bvalcollege.com

Issued by R3

About this certificate

This digital certificate with serial number 04:3f:83:c9:76:89:41:78:08:93:ce:af:57:f8:8d:a5:81:e4 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bvalcollege.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:3f:83:c9:76:89:41:78:08:93:ce:af:57:f8:8d:a5:81:e4
Serial Number (int): 370062107766375352396985493555060435943908
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cc:0e:ce:78:ea:6f:a1:6c:90:1f:fb:ae:c7:bf:86:e9:f7:f5:a4:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5c:a1:0f:3c:a5:ee:3c:9c:c3:90:96:3b:4f:a6:b2:6f:04:e3:96:2c
Fingerprint (sha256): a2:51:61:79:a0:6f:23:67:dd:a4:47:3e:80:d3:23:a4:65:b0:f4:5e:48:e4:ac:22:7a:d6:29:ce:22:15:bd:c3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bvalcollege.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bvalcollege.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3d14me.com
bvalcollege.com
capfringe.com
encontros.one
heritagebarn.org
instanoodle.com
logoabroad.com
momandpopscoffee.com
nursinghomelawsuits.org
realitymeme.com
remotejobhome.com
thelegendofkid.com
togetherwemanage.com
tylermckenna.com
weddingganja.com
www.3d14me.com
www.bvalcollege.com
www.capfringe.com
www.encontros.one
www.heritagebarn.org
www.instanoodle.com
www.logoabroad.com
www.momandpopscoffee.com
www.nursinghomelawsuits.org
www.realitymeme.com
www.remotejobhome.com
www.thelegendofkid.com
www.togetherwemanage.com
www.tylermckenna.com
www.weddingganja.com

Other certificates including the domain name bvalcollege.com

(limited to 100 certificates)
www.xn--4dbddhqw0b8c.com
bvalcollege.com

Certificate

The complete raw certificate details for bvalcollege.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgISBD+DyXaJQXgIk86vV/iNpYHkMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MDcyMzM0MjdaFw0yNDA4MDUyMzM0MjZaMBoxGDAWBgNVBAMT
D2J2YWxjb2xsZWdlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALAfno2Q7KLq0603dQ23mItWp/MLQaj4vp9N7Ix9ldTzpjIuUUz7OJMjWNsOa9gW
XJAjV1zqUHOOT3nreqzzuEXvnAkRdoBJFrYBK769zKzI5TXhRx//OWZuoxllDEkI
bd7/EzYvxDhulFJL1NgeR5VM0fTSOgLbutSH3Zf1PwjmJIoiyy2jgVN7pNuUkcQ2
wOjm6HVYG1AitUP6/WP243+IwHvsPAeXw8xh1nMLG6KVJNjx9G51CwG3/Ioed/bc
EWZFCHEK+0uxl9yUMmk0a7LBZhB1abUC5PYK59NQK1l+VOlV0jns1xYYb5i3L2VU
/iwLMUjpWVSNvB7mYI806ukCAwEAAaOCBGAwggRcMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUzA7OeOpvoWyQH/uux7+G6ff1pKEwHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wggJnBgNVHREEggJeMIICWoIKM2QxNG1lLmNvbYIPYnZhbGNvbGxlZ2UuY29t
gg1jYXBmcmluZ2UuY29tgg1lbmNvbnRyb3Mub25lghBoZXJpdGFnZWJhcm4ub3Jn
gg9pbnN0YW5vb2RsZS5jb22CDmxvZ29hYnJvYWQuY29tghRtb21hbmRwb3BzY29m
ZmVlLmNvbYIXbnVyc2luZ2hvbWVsYXdzdWl0cy5vcmeCD3JlYWxpdHltZW1lLmNv
bYIRcmVtb3Rlam9iaG9tZS5jb22CEnRoZWxlZ2VuZG9ma2lkLmNvbYIUdG9nZXRo
ZXJ3ZW1hbmFnZS5jb22CEHR5bGVybWNrZW5uYS5jb22CEHdlZGRpbmdnYW5qYS5j
b22CDnd3dy4zZDE0bWUuY29tghN3d3cuYnZhbGNvbGxlZ2UuY29tghF3d3cuY2Fw
ZnJpbmdlLmNvbYIRd3d3LmVuY29udHJvcy5vbmWCFHd3dy5oZXJpdGFnZWJhcm4u
b3JnghN3d3cuaW5zdGFub29kbGUuY29tghJ3d3cubG9nb2Ficm9hZC5jb22CGHd3
dy5tb21hbmRwb3BzY29mZmVlLmNvbYIbd3d3Lm51cnNpbmdob21lbGF3c3VpdHMu
b3JnghN3d3cucmVhbGl0eW1lbWUuY29tghV3d3cucmVtb3Rlam9iaG9tZS5jb22C
Fnd3dy50aGVsZWdlbmRvZmtpZC5jb22CGHd3dy50b2dldGhlcndlbWFuYWdlLmNv
bYIUd3d3LnR5bGVybWNrZW5uYS5jb22CFHd3dy53ZWRkaW5nZ2FuamEuY29tMBMG
A1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAPxdL
T9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGPVZ+CqwAABAMARzBFAiAd
6San4+ux6WKt8N8GHUjhJxKK/2S8+leYavADeWDYvAIhAMDTYdz0c7eilwIrGLbM
rTmU0gbyRP3sgfY21Y/eLyktAHYA3+FW66oFr7WcD4ZxjajAMk6uVtlup/WlagHR
wTu+UlwAAAGPVZ+DnAAABAMARzBFAiAVJq+S02BWXoBvGU5na5CJOTYNCgJEabJR
CQD8qM14ygIhANI79O+sJvmL15nKHRvcxKw/jSwFsH2nOW2s6p0EjVL0MA0GCSqG
SIb3DQEBCwUAA4IBAQAIvvFOp+t1LnjHJmd2zL3q3SRxP6AchBqxjQe/Wr8oSDUz
SUJSdg2tomxE1gEr6nByRXakkMJoeTerTcdoXC3h8eKaxrnZE+/IsTHAPogtCr6I
aYUTMGmgN2OOppHCsEFGiVIWHfUUw+aA9VLHcQqmNhZ5eAT/mcrdBMZNKQ/ii5mB
S+SlEP38P190KQXg2GROrL8GtxF9ByTU5mZBXoJyRiz3UBFS1hJxkVllhjz9Mxli
/onHrkbQsYUqXcqAAQAj/CKcwmfGB7O/boyEb7SoIMIuFHV8uVKOAOmfRZFGTGK6
022tUqTSOqNCI35lDzE0J+MQ/SZcHSXd8a3ysX5X
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB+ejZDsourTrTd1DbeY
i1an8wtBqPi+n03sjH2V1POmMi5RTPs4kyNY2w5r2BZckCNXXOpQc45Peet6rPO4
Re+cCRF2gEkWtgErvr3MrMjlNeFHH/85Zm6jGWUMSQht3v8TNi/EOG6UUkvU2B5H
lUzR9NI6Atu61Ifdl/U/COYkiiLLLaOBU3uk25SRxDbA6ObodVgbUCK1Q/r9Y/bj
f4jAe+w8B5fDzGHWcwsbopUk2PH0bnULAbf8ih539twRZkUIcQr7S7GX3JQyaTRr
ssFmEHVptQLk9grn01ArWX5U6VXSOezXFhhvmLcvZVT+LAsxSOlZVI28HuZgjzTq
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370062107766375352396985493555060435943908
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 23:34:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-05 23:34:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bvalcollege.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22233533755466233260287764079639722483915948085100570003898343365353280628542062196897874069039860546535358743611524690138382853406293372603381980325905412847529951641921358951898419147217881671487745844333930326957363628028902026763332239610591075999110881304337418156918586886046689325436354582732534561658773411343449105127336266407028689787525620397723075334885886530217924927458129346120878880852537196733179814529452967184461046421751125909756282752219273802631893111387781163137339962637101374360148126244142689985235910006586368987672336246161552858696378805301447502412966621154696373543285431451992699759337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc0ece78ea6fa16c901ffbaec7bf86e9f7f5a4a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3d14me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bvalcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capfringe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encontros.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritagebarn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instanoodle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logoabroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'momandpopscoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursinghomelawsuits.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realitymeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotejobhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelegendofkid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherwemanage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tylermckenna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddingganja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3d14me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bvalcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capfringe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encontros.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heritagebarn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.instanoodle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logoabroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.momandpopscoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nursinghomelawsuits.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realitymeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.remotejobhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thelegendofkid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherwemanage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tylermckenna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weddingganja.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f559f82ab000004030047304502201de926a7e3ebb1e962adf0df061d48e127128aff64bcfa57986af0037960d8bc022100c0d361dcf473b7a297022b18b6ccad3994d206f244fdec81f636d58fde2f292d007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f559f839c000004030047304502201526af92d360565e806f194e676b908939360d0a024469b2510900fca8cd78ca022100d23bf4efac26f98bd799ca1d1bdcc4ac3f8d2c05b07da7396dacea9d048d52f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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