bibliotek.lunner.kommune.no

Issued by R3

About this certificate

This digital certificate with serial number 04:f7:62:6c:68:a3:77:9e:e9:9c:ee:47:c6:5e:e7:d8:66:79 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bibliotek.lunner.kommune.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f7:62:6c:68:a3:77:9e:e9:9c:ee:47:c6:5e:e7:d8:66:79
Serial Number (int): 432629715590482240678130883218479393564281
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 32:ab:5b:3d:d4:bd:9d:df:ea:4a:3a:27:25:7b:aa:da:bc:ae:01:9e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 29:4f:fe:43:47:1a:11:9e:99:ae:96:b6:f8:df:77:d9:2e:ef:07:0f
Fingerprint (sha256): b4:71:f5:0c:7f:d2:b2:bd:e4:f5:bf:4b:f7:10:d1:f2:92:62:ff:60:cc:de:ad:ab:80:cb:e5:1d:44:48:f3:cd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bibliotek.lunner.kommune.no

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bibliotek.lunner.kommune.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliotek.lunner.kommune.no
holebibliotek.no
lierbib.no
lorenskogbibliotek.no
midtfylkebiblioteket.no
nesoddenbibliotek.no
nordrefollobibliotek.no
oeikbib.no
tjenester.vikenfylkesbibliotek.no
www.hallingdalsbiblioteka.no
www.lorenskogbibliotek.no
www.midtfylkebiblioteket.no
www.nesoddenbibliotek.no
www.nordrefollobibliotek.no
www.oeikbib.no
www.vikenfylkesbibliotek.arena.axiell.com
www.xn--rlingenbibliotek-uob.no
xn--rlingenbibliotek-uob.no

Other certificates including the domain name lunner.kommune.no

(limited to 100 certificates)
lunner.kommune.no
k247.lunner.kommune.no
lunner.kommune.no
tilgang.lunner.kommune.no
bibliotek.lunner.kommune.no
bibliotek.lunner.kommune.no
k247.lunner.kommune.no
bibliotek.lunner.kommune.no
www.lunner.kommune.no
*.lunner.kommune.no
moteportal.lunner.kommune.no
stilling.lunner.kommune.no
mail.lunner.kommune.no
mail.lunner.kommune.no
mail.lunner.kommune.no
skjema.lunner.kommune.no
stilling.lunner.kommune.no
moteportal.lunner.kommune.no
lunner.kommune.no
bibliotek.lunner.kommune.no
skjema.lunner.kommune.no
tilgang.lunner.kommune.no
bibliotek.lunner.kommune.no
skjema.lunner.kommune.no
bibliotek.lunner.kommune.no
innsyn.lunner.kommune.no
www.lunner.kommune.no
k247.lunner.kommune.no
bibliotek.lunner.kommune.no
lunner.kommune.no
bibliotek.lunner.kommune.no
webmail.lunner.kommune.no
lunner.kommune.no
lunner.kommune.no
bibliotek.lunner.kommune.no
www.lunner.kommune.no
lunner.kommune.no
bibliotek.lunner.kommune.no
bibliotek.lunner.kommune.no
www.nordrefollobibliotek.no
k247.lunner.kommune.no
interactintegrasjoner.lunner.kommune.no
bibliotek.lunner.kommune.no
mpinternetserver.lunner.kommune.no
stilling.lunner.kommune.no
bibliotek.lunner.kommune.no
bibliotek.lunner.kommune.no
bibliotek.lunner.kommune.no
www.lunner.kommune.no

Certificate

The complete raw certificate details for bibliotek.lunner.kommune.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGujCCBaKgAwIBAgISBPdibGijd57pnO5Hxl7n2GZ5MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMDMwNTIxMTVaFw0yNDA0MDIwNTIxMTRaMCYxJDAiBgNVBAMT
G2JpYmxpb3Rlay5sdW5uZXIua29tbXVuZS5ubzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANTBAE6Gy2ZX6jUXsCgmqc3jwOkN6Im1ZbCjHjbC3dSD0xT9
ExmxYDAgeStw1M3rD8w5xgbwRdmPoIW0Mwnv2ocJAsXk04WY553r6krNOIL8epfM
5ulevQFrmNouGQ6omzd0LGSUsl1gFPy3vp/K7WIxwaasEtO9+qLFjv00mASJtdxE
tM7jaIAk2RRV8w0I85sNQFftO2YpX6HRcGbabaMjo+CLb2gLF4WPxO7AVeZfuTa7
BhZqdepJcivw+hYcbTh7luDogYahPP6MC3v1aCDopffefV57R/455zQmrDB5So2A
G0L5Kon6P/o8Z7RxHtIMWAFlCpO/DsUySAY0OwUCAwEAAaOCA9QwggPQMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUMqtbPdS9nd/qSjonJXuq2ryuAZ4wHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggHcBgNVHREEggHTMIIBz4IbYmlibGlvdGVrLmx1bm5l
ci5rb21tdW5lLm5vghBob2xlYmlibGlvdGVrLm5vggpsaWVyYmliLm5vghVsb3Jl
bnNrb2diaWJsaW90ZWsubm+CF21pZHRmeWxrZWJpYmxpb3Rla2V0Lm5vghRuZXNv
ZGRlbmJpYmxpb3Rlay5ub4IXbm9yZHJlZm9sbG9iaWJsaW90ZWsubm+CCm9laWti
aWIubm+CIXRqZW5lc3Rlci52aWtlbmZ5bGtlc2JpYmxpb3Rlay5ub4Icd3d3Lmhh
bGxpbmdkYWxzYmlibGlvdGVrYS5ub4IZd3d3LmxvcmVuc2tvZ2JpYmxpb3Rlay5u
b4Ibd3d3Lm1pZHRmeWxrZWJpYmxpb3Rla2V0Lm5vghh3d3cubmVzb2RkZW5iaWJs
aW90ZWsubm+CG3d3dy5ub3JkcmVmb2xsb2JpYmxpb3Rlay5ub4IOd3d3Lm9laWti
aWIubm+CKXd3dy52aWtlbmZ5bGtlc2JpYmxpb3Rlay5hcmVuYS5heGllbGwuY29t
gh93d3cueG4tLXJsaW5nZW5iaWJsaW90ZWstdW9iLm5vght4bi0tcmxpbmdlbmJp
Ymxpb3Rlay11b2Iubm8wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5
AgQCBIH0BIHxAO8AdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAA
AYzN+7qkAAAEAwBHMEUCIQCaV1+9IMRPlnGAac0iMOwBpVF7fQFQQvYyhU6nA8Kn
BQIgY/otrGQ3SpE6fGb29qJsbEriFOMBVW2Zu3W4dI/RsM8AdQA7U3d1Pi25gE6L
MFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYzN+7ycAAAEAwBGMEQCICrG3UIlRtDC
9y6NeM4nWprLOJZ86TrI5cNhddzRNIhnAiAbKWqx2IDfl6QK6Ofyurd04yzOMF09
vgJ5EbYtd+VtNTANBgkqhkiG9w0BAQsFAAOCAQEAIWi5J9O4EBc7zpOjrrXa3VJ4
XR1R1jy2I9nbyNKiXPFg3shgz094vo4cBrBntpv/Xn2IMojt0USVsfBlhiOzewS0
dlGhr87yu/HBof+44i1ACBAmPTpn/fWxdR7Gx9c5g4FnTTQPA/1Ep+TTvwcgsn/A
M81mBbCamyzsTdXPJ/LYDDXWA23S1HUqfogoLaXrcSTy6CRzqkA8t3faUYgjVsGi
5qqy4K3XctvhZ+Y0HYyRTgfKSpvXpibZW6lVy7BLrTV2CUpD2QGcCIx5LRoJrPac
iS1m9jHWu0fLqcXaUFZhPpQeAEL9e+6M07W1fSs8TqkMZPdG6Z3rOV489tnCLQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MEATobLZlfqNRewKCap
zePA6Q3oibVlsKMeNsLd1IPTFP0TGbFgMCB5K3DUzesPzDnGBvBF2Y+ghbQzCe/a
hwkCxeTThZjnnevqSs04gvx6l8zm6V69AWuY2i4ZDqibN3QsZJSyXWAU/Le+n8rt
YjHBpqwS0736osWO/TSYBIm13ES0zuNogCTZFFXzDQjzmw1AV+07ZilfodFwZtpt
oyOj4ItvaAsXhY/E7sBV5l+5NrsGFmp16klyK/D6FhxtOHuW4OiBhqE8/owLe/Vo
IOil9959XntH/jnnNCasMHlKjYAbQvkqifo/+jxntHEe0gxYAWUKk78OxTJIBjQ7
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432629715590482240678130883218479393564281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 05:21:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 05:21:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bibliotek.lunner.kommune.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26857693090772013358982768080147218523141143218473055415317597620959599753968549208643636060864441730346816855425338899699404213603484416509264387695243777022140640710987914887745209545143635333602528740150835440249800582405386405458038162086339098491560548648369733724096695374001795417881904929846627270372070779474090746162024842716942078104129801157026177575478860795992350917069285438961803148650388673153524145119869300999602344738862773355410318250889583012420338378996700848702754907398488737244084732277595805694454029466988770219558904165816544626010040987770522114786903429695336056466863956152242356370181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32ab5b3dd4bd9ddfea4a3a27257baadabcae019e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (467 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliotek.lunner.kommune.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holebibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lierbib.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorenskogbibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midtfylkebiblioteket.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nesoddenbibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordrefollobibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oeikbib.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjenester.vikenfylkesbibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hallingdalsbiblioteka.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lorenskogbibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midtfylkebiblioteket.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nesoddenbibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordrefollobibliotek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oeikbib.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vikenfylkesbibliotek.arena.axiell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--rlingenbibliotek-uob.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rlingenbibliotek-uob.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ccdfbbaa400000403004730450221009a575fbd20c44f96718069cd2230ec01a5517b7d015042f632854ea703c2a705022063fa2dac64374a913a7c66f6f6a26c6c4ae214e301556d99bb75b8748fd1b0cf0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ccdfbbc9c000004030046304402202ac6dd422546d0c2f72e8d78ce275a9acb38967ce93ac8e5c36175dcd134886702201b296ab1d880df97a40ae8e7f2bab774e32cce305d3dbe027911b62d77e56d35
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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