helpdesk.dalycity.org

Issued by R3

About this certificate

This digital certificate with serial number 03:f4:eb:53:15:94:52:06:27:3b:77:cc:c6:e2:6d:8f:fe:97 was issued on by Let's Encrypt.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=helpdesk.dalycity.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f4:eb:53:15:94:52:06:27:3b:77:cc:c6:e2:6d:8f:fe:97
Serial Number (int): 344678555301320193584186417486984490516119
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ba:21:aa:d3:2a:5e:c7:a9:86:ba:fe:35:b2:b3:79:78:3c:2e:78:af
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e1:41:66:d4:0d:41:39:4e:2b:0f:d2:64:72:d8:fb:1d:16:4f:21:b8
Fingerprint (sha256): a4:f6:b7:2e:e9:64:06:24:7c:59:23:9d:ce:52:d5:56:76:a8:c2:1f:3e:8c:8c:19:de:6f:c7:54:6e:46:85:d7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate helpdesk.dalycity.org

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for helpdesk.dalycity.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

911.finsa.net
cebhelpdeskportal.cebupacificair.com
helpdesk.arsfuturo.com
helpdesk.baja.com.sa
helpdesk.dalycity.org
helpdesk.elrey.com.co
helpdesk.gcwengineering.com
helpdesk.gffg.com
helpdesk.lantech.com
helpdesk.medicom.com
helpdesk.plusgrade.com
helpdesk.ukrainianfcu.org
hrsupport.fhiworks.com
itdesk.tropicknitsindia.com
ithelpdesk.wingscorp.com
itservicedesk.airselangor.com
itss.rdthailand.com
service.quantainvest.com.au
servicedesk.agthia.com
servicedesk.goodline.com.au
servicedesk.odva.oregon.gov
servicedesk.ubiquity.com
servicehub.townandcountry.org
solutions.intigral.net
support.8west.ie
support.rcac.org
support.vention.cc
tickets.dtradebox.com

Other certificates including the domain name dalycity.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for helpdesk.dalycity.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGpTCCBY2gAwIBAgISA/TrUxWUUgYnO3fMxuJtj/6XMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTIxNjExMjhaFw0yNDAzMTExNjExMjdaMCAxHjAcBgNVBAMT
FWhlbHBkZXNrLmRhbHljaXR5Lm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAKe2mAA/GVqdwyvj+S7VJxHY8FPBUb2V1mI6JliZYtg57XSz6Pv4knjL
gkpGdN/aIuWaixFf335zEU5y+i+ENXMHTg8ij4H9kE/lJZGkuf1/JFdws7BOfLbO
FIAEPpFtL6ojuLssck7xrmy3lYO8Zsc1PeTtNKpb5CDbu9YIEx2B1mGMzybdxDbp
hK5SGaZaCP8Tbf8YHqaJ5IamelUmo0KW524dL9I9uxkq6/NB8/MJ5ByxQlrrKsCc
x2wShOSP+y0w9hko5ErbYymwmbIOF/i566VwnUtEF+I0Rij2SntyNan61tV+EtDx
y7pDF+gP4mV1wfLojCKiUYNIISqFrKcCAwEAAaOCA8UwggPBMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQUuiGq0ypex6mGuv41srN5eDwueK8wHwYDVR0jBBgwFoAUFC6z
F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo
dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl
bmNyLm9yZy8wggK/BgNVHREEggK2MIICsoINOTExLmZpbnNhLm5ldIIkY2ViaGVs
cGRlc2twb3J0YWwuY2VidXBhY2lmaWNhaXIuY29tghZoZWxwZGVzay5hcnNmdXR1
cm8uY29tghRoZWxwZGVzay5iYWphLmNvbS5zYYIVaGVscGRlc2suZGFseWNpdHku
b3JnghVoZWxwZGVzay5lbHJleS5jb20uY2+CG2hlbHBkZXNrLmdjd2VuZ2luZWVy
aW5nLmNvbYIRaGVscGRlc2suZ2ZmZy5jb22CFGhlbHBkZXNrLmxhbnRlY2guY29t
ghRoZWxwZGVzay5tZWRpY29tLmNvbYIWaGVscGRlc2sucGx1c2dyYWRlLmNvbYIZ
aGVscGRlc2sudWtyYWluaWFuZmN1Lm9yZ4IWaHJzdXBwb3J0LmZoaXdvcmtzLmNv
bYIbaXRkZXNrLnRyb3BpY2tuaXRzaW5kaWEuY29tghhpdGhlbHBkZXNrLndpbmdz
Y29ycC5jb22CHWl0c2VydmljZWRlc2suYWlyc2VsYW5nb3IuY29tghNpdHNzLnJk
dGhhaWxhbmQuY29tghtzZXJ2aWNlLnF1YW50YWludmVzdC5jb20uYXWCFnNlcnZp
Y2VkZXNrLmFndGhpYS5jb22CG3NlcnZpY2VkZXNrLmdvb2RsaW5lLmNvbS5hdYIb
c2VydmljZWRlc2sub2R2YS5vcmVnb24uZ292ghhzZXJ2aWNlZGVzay51YmlxdWl0
eS5jb22CHXNlcnZpY2VodWIudG93bmFuZGNvdW50cnkub3JnghZzb2x1dGlvbnMu
aW50aWdyYWwubmV0ghBzdXBwb3J0Ljh3ZXN0LmllghBzdXBwb3J0LnJjYWMub3Jn
ghJzdXBwb3J0LnZlbnRpb24uY2OCFXRpY2tldHMuZHRyYWRlYm94LmNvbTATBgNV
HSAEDDAKMAgGBmeBDAECATATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAOqXxggD8EVGp1NO++AFJPIn3lzzdlaHkg6go9EG3gB2T/urAQHOd
g5R/5wsfUvyJTE4iWVt3IUZSJlgJ8WIpbzaaPZGU8cxZgSmms5cfyq5qvSNDe995
ByDCmkEsz6ps3N7c+crGeMEr9nwjiF2Eu3xhpM1Cyn0S1uNpFgqErxEnhn8GXuBR
SIOABXF+bFRwr759mja2wFIg6h0SERNNW0eH3yhnssof+rz4nW4sXWjby6ygmjM4
TDqtk6LoYnwUGaO2dAhdAVhvsNJ7gwE33kq3pgd2I3i58ZO/Xtk3F/7OpqD1xbHa
8RvZCzsbBWDssw3+Y47gtiaUl9YSd7t49Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7aYAD8ZWp3DK+P5LtUn
EdjwU8FRvZXWYjomWJli2DntdLPo+/iSeMuCSkZ039oi5ZqLEV/ffnMRTnL6L4Q1
cwdODyKPgf2QT+UlkaS5/X8kV3CzsE58ts4UgAQ+kW0vqiO4uyxyTvGubLeVg7xm
xzU95O00qlvkINu71ggTHYHWYYzPJt3ENumErlIZploI/xNt/xgeponkhqZ6VSaj
Qpbnbh0v0j27GSrr80Hz8wnkHLFCWusqwJzHbBKE5I/7LTD2GSjkSttjKbCZsg4X
+LnrpXCdS0QX4jRGKPZKe3I1qfrW1X4S0PHLukMX6A/iZXXB8uiMIqJRg0ghKoWs
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344678555301320193584186417486984490516119
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 16:11:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 16:11:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'helpdesk.dalycity.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21171837265160610237506546406639944181085707249664820674452903249110369682818102283997729398646501052977091746016182924222000256941317917088595245709347186677222448654240285892417474230235289157919705736479646718971694222295744374956685385588620556761266552920851410510918438384692193262030325569974385205279168018466356816540132738611489740623647222604265469238595755482829967961586439412745550804392011002857558990000134765827555127786021809084000798426401278206212746962121603389715269218748466673470150992278893499356568808931996417726041238679419645736152849411835576616257016826409322918150874089591608363560103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba21aad32a5ec7a986bafe35b2b379783c2e78af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (694 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '911.finsa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cebhelpdeskportal.cebupacificair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.arsfuturo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.baja.com.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.dalycity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.elrey.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.gcwengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.gffg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.lantech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.medicom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.plusgrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ukrainianfcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrsupport.fhiworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itdesk.tropicknitsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ithelpdesk.wingscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itservicedesk.airselangor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itss.rdthailand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.quantainvest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.agthia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.goodline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.odva.oregon.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.ubiquity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicehub.townandcountry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions.intigral.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.8west.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.rcac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.vention.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.dtradebox.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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