donguyen.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b3:71:8d:6d:b8:1b:71:d6:fa:62:8c:55:53:c5:ac:0d:8b was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=donguyen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:71:8d:6d:b8:1b:71:d6:fa:62:8c:55:53:c5:ac:0d:8b
Serial Number (int): 322398338576878596223894227830155590241675
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:50:84:ea:6d:23:5e:79:d7:17:2c:4d:65:be:32:80:3b:72:b3:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 20:30:3f:ee:8a:e2:37:61:91:a6:38:ef:d1:da:d9:69:d3:07:fe:73
Fingerprint (sha256): a6:29:4f:b3:30:bd:b7:94:c7:ff:85:03:40:87:e9:91:b2:7f:15:88:93:f0:8d:d7:f9:4d:fd:8a:5f:c4:09:5e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate donguyen.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for donguyen.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avaskill.com
betterthanmed.com
buffaloware.com
celebraton.com
donguyen.com
getalesson.com
junglezone.com
nexusnutrition.com
nosalesperson.com
onlinecasinonh.com
planet-com.com
prpidaho.com
www.avaskill.com
www.betterthanmed.com
www.buffaloware.com
www.celebraton.com
www.donguyen.com
www.getalesson.com
www.junglezone.com
www.nexusnutrition.com
www.nosalesperson.com
www.onlinecasinonh.com
www.planet-com.com
www.prpidaho.com
www.xn--5dbbvsl.com
www.xn--6dbuf.com
www.xn--cebesg.com
xn--5dbbvsl.com
xn--6dbuf.com
xn--cebesg.com

Other certificates including the domain name donguyen.com

(limited to 100 certificates)
donguyen.com
donguyen.com
thepurpose-inc.com
dzienny.com
ragnafall.com
donguyen.com
gizmania.com

Certificate

The complete raw certificate details for donguyen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgISA7NxjW24G3HW+mKMVVPFrA2LMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MTQwMjE0MTJaFw0yMzEwMTIwMjE0MTFaMBcxFTATBgNVBAMT
DGRvbmd1eWVuLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/G
7m8K1U+C1iBuRaN84Jcc7xGoHIKWNMiCyh1Nw3ht3US+3aX3jguXiWQiJlUV+Weu
VnB92OcE1MsK4x1EEQkHZqjA+b1r7vrSmjwL7VQZIO+wfIX57EiNzLYiIzqI+MWP
rJC7rjA2O8RbylqZtEqZrJRyaAoeYkUY1Lw+HP0BiJW/7O2EiA7nLBzjqsYViODW
B/opCLGmiQUravEr1HrDGnNt5rFo542om22PNlv3+mHhXaRISy0A/lwE7IrqgAjC
iiXuORelLMNfayH7VnUMRmXc/CyA4cbq4RzPTmF9wVnpcJxeiWBheMMZ4ttsOjqf
RO9SCpjJWHPQFIyUCKkCAwEAAaOCBDMwggQvMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUYFCE6m0jXnnXFyxNZb4ygDtysz4wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA
5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu
by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w
ggI7BgNVHREEggIyMIICLoIMYXZhc2tpbGwuY29tghFiZXR0ZXJ0aGFubWVkLmNv
bYIPYnVmZmFsb3dhcmUuY29tgg5jZWxlYnJhdG9uLmNvbYIMZG9uZ3V5ZW4uY29t
gg5nZXRhbGVzc29uLmNvbYIOanVuZ2xlem9uZS5jb22CEm5leHVzbnV0cml0aW9u
LmNvbYIRbm9zYWxlc3BlcnNvbi5jb22CEm9ubGluZWNhc2lub25oLmNvbYIOcGxh
bmV0LWNvbS5jb22CDHBycGlkYWhvLmNvbYIQd3d3LmF2YXNraWxsLmNvbYIVd3d3
LmJldHRlcnRoYW5tZWQuY29tghN3d3cuYnVmZmFsb3dhcmUuY29tghJ3d3cuY2Vs
ZWJyYXRvbi5jb22CEHd3dy5kb25ndXllbi5jb22CEnd3dy5nZXRhbGVzc29uLmNv
bYISd3d3Lmp1bmdsZXpvbmUuY29tghZ3d3cubmV4dXNudXRyaXRpb24uY29tghV3
d3cubm9zYWxlc3BlcnNvbi5jb22CFnd3dy5vbmxpbmVjYXNpbm9uaC5jb22CEnd3
dy5wbGFuZXQtY29tLmNvbYIQd3d3LnBycGlkYWhvLmNvbYITd3d3LnhuLS01ZGJi
dnNsLmNvbYIRd3d3LnhuLS02ZGJ1Zi5jb22CEnd3dy54bi0tY2ViZXNnLmNvbYIP
eG4tLTVkYmJ2c2wuY29tgg14bi0tNmRidWYuY29tgg54bi0tY2ViZXNnLmNvbTAT
BgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AHoy
jFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiVJkTx0AAAQDAEYwRAIg
TxtfIFTviWX4abIqBdc0wOlrio8R0DB1tY8gUu+etUkCIA9LHdCmIz8pOyiIc6wz
ck6TxueaZGYp+NhR+EuRiGkgAHYA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3
fW0GvW4AAAGJUmRPJwAABAMARzBFAiEAiAnStJxfUq8dwuq9jZ3fs0FMmidY6xgm
m18GYI5pT8gCIH4PfuoWqeCLY0LXTOKHez+9xyzk3d+MJYMhfXT4bvBBMA0GCSqG
SIb3DQEBCwUAA4IBAQCyVc6z5Os6hBc/WgSPwnRSRPxvlD+k0V38ziCknTz9px1k
ErUayRfiNd7AqoILGO7G9dfe3OXVg3GyFR0SCxWyMt/ySMBwo9YEnek2a13tEywf
qdz8/JIcewEO+YrCXhliz97KASfvF8k7M7Sbrpjlsw3mYEiwvLPUelpVckeMLVCN
QWHH92ylATk8iSQy72INqZ64qH+RfWO1fR7kUj2QQzdwGdUgGAU369owODJtvDTa
NcG93CbPm70OW+g1gzsT28uOKGmXMU+aMu3sW2TwVVAAKcKAHwYpcDt5oJ2XBKjs
N/SD8iUna2lJhWuDmZsNd2pV1ci3MTmrw1uoMjEK
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8bubwrVT4LWIG5Fo3zg
lxzvEagcgpY0yILKHU3DeG3dRL7dpfeOC5eJZCImVRX5Z65WcH3Y5wTUywrjHUQR
CQdmqMD5vWvu+tKaPAvtVBkg77B8hfnsSI3MtiIjOoj4xY+skLuuMDY7xFvKWpm0
SpmslHJoCh5iRRjUvD4c/QGIlb/s7YSIDucsHOOqxhWI4NYH+ikIsaaJBStq8SvU
esMac23msWjnjaibbY82W/f6YeFdpEhLLQD+XATsiuqACMKKJe45F6Usw19rIftW
dQxGZdz8LIDhxurhHM9OYX3BWelwnF6JYGF4wxni22w6Op9E71IKmMlYc9AUjJQI
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322398338576878596223894227830155590241675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-14 02:14:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 02:14:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'donguyen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24209612969032776288583414853387199557769383064850174533792992002831399386640973495328562984874575442241440408332881933503988905021253850649066051651351718697611041734196607066904446282702190086940517878759011299171480774742947475410931975629458762906556435057788943673730769190700362477674368258467622559440434029847922538505446805444289170776177303976496826349532388052684493170267135086747063790766164318176474937388349370459840791055154994652234701669713726991022454995538379460798433701444697108315025653258071105849587217030045149518828912278369259634974402844655414586979108971042377992039950790241144974608553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							605084ea6d235e79d7172c4d65be32803b72b33e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (562 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avaskill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterthanmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buffaloware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebraton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donguyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getalesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junglezone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexusnutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nosalesperson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinecasinonh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planet-com.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prpidaho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avaskill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betterthanmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buffaloware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celebraton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donguyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getalesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.junglezone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nexusnutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nosalesperson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinecasinonh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planet-com.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prpidaho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--5dbbvsl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--6dbuf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--cebesg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--5dbbvsl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--6dbuf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--cebesg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018952644f1d000004030046304402204f1b5f2054ef8965f869b22a05d734c0e96b8a8f11d03075b58f2052ef9eb54902200f4b1dd0a6233f293b288873ac33724e93c6e79a646629f8d851f84b91886920007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018952644f2700000403004730450221008809d2b49c5f52af1dc2eabd8d9ddfb3414c9a2758eb18269b5f06608e694fc802207e0f7eea16a9e08b6342d74ce2877b3fbdc72ce4dddf8c2583217d74f86ef041
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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