4nAvA1dcumgSpHi F+vgV9PSN11w19vfLSk8IaxkLN1b8PptGIH9OGso0ypH7S6vGWuyPHeLKQdLFEaJ fZ9Vr0Uxwx8ChQe5vdiDMW6omMUXtg1lNx+8M3syiBieWvcfmk0M+Z5IWBvAqzLs RoEjKEKMdssxsHUzItQmxPanmSANTQ65dww8+qbUquwqY0ILk4J5rTCX8LS2/QPS TUOyDeqb6thDA9sekhGizCjEiZX8jmdNseGwota/zQzioaa+79E8j/UyzqnqoKnb P0wcCGDjCo66qSJ1aCn7Z0uJ3FFLTYAuSKGjcLo9H5xSHhqHxWgvKpPBv8W1ZGRp mcexqc28z9RSSEmMXJtQxpyWdA11G97KGL71khoJoDjK/Hsmj+sffy3uTFepEmDI 1RAo5+woYVX3iUhQcX/kxmGnhCz3Ilrk34sZht1iTu46qEFEEZ/3NuNNQk/awPRR 3zCSWxkKA9oW1OLsOCw3n1SkXacmaoKZ6fYpKp6r+/VaPC9dl+mz7cEUAQma/v5I LG7+DklTn7P1cQ/6uKUr9DwvTK+H8P+fz+OzWXtWriCGz5+LfP/wQnt2dTC37Vtq N3FOITR61sbBDyzuONKNTb2gq1YK1EA2HSWd2n8vIM/YDOV+M5gg0AgaABci+ads aAaQyWXoIxZuO7yQSNTDpo0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 395679355782249919746567327709720110597368 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 18:46:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 18:46:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fry.ntraq.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 743002259732346750396989219862345015132421340971078342075038219745759562096376900857757876432064812677882503702368287929435345837184506639455237810571079443155455898081029289079583522195967733444015468318692062376443060057973084118173643684709858068343821964008540722438928151297238426560732377624655130592316732816588120105721135573864547042454098292799920514708140640742570048809169438947386282912452191882181658925179425875958497455305834482631622759874464036898655794484511795031560268076666414922193447844770993156759438427982486657153228397479260565115034932246453577973497174503065983679594806017454845401091629267158959519150388682054173495746560242643951704612176297746346883641733175795374722473598656879389576919989932537487716969056679914548180505997639681716292831683582074094889152459630187613614524151905536689371688911609709349116549424255078645341831604334523385164123485110184591339621917880396294178903379464802117382389270029619523737614086737125065751930806892636410902401079832034758724937378957629791439480809411754495834803448669889915759781582927568965141058621017194233777630353298601923924670383821330781815605450248722956402005208202825034965902763591245248834612841454849067049456934969559200696340031117 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4e14458829fee7d03e659362f9d8826b47d89f85 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.fry.ntraq.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ntraq.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ntraq.vtx.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fry.ntraq.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.vtx.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtraq.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a7654cfe5000004030046304402207a952e2a5da44fab8f1d034acab345c52b65229d98fd2fb1a040c4e7ba3bd76e02206b71cba0875f5690c9f806c4c6126919199ed296757c2ca72532a643a598330c007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a7654d0240000040300473045022100d91f50bbb44c82856c3b0285c7e1f00db293dbd959928a8a449cf527ae0ee49702205a74bfa50378f049e8d65edee53b0068bac7b86ff3529aa63bb70a1736de8c0d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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